Pre-authorized Data Storage Encryption via Manager Device
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage devices with encryption technologies are cumbersome for technically unskilled users to set up and manage, leading to insecure storage of keys and passwords, resulting in unused encryption and exposed confidential data.
Innovation Solution
A data storage device with an access controller and cryptography engine that uses a manager device to pre-authorize user devices, enabling secure decryption of encrypted data through a challenge-response mechanism with public and private keys, ensuring only authorized devices can access the data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is used to secure data storage, then data security is improved, but setup and management becomes cumbersome for technically unskilled users
Solution Approach 1:
The system enables unskilled users to securely manage encryption through a mobile device interface that automatically handles key generation, storage, and management. The mobile device serves as a secure key vault that users can access and manage without needing to understand cryptographic concepts, making the system self-service friendly while maintaining strong encryption security
Solution Approach 2:
A mobile device acts as an intermediary between the user and the encryption system. It stores cryptographic keys securely and manages the encryption/decryption process, shielding users from technical complexity while ensuring data security through proper cryptographic key management
2Ease of operation
If keys and passwords are stored for encryption access, then data accessibility is improved, but security is compromised due to insecure storage
Solution Approach 1:
The system replaces traditional mechanical/password-based key storage with a cryptographic system using public-key infrastructure. Keys are stored encrypted using asymmetric cryptography, where a public key protects the private key, eliminating the need for users to memorize or securely store complex passwords while maintaining both accessibility and security
3Reliability
If a manager device is used to pre-authorize user devices, then device authorization security is improved, but the authorization process complexity increases
Solution Approach 1:
The manager device performs preliminary authorization by pre-generating and storing encrypted authorization data for user devices before they need access. This preliminary setup creates a secure foundation that simplifies subsequent access, as user devices can be quickly authenticated using pre-configured cryptographic credentials without complex real-time authorization procedures
Data Source
AI summary
Disclosed herein is a data storage device. A data port transmits data between a host computer system and the data storage device. A non-volatile storage medium stores encrypted user content data and a cryptography engine connected between the data port and the storage medium uses a cryptographic key to decrypt the encrypted user content data. The access controller receives from a manager device a public key. The public key is associated with a private key stored on a device to be authorized. The controller determines a user key that provides access to the cryptographic key; encrypts the user key based on the public key and such that the user key is decryptable based on the private key stored on the device to be authorized; and stores, on the data store, authorization data indicative of the encrypted user key.