Removable Storage Medium Device Authentication for Medical Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional removable data storage media in medical environments fail to meet requirements for data security and transmission speed, leading to incomplete data transmission, data loss, and the risk of malware transmission between medical devices and computers.
Innovation Solution
A removable data storage medium with a serial interface, non-volatile storage, and a memory controller that includes a receiving unit to authenticate medical devices via a device identification feature, granting full access only to qualified devices that meet a predetermined criterion, thereby limiting access and preventing malware transmission.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional removable data storage media are used in medical environments, then ease of operation and data exchange capability are maintained, but data security deteriorates and malware transmission risk increases
Solution Approach 1:
The patent applies preliminary action by implementing device identification and authentication before allowing data access. The memory controller checks whether the connected device is a medical device before permitting read/write operations, preventing malware transmission in advance while maintaining operational simplicity for authorized devices
Solution Approach 2:
The patent uses an intermediary approach by introducing a memory controller as a mediator between the removable storage medium and the connected device. This controller authenticates devices and controls access rights, enabling secure data exchange without requiring complex security measures at the storage medium level
2Reliability
If access control mechanisms are implemented to improve data security, then malware transmission is prevented, but device complexity increases
Solution Approach 1:
The patent merges the access control functionality directly into the memory controller, combining data storage, device identification, authentication, and access rights management in a single integrated component. This approach improves data security while avoiding the complexity of separate security systems
Solution Approach 2:
The memory controller performs self-service by autonomously authenticating connected devices and managing access rights without external intervention. The controller automatically checks device identification features and grants or restricts access based on predetermined criteria, simplifying the overall system architecture
3Reliability
If authentication procedures are added to verify device identity, then data security is enhanced, but data transmission speed may be reduced
Solution Approach 1:
The patent applies preliminary action by performing device identification and authentication before data transmission begins. The memory controller checks the device identification feature in advance, establishing security clearance before actual data transfer, thereby minimizing impact on transmission speed
Solution Approach 2:
The memory controller performs authentication autonomously and efficiently, using built-in identification features to quickly verify device identity. This self-service approach eliminates the need for complex external authentication protocols, maintaining fast data transmission speeds while ensuring security
Data Source
AI summary
A removable data storage medium including a serial interface; a non-volatile storage medium; a memory controller controlling data transmission between the serial interface and the non-volatile storage medium, a receiving unit; and a write protection unit; wherein the receiving unit is configured to receive a device identification feature from a medical device that can be connected to the removable data storage medium; and the write protection unit is configured to compare the device identification feature with a predetermined internal criterion, and, if the device identification feature complies with the predetermined internal criterion, permits read and write access from the medical device to the non-volatile storage medium and, if the device identification feature does not comply with the predetermined internal criterion, limits access of the medical device to the non-volatile storage medium to read access.