In-line Security Device for Automated Cryptographic Key Transfer

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data storage devices face user experience issues due to cumbersome password and key setup processes, leading to insecure storage and exposure of confidential data, as technically unskilled users often find encryption technologies difficult to manage.

Innovation Solution

An in-line security device with connectors, a pass-through circuit, and a communication interface is used to transfer cryptographic key material between a host device and a data storage device, facilitating secure data storage by enabling encryption and decryption, and incorporating features like biometric readers for enhanced security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encryption is implemented for secure data storage, then data security is improved, but user complexity and setup difficulty increase

Engineering Contradiction:
Improvedata securityVSAvoidsetup complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a security device as an intermediary component between the host device and storage device. This security device automatically handles cryptographic key material transfer and authentication, eliminating the need for users to manually configure encryption settings. The intermediary absorbs the complexity of encryption management while presenting a simplified interface to users.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The security device performs self-service by automatically transferring cryptographic key material and authenticating communication between host and storage devices without user intervention. The system handles encryption setup, key exchange, and authentication autonomously, allowing users to simply connect devices without dealing with complex encryption configuration.

Inventive Principle:
Principle #25Self-service

2Reliability

If manual password and key entry is required, then data protection is improved, but ease of operation deteriorates

Engineering Contradiction:
Improvedata protectionVSAvoiduser operation simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The security device acts as a mediator that automatically handles authentication and key transfer. Instead of requiring users to manually enter passwords or keys, the security device performs these operations autonomously during the device connection process, maintaining strong authentication while dramatically improving ease of operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces manual mechanical operations (typing passwords, copying keys) with automated electronic processes. The security device uses electronic authentication mechanisms and automatic key transfer protocols to substitute for manual user input, making the process as simple as physically connecting the devices.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Ease of operation

If cryptographic key material is stored insecurely, then accessibility is improved, but security deteriorates

Engineering Contradiction:
ImproveaccessibilityVSAvoidkey security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The security device serves as a trusted intermediary that securely stores and manages cryptographic key material. It provides a secure environment for key storage while enabling easy access to authorized devices. The security device establishes secure communication channels and authenticates devices before allowing key material transfer, ensuring both security and accessibility.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11727156B2Security device for a data storage device
Publication Date: 2023.08.15 SANDISK TECHNOLOGIES LLC
  • US11727156B2 patent drawing
  • US11727156B2 patent drawing
  • US11727156B2 patent drawing

AI summary

An in-line security device to transfer cryptographic key material, the device comprising: a first connector configured to connect, via wire, with a host device; a second connector configured to connect, via wire, with a data storage device; a pass-through circuit between the first connector and the second connector to facilitate data communication between the host device and the data storage device; and a communication interface to send cryptographic key material to the data storage device via the second connector.