Hardware Secure USB Redirection in High Latency VDI
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In high latency networks, hardware secure USB storage devices experience performance loss due to multiple USB redirection transactions, leading to delays and packet loss, making them unusable or costly, as they require frequent probing and cannot unlock the secured disk interface within the predetermined time period.
Innovation Solution
Virtualizing the hardware secure USB storage device as a 'generic storage device' with a CDROM and disk interface at the server, reducing transaction requests to two, eliminating USB packet overhead, and supporting raw read and write transactions, thus improving data transfer speed and reducing bandwidth requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If USB redirection transactions are used for hardware secure USB storage devices in high latency networks, then data can be transferred over the network, but performance loss occurs due to multiple transactions causing delays and packet loss
Solution Approach 1:
The system performs preliminary actions by caching USB storage device data locally at the client device before network latency affects performance. The cache stores frequently accessed data so that subsequent read operations can be served from local memory rather than requiring network round-trips, thus maintaining usability while improving data transfer speed.
Solution Approach 2:
The patent introduces a cache memory as an intermediary between the network storage system and the USB storage device interface. This intermediary layer buffers data transfers, absorbing network latency variations and preventing packet loss from directly impacting device usability. The cache acts as a mediator that decouples the timing requirements of the USB interface from the network transmission speed.
2Measurement precision
If multiple USB redirection transactions are performed for frequent probing, then device status can be monitored, but transaction overhead increases leading to delays and packet loss
Solution Approach 1:
The system applies local quality by implementing probe caching specifically for USB storage device status information. Instead of uniformly caching all data operations, the patent selectively caches probe results and device status information that are frequently requested. This localized caching approach maintains measurement precision for device status while reducing the time penalty of repeated probing transactions.
Solution Approach 2:
The patent implements periodic action by reducing the frequency of USB redirection transactions for device probing. Instead of continuous or frequent polling, the system performs probes at optimized intervals using cached information to fill gaps between actual status changes. This periodic approach maintains adequate monitoring accuracy while significantly reducing transaction overhead and associated delays.
3Adaptability or versatility
If hardware secure USB storage device is used in high latency network, then centralized storage can be accessed, but the secured disk interface cannot be unlocked within the predetermined time period
Solution Approach 1:
The system performs preliminary actions by pre-caching authentication credentials and device unlock information locally at the client device. When the hardware secure USB storage device is connected, the necessary authentication data is retrieved and stored in the cache before the network latency would prevent timely unlocking. This preliminary preparation enables the secured disk interface to be unlocked within the predetermined time period even in high latency networks.
Solution Approach 2:
The cache memory serves as an intermediary that stores authentication information and device state data locally, eliminating the need for real-time network communication during the critical unlock process. This intermediary layer provides the authentication data immediately when needed, bridging the time gap created by network latency and enabling timely unlocking of the secured disk interface while maintaining access to centralized storage.
Data Source
AI summary
In certain information handling system environments, physical devices connected to a client are redirected to a server or other information handling system. Requests to a virtualized hardware secure device may not be accessible due to the latency of the network. A server may request that a locking application of a CDROM driver (or interface) unlock a secured disk interface/logical unit of a redirected hardware secure device. The locking application validates a user entered password. Once unlocked the secured disk interface/logical unit is accessible via an associated file system stack at the server.