Removable Storage Medium Dynamic Partition Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for exchanging data between computer stations without network connections, such as using USB keys, face challenges in ensuring data integrity and security, especially when multiple stations with unknown integrity are involved, and are impractical for large numbers of stations due to the need for multiple media and lack of protection against loss or theft.
Innovation Solution
A removable data storage medium with an onboard microcontroller or computer hardware platform that dynamically adapts access permissions, allowing read/write access to specific storage volumes based on connection mode and authentication, locking volumes inaccessible to unauthorized stations, and using mutual authentication to secure data access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If one medium per target workstation is used to exchange data, then data security is improved, but device complexity and operational difficulty increase due to the need to manage multiple media
Solution Approach 1:
The storage medium is divided into multiple logical partitions, with each partition dedicated to a specific host station. The microcontroller identifies the connected host and automatically mounts only the corresponding partition, making other partitions inaccessible. This segmentation allows a single physical medium to serve multiple workstations securely without requiring multiple separate media.
Solution Approach 2:
A single removable storage medium is designed to serve multiple host stations universally. The microcontroller enables the medium to adapt its functionality based on which host is connected, dynamically providing appropriate access permissions for each host without requiring separate dedicated media for each workstation.
2Ease of operation
If data is stored on removable media for distribution to multiple stations, then data accessibility is improved, but data security deteriorates because data on lost or stolen media is accessible to unauthorized users
Solution Approach 1:
Each host station is assigned a specific partition with localized access rights. The microcontroller implements host-specific authentication and mounting logic, ensuring that even if the physical medium is accessed by unauthorized users, only the authenticated host can mount and access its designated partition. Other partitions remain inaccessible without proper authentication.
Solution Approach 2:
The system performs preliminary authentication of the host station before mounting any data partitions. The microcontroller verifies the host's identity and establishes access permissions in advance, preventing unauthorized access to data even if the physical medium is stolen or lost. Data remains protected until proper authentication occurs.
3Productivity
If multiple host stations access the same removable medium, then data distribution efficiency is improved, but the risk of data compromise increases due to unknown integrity of host stations
Solution Approach 1:
The system dynamically adjusts access permissions based on which host station is currently connected. The microcontroller continuously monitors connection status and automatically mounts or unmounts partitions according to the authenticated host's identity. This dynamic control ensures that only the authorized host can access data at any given time, reducing the risk of data compromise while maintaining efficient distribution.
Solution Approach 2:
The microcontroller implements a feedback mechanism that monitors host connection status and automatically adjusts partition mounting status accordingly. When a host connects and authenticates, the system feedbacks by mounting the appropriate partition; when the host disconnects, the partition is unmounted. This closed-loop control prevents unauthorized access while maintaining efficient data distribution to authorized hosts.
Data Source
AI summary
A computer method for managing (22) a removable data storage medium (1) comprising: a) transmitting to a host station (202) configuration data specific to a current mode in which the host station (202) has read and write access to a first dedicated storage volume of the medium (1) and does not have read or write access to previously locked and/or hidden storage volumes of the medium (1); then b) upon receipt of an imminent disconnection signal from the medium (1) and/or upon receipt of a second connection initialization signal from a host station (201; 202; 203), locking and/or hiding the first dedicated storage volume so that said first volume becomes inaccessible to any host station (201; 202; 203) to which the medium (1) would now be connected; c) unlocking and/or making visible a second dedicated storage volume.