Multi-Stage Handshake Authentication for Memory Storage Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current memory storage devices rely on simple passwords for host system authentication, making them vulnerable to unauthorized access and data theft or system parameter manipulation by attackers.
Innovation Solution
Implementing a multi-stage authentication process using encrypted information exchanged between the memory storage device and host system through first and second handshake operations, with distinct authentication information and encryption algorithms to verify the host system's legitimacy before allowing developer command transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If simple passwords are used for authentication, then ease of operation is improved, but security reliability deteriorates
Solution Approach 1:
The authentication process is divided into multiple distinct stages (first handshake operation, second handshake operation, developer command transmission stage), each with its own authentication information and encryption algorithm. This segmentation allows the system to maintain simple password-based authentication for basic operations while implementing stronger multi-stage authentication for sensitive developer commands, thus resolving the contradiction between ease of operation and security reliability.
2Reliability
If multi-stage authentication with encrypted information is implemented, then authentication security is improved, but device complexity increases
Solution Approach 1:
The complex authentication process is segmented into distinct handshake operations and stages, each handling specific authentication information. This segmentation organizes the complexity into manageable, modular components that can be implemented and maintained separately, reducing the overall system complexity while maintaining high security standards.
Solution Approach 2:
Authentication information and encryption algorithms are established in advance during the handshake operations before actual data transmission or developer command execution. This preliminary action ensures that security measures are pre-configured and validated, reducing the complexity of real-time authentication decisions during critical operations.
3Object-affected harmful factors
If distinct authentication information and encryption algorithms are used for different stages, then security against unauthorized access is improved, but processing time increases
Solution Approach 1:
The first and second handshake operations perform authentication information exchange and algorithm establishment in advance, before the actual developer command transmission stage. This preliminary action ensures that when sensitive operations occur, the authentication framework is already in place, reducing the time penalty for security verification during critical operations.
Solution Approach 2:
Different authentication algorithms are applied periodically at different stages (first handshake, second handshake, developer command stage) rather than continuously at every operation. This periodic application of distinct authentication methods provides strong security against unauthorized access while minimizing the time overhead by not applying all authentication layers to every single operation.
Data Source
AI summary
A memory storage system is provided according to an exemplary embodiment of the disclosure. The memory storage system includes a host system and a memory storage device. In a first handshake operation, the memory storage device transmits first encrypted information corresponding to first authentication information to the host system, and the host system transmits second encrypted information corresponding to the first authentication information to the memory storage device. In a second handshake operation, the memory storage device transmits third encrypted information corresponding to second authentication information to the host system, and the host system transmits fourth encrypted information corresponding to third authentication information to the memory storage device based on the third encrypted information. The third authentication information is configured to encrypt data transmitted between the host system and the memory storage device in a developer command transmission stage.