Secure Storage Domain Binding for Virtualized OS Instances
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed computer systems, maintaining data security is challenging due to the rapid evolution of threats and the complexity of integrating secure storage devices, such as hardware security modules (HSMs), which often require significant investment and can be obstacles for organizations.
Innovation Solution
A method for operating a secure storage device with non-volatile memory that uses multiple domains for operating system instances, employing a trusted key entry system to configure and secure cryptographic data, generating unique identifiers and secure hashes to ensure authorized access and prevent unauthorized changes or use, thereby providing physical and logical protection for secret data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure storage devices such as hardware security modules are integrated into distributed computer systems, then data security is improved, but device complexity and integration challenges increase
Solution Approach 1:
The patent segments the secure storage device into multiple domains, with each domain isolated and dedicated to specific operating system instances. This segmentation allows independent management of cryptographic configuration data across different domains, simplifying integration by enabling modular deployment and reducing interdependencies between security components.
Solution Approach 2:
The patent implements preliminary binding of cryptographic configuration data to operating system instances during system initialization. Secure hashes are generated and stored in advance, creating pre-established security bindings that prevent unauthorized access without requiring complex real-time verification mechanisms during operation.
2Duration of action of stationary object
If cryptographic configuration data is stored in non-volatile memory domains, then data persistence is improved, but vulnerability to unauthorized access increases
Solution Approach 1:
The patent applies local quality by implementing domain-specific security measures within the non-volatile memory. Each domain has its own secure hash binding that is locally verified, allowing the system to maintain persistent storage while applying targeted access controls at the domain level rather than requiring uniform security across the entire memory space.
Solution Approach 2:
The patent introduces secure hash values as intermediaries between the stored cryptographic configuration data and access requests. These hashes act as mediators that verify the integrity and authorization of access attempts without exposing the actual cryptographic data, thereby maintaining persistence while preventing unauthorized access.
3Reliability
If secure hash verification is performed for every access request, then unauthorized access prevention is improved, but processing time increases
Solution Approach 1:
The patent performs preliminary secure hash verification during system initialization and configuration phases. By establishing and verifying security bindings in advance, the system reduces the verification overhead during normal operation, allowing faster access processing while maintaining strong security checks when configuration changes occur.
Data Source
AI summary
A method for operating a secure storage device with a non-volatile memory on a computer system which executes multiple operating system instances. The non-volatile memory comprises one or more domains which are used by the operating system instances. A separate trusted key entry system is used to configure secret data of an operating system instance stored in the non-volatile memory. The method comprises setting a domain to either secure or non-secure mode; generating a unique identifier of the operating system instance; generating a secure hash for the operating system instance; and storing the secure hash in the domain.