IoT Authentication for Portable Mass Storage Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Portable mass storage devices like hard drives are prone to loss, theft, or misplacement due to their small size and portability, lacking effective authentication mechanisms for secure usage and tracking.

Innovation Solution

An Internet of Things (IoT) platform with secure authentication methods using IoT devices and hubs, enabling secure pairing, data encryption, and usage tracking through unique identifiers and secure communication channels, ensuring only authorized access to the mass storage devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If portable mass storage devices are made small and portable for ease of use, then ease of operation is improved, but security and tracking capability deteriorate

Engineering Contradiction:
ImproveportabilityVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces an IoT authentication platform as an intermediary system between the portable storage device and the user/computer. This platform includes authentication servers, mobile applications, and hardware tokens that mediate the security verification process. The portable device itself remains small and portable, but the security functions are distributed to intermediary systems (authentication server, mobile app, hardware token) that work together to provide secure authentication, tracking, and authorization without requiring the storage device to be large or complex.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Device complexity

If portable mass storage devices lack authentication mechanisms to maintain simplicity, then device complexity is reduced, but security and tracking capability deteriorate

Engineering Contradiction:
Improveauthentication mechanismVSAvoidsecurity
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent extracts the authentication and security management functions from the portable storage device itself and places them in separate, specialized systems. The storage device maintains its simple form factor, while authentication servers, mobile applications, and hardware tokens handle the complex security operations. This extraction allows the storage device to remain simple and portable while still providing robust security through external authentication mechanisms.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The authentication platform serves as an intermediary that handles complex security operations externally. Rather than embedding complex authentication hardware in the portable device, the system uses intermediary components (authentication server, mobile app with camera for visual verification, hardware token) to provide security while keeping the storage device itself simple.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Ease of manufacture

If portable mass storage devices are made inexpensive for mass market appeal, then ease of manufacture is improved, but security implementation capability deteriorates

Engineering Contradiction:
ImprovecostVSAvoidsecurity
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The patent uses an intermediary authentication platform that provides centralized security services to multiple inexpensive storage devices. Rather than requiring each device to have expensive security hardware, the authentication server and mobile application provide security services to many devices. The hardware token component is simple and inexpensive, but the comprehensive security capability is provided by the intermediary authentication system that serves multiple devices.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The authentication platform provides universal security services that can protect multiple different portable storage devices from a single authentication server. The mobile application and hardware token combination serves as a universal key that can authenticate access to various devices, allowing inexpensive storage devices to benefit from robust security without requiring expensive device-specific security implementations.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9917824B2Apparatus and method for Internet of Things (IoT) authentication for a mass storage device
Publication Date: 2018.03.13 AFERO INC
  • US9917824B2 patent drawing
  • US9917824B2 patent drawing
  • US9917824B2 patent drawing

AI summary

An apparatus and method are for providing security to a mass storage device using an Internet of Things (IoT) system. For example, one embodiment of a system comprises: a mass storage device to store data; an Internet of Things (IoT) device associated with the mass storage device; an IoT service comprising a database to store an association between the mass storage device and the IoT device; wherein to authenticate and unlock the mass storage device for use with a data processing device, the IoT device is to establish an encrypted communication channel with the IoT service and transmit a unique identification (ID) code to the IoT service uniquely identifying the IoT device to the IoT service; the IoT service to authenticate the IoT device using the unique ID code and to responsively transmit an unlock command over the encrypted communication channel to unlock the mass storage device; and the IoT device to responsively unlock the mass storage device upon receipt of the unlock code.