Secure Microcontroller Authentication for Cloud Storage Controllers

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In cloud computing environments, storage security is compromised due to unauthorized access and the inability of customers to remotely verify the integrity and confidentiality of storage controllers, leading to potential data breaches and compromised service quality.

Innovation Solution

Implementing a secure microcontroller interfaced with storage controllers to authenticate platforms and register with an authentication server, establishing a trusted key pair for attestation and obtaining signature data to ensure the integrity and confidentiality of storage operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If storage controllers are used to meet client storage requirements in cloud environment, then storage capacity and accessibility are improved, but security and integrity verification capabilities deteriorate

Engineering Contradiction:

Improvestorage capacityVSAvoidsecurity

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces an authentication server as an intermediary between the client device and storage controller. This server mediates the authentication process by receiving authentication requests from the client, verifying the storage controller's identity through signature data, and returning authentication results. This intermediary mechanism enables security verification without compromising the storage controller's primary function, thus resolving the contradiction between storage versatility and security reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional trust-based mechanical access control with cryptographic verification mechanisms. Instead of relying on physical security or administrative trust, the system uses digital signature data, public-private key pairs, and cryptographic protocols to verify storage controller authenticity. This substitution enables remote verification of storage integrity while maintaining cloud storage accessibility, resolving the security-trust contradiction.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Adaptability or versatility

If cloud administrator is given full privileges to configure virtual servers on any storage controller, then system flexibility and provisioning capability are improved, but security risk and vulnerability to malicious acts increase

Engineering Contradiction:

Improveprovisioning capabilityVSAvoidsecurity risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary authentication actions before allowing cloud administrator access to storage controllers. The authentication server verifies the storage controller's identity and integrity through signature data and cryptographic protocols before permitting any configuration operations. This preliminary verification ensures that even administrators can only access properly authenticated storage controllers, preventing malicious acts while maintaining provisioning flexibility.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent establishes a feedback mechanism where the authentication server continuously verifies storage controller authenticity through authentication protocols. Before each configuration operation, the system checks the storage controller's signature data and authentication status. This feedback loop ensures that administrators' actions are constrained by real-time security verification, allowing flexible provisioning while preventing unauthorized or malicious operations.

Inventive Principle:

Principle #23Feedback

3Device complexity

If traditional authentication methods are used without secure microcontroller interfacing, then system complexity is reduced, but authentication reliability and data protection capabilities deteriorate

Engineering Contradiction:

Improvesystem complexityVSAvoidauthentication reliability

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The patent implements a nested authentication architecture where the authentication protocol is embedded within the existing cloud storage system. The authentication server integrates with the cloud infrastructure, and the cryptographic verification processes are nested within the normal storage access workflows. This nested structure adds authentication reliability without requiring complete system redesign, thus managing complexity while improving security.

Inventive Principle:

Principle #7Nested doll (Nesting)

Data Source

PatentUS9055052B2Method and system for improving storage security in a cloud computing environment

Publication Date: 2015.06.09 NETAPP INC

AI summary

A method of improving storage security in a cloud environment includes interfacing a secure microcontroller with a storage controller associated with a client device in the cloud environment to authenticate a platform associated with the storage controller and registering the storage controller with an authentication server configured to be set up in the cloud environment. The method also includes authenticating the storage controller based on a communication protocol between the client device, the authentication server and the storage controller, and obtaining, at the client device, a signature data of the storage controller following the authentication thereof. The signature data is configured to be stored in the secure microcontroller interfaced with the storage controller.