PIECE Double Encryption for Unmapped Flash Storage Erasure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing sanitization methods for flash memory-based storage devices are inadequate as they fail to address data recovery in unmapped areas, and cryptographic erasure techniques are insufficient against advanced decryption methods, particularly with the rise of quantum computing.
Innovation Solution
Implementing Practical Itemized Encryption for Cryptographic Erasure (PIECE) by doubly encrypting data with random keys, which are then destroyed, rendering the encrypted data irrecoverable without the keys, using symmetric encryption algorithms like AES and random number generators.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic erasure with single encryption is used, then data protection is provided, but advanced decryption methods including quantum computing can still recover the data
Solution Approach 1:
The patent applies nested encryption by encrypting data with a first key to produce ciphertext, then encrypting that ciphertext with a second key to produce doubly-encrypted data. This nested structure ensures that even if one encryption layer is compromised by advanced decryption methods, the data remains protected by the second layer.
Solution Approach 2:
The patent destroys the encryption keys immediately after they are used to encrypt the data, before any potential decryption attempt can occur. This preliminary destruction of keys ensures that even sophisticated decryption methods cannot recover the original data without the already-destroyed keys.
2Productivity
If overwrite procedures are performed only on mapped areas, then write operations are efficient, but unmapped areas including defect areas and unallocated areas remain vulnerable to data recovery
Solution Approach 1:
The patent extends the encryption process to cover all storage areas including mapped areas, unmapped areas, defect areas, and unallocated areas. This universal application of encryption ensures that no area is left vulnerable to data recovery while maintaining efficiency by using cryptographic methods rather than physical overwriting of each area.
Solution Approach 2:
The patent replaces the mechanical overwrite process with cryptographic encryption. Instead of physically overwriting data in each area (which would be time-consuming and complex for all storage areas), the system uses encryption to render data unrecoverable, substituting a more efficient computational approach for the mechanical overwriting process.
3Reliability
If quantum random number generators are used, then key generation is highly secure, but the system complexity and cost increase
Solution Approach 1:
The patent allows flexibility in the randomness source by accepting multiple types of random number generators including quantum RNG, classical RNG, or hybrid approaches. This parameter change enables systems to balance security requirements against complexity and cost constraints by selecting the appropriate randomness source for their specific needs.
Data Source
AI summary
The arrangements disclosed herein relate to systems, apparatus, methods, and non-transitory computer readable media for determining to erase a plurality of ciphertext blocks stored in a memory device, in response to determining to erase the plurality of ciphertext blocks, performing a cryptographic erasure of the plurality of ciphertext blocks. The cryptographic erasure includes encrypting each of the plurality of ciphertext blocks with a random key and destroying the random key in response to encrypting each of the plurality of ciphertext blocks.