Interlocking Passwords with Encryption Keys via Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current storage devices, particularly those using NAND flash memory, face challenges in securely managing data encryption keys and authenticating access with plaintext passwords, as they lack robust mechanisms to prevent unauthorized access and efficiently manage key storage.
Innovation Solution
Implementing a media controller that interlocks plaintext passwords with data encryption keys through a hashing mechanism, where a hashed version of the password is stored and compared to authenticate user access, ensuring secure access to encrypted storage devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If plaintext passwords are stored with data encryption keys, then access authentication is simplified, but security is compromised as passwords become vulnerable to unauthorized access
Solution Approach 1:
The patent introduces a hashing mechanism as an intermediary between the plaintext password and the data encryption key. The hash function transforms the plaintext password into a hashed value that is stored alongside the encryption key. During authentication, the system hashes the provided password and compares it with the stored hashed value, eliminating the need to store and transmit plaintext passwords while maintaining secure access control.
2Reliability
If a hashing mechanism is implemented to secure passwords, then security is improved, but device complexity increases
Solution Approach 1:
The patent implements a hashing mechanism that creates a copied, transformed version of the password (the hashed value) for storage and comparison purposes. Instead of storing the original plaintext password, the system stores the hashed copy. During authentication, the provided password is hashed again and compared with the stored hashed copy. This approach enhances security while adding minimal complexity, as the hashing function operates independently of the core encryption and storage mechanisms.
Data Source
AI summary
Described embodiments provide for authenticating a user request for access to at least a portion of an encrypted storage device. First, the request for access to at least a portion of the encrypted storage device is received. The request includes a plaintext password. A hash module generates a hashed version of the received plaintext password based on an authentication hash key. A hashed value of the generated plaintext password is retrieved from a key storage. A hash comparator compares the hashed version of the received plaintext password with the retrieved hashed value of the generated plaintext password. If the hashed version of the received plaintext password and the retrieved hashed value of the generated plaintext password are equal, the user is authenticated for access to at least a portion of the encrypted storage device. Otherwise, the user is denied access to the encrypted storage device.