Hard Disk Drive Secure Data Erasure via Encrypted Random Number Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional hard disk drives face security vulnerabilities as passwords are transmitted via a bus and can be intercepted, leading to potential data leakage during security-erase commands.
Innovation Solution
A method and apparatus that securely erase data by using a security-erase algorithm and associated key to decrypt an encrypted random number, ensuring that only authorized commands execute the erase operation, preventing unauthorized data access and leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If passwords are transmitted via a bus for security commands, then the host system can control the hard disk drive, but the password may be intercepted and hacked by bus monitoring tools
Solution Approach 1:
The patent introduces an encrypted random number as an intermediary between the host system and hard disk drive. Instead of transmitting plain passwords, the system uses encrypted random numbers that require decryption with stored keys to verify authenticity. This intermediary mechanism allows control capability to be maintained while preventing direct password interception and hacking through the bus.
2Productivity
If conventional security commands are used, then the hard disk drive can execute security operations, but data leakage may occur during the process
Solution Approach 1:
The patent implements preliminary verification by decrypting and validating the encrypted random number before executing any security operations. The hard disk drive stores verification keys and algorithms in advance, and performs authentication of the incoming encrypted random number before proceeding with security-erase or security-lock commands. This preliminary action ensures that only authenticated commands are executed, preventing data leakage while maintaining operational productivity.
3Reliability
If passwords are stored in the hard disk drive for verification, then security commands can be authenticated, but the stored password becomes a target for hacking
Solution Approach 1:
The patent extracts the password from the transmission and storage process entirely. Instead of storing or transmitting actual passwords, the system uses encrypted random numbers that are generated and verified without ever exposing the underlying secret. The verification keys are stored in the hard disk drive, but they are used only for decrypting and verifying encrypted random numbers, not for storing or transmitting actual passwords. This extraction eliminates the hacking target while maintaining reliable verification.
Data Source
AI summary
A method of and apparatus for protecting data in a data storage system. A method of securely erasing data stored in a data storage system includes: determining whether a security-erase command is received together with a random number and an encrypted random number; decrypting the encrypted random number using a security-erase algorithm and an associated key when the security-erase command is received; determining whether the decrypted random number is identical to the received random number; and executing the security-erase command when the decrypted random number is identical to the received random number, and stopping the execution of the security-erase command when the decrypted random number is not identical to the received random number.