I/O Command Control Apparatus for Storage Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage devices lack effective mechanisms to prevent invalid access, which can lead to data destruction and theft, especially when malicious programs infiltrate host apparatuses.
Innovation Solution
An I/O command control apparatus is introduced, equipped with an I/O command interface, authorization information receiving and verifying units, and a trust base control unit, which ensures that only authorized I/O commands are executed by verifying the integrity and origin of authorization information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authorization information is added to I/O commands, then security against invalid access is improved, but device complexity increases
Solution Approach 1:
The authorization control function is segmented from the storage control function. The I/O command control apparatus handles authorization verification separately from the storage device, allowing the storage device to remain simple while adding security capabilities at the command control level.
Solution Approach 2:
An I/O command control apparatus is introduced as an intermediary between the host apparatus and the storage device. This mediator verifies authorization information and controls whether I/O commands are executed, preventing direct complex authorization logic from being embedded in the storage device.
2Reliability
If authorization information verification is performed, then prevention of data destruction and theft is improved, but processing time increases
Solution Approach 1:
Authorization information is verified in advance before the storage device executes the I/O command. The I/O command control apparatus checks the authorization status beforehand, ensuring that only authorized commands reach the storage device, thereby preventing data destruction and theft while maintaining efficient command processing.
3Object-affected harmful factors
If trust base control unit is added to verify authorization information, then security against malicious programs is improved, but device complexity increases
Solution Approach 1:
The I/O command control apparatus serves as an intermediary that includes the trust base control unit for verifying authorization information. This mediator handles the complexity of trust verification and malicious program detection separately from the storage device, protecting against harmful factors without embedding complex security logic in the storage device itself.
Data Source
AI summary
According to one embodiment, an I/O command control apparatus receives authorization information. The authorization information indicates whether or not to permit an execution of an I/O command. The apparatus verifies whether the received authorization information is not tampered with, and whether the received authorization information is issued from a known authorization server. In a case where the authorization information is not tampered with, and is issued from the known server, the apparatus verifies whether or not the authorization information permits to execution of the I/O command. The apparatus permits or prohibits the execution of the I/O command or execution of a control command generated from the I/O command, based on the authorization result.