Key Management Device for Secure Storage Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Self-encrypting drive devices (SEDs) are vulnerable to data decryption if stolen, as the encryption key is stored within the device, and existing solutions for secure key management are either costly or vulnerable to man-in-the-middle attacks.
Innovation Solution
A key management system that separates the encryption key from the SED, using a key insertable storage device (KIS device) that requires both a PIN-derived key and a system-managed key to function, with secure key encryption and transmission protocols to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If the encryption key is stored within the SED device, then the device can perform self-encryption, but the device becomes vulnerable to data decryption if stolen
Solution Approach 1:
The encryption key is segmented into two parts: a device-generated key stored in the SED, and an external key managed by the key management device. Both parts are required to decrypt data, so even if the SED is stolen, the attacker cannot decrypt data without the external key component.
Solution Approach 2:
A key management device is introduced as an intermediary to manage the external key. This mediator handles key generation, storage, and distribution, separating the critical key management function from the SED device itself and adding a layer of security control.
2Reliability
If external key management is implemented, then security is improved, but system complexity and cost increase
Solution Approach 1:
The key management device is designed to serve multiple functions: generating encryption keys, storing external key components, managing key distribution to multiple SED devices, and handling key updates. This multi-functionality consolidates what could be multiple separate systems into a single device, reducing overall complexity.
Solution Approach 2:
The SED device automatically generates its own key component and stores it locally without requiring manual intervention. The key management device automatically manages key distribution and updates, reducing operational complexity and eliminating the need for manual key management processes.
3Ease of manufacture
If the key management device transmits keys through the host, then the system is easier to implement, but the risk of man-in-the-middle attacks increases
Solution Approach 1:
The key management device establishes a direct communication channel with the SED device, acting as an intermediary that bypasses the host for key transmission. This direct channel is secured with authentication protocols, preventing man-in-the-middle attacks while maintaining implementation simplicity through standardized interfaces.
Solution Approach 2:
Authentication and encryption protocols are applied in advance to the key transmission channel between the key management device and SED device. This preliminary security measure prevents potential attacks before they can occur, blocking man-in-the-middle attempts while keeping the transmission path straightforward.
Data Source
AI summary
According to one embodiment, a key management device includes a storage and a server. The storage includes a first nonvolatile memory, and a first controller configured to encrypt, using a first media encryption key, data from a host, and store the encrypted data in the first nonvolatile memory. The server includes a second nonvolatile memory storing a first key, and a second controller configured to transmit the first key from the second nonvolatile memory to the storage without passing through the host. The first controller is configured to generate the first media encryption key using the first key.