Partitioned Secure Storage with User-Key Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current secure storage systems lack public partitions for storing associated software and documents, are vulnerable to data breaches due to combined user authentication and encryption processes, and do not support multiple user keys with differentiated access privileges.
Innovation Solution
A secure storage system with a public partition and private partitions that are encrypted and unlocked by user keys, featuring an authentication module, encryptor, and memory controller, allowing for user key validation and partition access control, including self-destructing partitions after incorrect key entries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in a single partition without public/private separation, then the storage structure is simple, but security is compromised and data sharing capability is limited
Solution Approach 1:
The storage device is divided into multiple partitions including a public partition and one or more private partitions. Each partition can be independently accessed and managed. The public partition stores data accessible to all users, while private partitions store data accessible only to specific users through authentication, thereby achieving both security and sharing capability.
Solution Approach 2:
Different partitions are assigned different access rights and security characteristics. The public partition has open access, while private partitions have restricted access controlled by user authentication. This allows each partition to have the appropriate quality of security based on its contents and access requirements.
2Reliability
If user authentication and encryption are combined in a single process, then the system is simpler to implement, but vulnerability to data breaches increases
Solution Approach 1:
The authentication process is segmented into distinct modules: an authentication module that handles user verification and an encryptor that handles data encryption. These separate modules operate independently, allowing each to be optimized for its specific function and reducing the risk of vulnerabilities in the combined process.
Solution Approach 2:
An authentication module serves as an intermediary between the user input and the encryption process. It validates user credentials and generates authentication tokens that are then used by the encryptor, separating the authentication logic from the encryption logic and improving overall security.
3Adaptability or versatility
If all partitions are accessible without differentiation, then access control is simple, but data sharing with differentiated privileges becomes difficult
Solution Approach 1:
The storage system is segmented into partitions with different access characteristics. Each partition can be configured with specific access rights, allowing fine-grained control over who can read or write to each partition. This enables differentiated access privileges while maintaining a relatively simple overall structure.
Solution Approach 2:
The access control mechanism is designed to be dynamic, allowing authentication and authorization parameters to be changed based on user roles, data sensitivity, and security policies. The system can adapt access permissions in real-time without requiring complex reconfiguration of the storage structure.
4Reliability
If private partitions are not obfuscated, then partition management is simpler, but security against unauthorized access is reduced
Solution Approach 1:
The private partitions are obfuscated by changing their detectable characteristics in the partition table. The partitions are marked with special attributes that cause them to appear as unavailable or inaccessible to unauthorized users, while remaining properly managed and accessible to authorized users. This provides security without significantly complicating legitimate access.
Data Source
AI summary
A secure data storage system is disclosed. The secure data storage system includes a processing module, a database, and an input module. The processing module includes an authentication module, an encryptor, and a memory controller, and is coupled to the database and input module. The database includes at least one public partition, at least one system partition, and one or more private partitions. The data on the one or more private partitions is encrypted and unlocked by a corresponding user key. The secure data storage system performs functions including: receiving a user key from a user input device for processing by the processing module; and validating the user key by the processing module.