Peripheral Device Security via Shared Secret Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Peripheral devices, such as removable nonvolatile storage devices and printers, face challenges in secure access and data protection, particularly when unauthorized users may access them, and backup processes are hindered by device usage and responsiveness issues.

Innovation Solution

A system and method that establishes a shared secret between a computer system and a peripheral device, using a hashing algorithm to generate a shared secret from a pass phrase, which locks the device and requires verification for access, incorporating inactivity timers and timelocks to manage access requests and ensure security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If the peripheral device remains attached to the computer system for backup purposes, then backup functionality is improved, but security against unauthorized access deteriorates

Engineering Contradiction:

Improvebackup functionalityVSAvoidunauthorized access

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary actions by establishing a shared secret between the computer system and peripheral device before the device is locked. This shared secret enables automatic unlocking during backup operations, allowing the device to remain attached while secured against unauthorized access. The shared secret is established in advance and stored securely, enabling the system to automatically authenticate and unlock the device when needed for backups.

Inventive Principle:

Principle #10Preliminary action

2Object-affected harmful factors

If the peripheral device is locked to prevent unauthorized access, then security is improved, but accessibility for authorized users deteriorates

Engineering Contradiction:

Improveunauthorized access preventionVSAvoidauthorized access

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The system implements self-service by enabling the computer system to automatically unlock the peripheral device using the pre-established shared secret. When a backup operation is initiated, the system automatically authenticates and unlocks the device without requiring manual intervention from the user. This maintains security while ensuring authorized users can access the device seamlessly for approved operations.

Inventive Principle:

Principle #25Self-service

3Object-affected harmful factors

If the removable nonvolatile storage device is locked in a secured housing, then security is improved, but portability and usability deteriorates

Engineering Contradiction:

Improvedata theft preventionVSAvoidportability

Core Design Contradiction:

Object-affected harmful factorsVSAdaptability or versatility

Solution Approach 1:

The invention replaces the mechanical security system (secured housing and cable locks) with an electronic authentication system based on shared secrets. Instead of physically restraining the device, the system uses cryptographic authentication to secure access. The peripheral device contains a lock mechanism that can be electronically unlocked using the shared secret, eliminating the need for physical locks while maintaining security and preserving portability.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

4Productivity

If the backup application runs when the user is at work, then productivity is improved, but system responsiveness deteriorates

Engineering Contradiction:

Improvebackup execution timingVSAvoidsystem responsiveness

Core Design Contradiction:

ProductivityVSEase of operation

Solution Approach 1:

The system performs preliminary actions by pre-establishing the shared secret and configuring automatic unlock functionality before backup operations are needed. This allows backup applications to run automatically during business hours without requiring user intervention or causing system unresponsiveness. The device is already authenticated and ready for immediate backup operations, eliminating delays and manual setup requirements.

Inventive Principle:

Principle #10Preliminary action

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Effectively secures peripheral devices by ensuring only authorized access and preventing unauthorized use, while optimizing backup processes by allowing access only when the device is not in use, thus enhancing data protection and system responsiveness.

Implementation Method 1

A shared secret is then generated by processing the received pass phrase using a hashing algorithm. The shared secret is a result of the hashing algorithm.

Methodology Applied

Scientific EffectHashing algorithm:

Data Source

PatentUS8539572B2System and method for secure usage of peripheral devices using shared secrets

Publication Date: 2013.09.17 LENOVO SWITZERLAND INTERNATIONAL GMBH

AI summary

A system, method, and program product is provided that establishes a shared secret between a computer system and a peripheral device such as a removable nonvolatile storage device or a printer. After establishing the shared secret, the peripheral device is locked. After the peripheral device is locked, an unlock request is received and the shared secret is sent to the peripheral device. The peripheral device then attempts to verify the shared secret. If the shared secret is successfully verified, then the peripheral device is unlocked allowing use of the device by using an encryption key that is made available by the verified shared secret. On the other hand, if the shared secret is not verified, then the peripheral device remains locked and use of the device is prevented.