Offline Data Storage Device Authentication via Cached Credentials
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage devices require network connectivity to authenticate and change passwords, making it impossible to access or modify them when offline, which is a security and usability concern.
Innovation Solution
A data storage device configured with an offline occurrence value that allows a limited number of connections without network access, enabling authentication and password changes via a password reset code, even when disconnected from the remote device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the data storage device requires network connectivity to authenticate and change passwords, then security is improved through centralized authentication, but accessibility deteriorates when the network is unavailable
Solution Approach 1:
The system performs preliminary actions by establishing trust relationships and caching authentication credentials ( certificates, public keys, encrypted passwords) during online periods. This allows the data storage device to authenticate offline by using previously cached authentication data, resolving the contradiction between requiring network connectivity for security and needing offline accessibility.
2Ease of operation
If the data storage device allows unlimited offline connections, then accessibility is improved, but security deteriorates due to potential unauthorized access
Solution Approach 1:
The system dynamically adjusts authentication requirements based on connection context. Offline connections are permitted with cached credentials, but the system tracks connection occurrences and requires re-authentication after a threshold is reached. This dynamic approach balances accessibility with security by allowing offline operations while preventing unlimited unauthorized access.
Solution Approach 2:
The system implements feedback mechanisms by monitoring offline connection occurrences and comparing them against configured thresholds. When the threshold is exceeded, the system triggers re-authentication requirements or locks the device, providing feedback that controls access based on usage patterns and prevents security deterioration from unlimited connections.
3Reliability
If the system tracks and limits offline connection occurrences, then security is improved by preventing unauthorized access, but device complexity increases
Solution Approach 1:
The system performs preliminary configuration of authentication parameters including offline connection thresholds, encrypted password storage, and certificate validation rules during online setup. This preliminary action reduces runtime complexity by pre-establishing security policies that can be automatically enforced without complex real-time decision-making, balancing security with manageable device complexity.
Data Source
AI summary
Systems, devices, and/or computer-implemented methods for secure offline data storage are provided herein. More particularly, a system is provided that permits access to a data storage device when offline from various components of the system. Furthermore, the disclosed system may permit the re-setting of authentication passwords/PINs for the data storage devices, even when such data storage devices are offline from other components of the system.