Session-Based Storage Locking for Idle-Period Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage devices lack a mechanism to prevent unauthorized access to data during idle periods when the user is not actively interacting with the host, allowing background applications to access data without user awareness or control.
Innovation Solution
Implementing a session protection mechanism on storage devices that includes a controller to manage a session timeout value, locking the device when the session exceeds this value to restrict host access, and utilizing a lock/unlock protection mechanism with a session timeout parameter to enhance data security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the storage device remains unlocked for extended periods to allow user access, then ease of operation is improved, but data security deteriorates as background applications can access data without user awareness
Solution Approach 1:
The patent implements periodic locking by introducing a session timeout mechanism that automatically locks the storage device after a predetermined period of inactivity. The controller monitors the duration since the device was unlocked and automatically re-locks it when the timeout period expires, creating a periodic lock-unlock cycle that balances accessibility with security. This resolves the contradiction by ensuring the device remains easily accessible during active use while automatically securing data during idle periods when background applications might otherwise access data unauthorized.
2Object-affected harmful factors
If the storage device locks automatically after timeout to prevent unauthorized access, then data security is improved, but ease of operation deteriorates as the user must re-enter credentials
Solution Approach 1:
The patent applies dynamics by making the locking state conditional and time-dependent rather than static. The device dynamically transitions between locked and unlocked states based on the session timeout condition. During active periods, the device remains unlocked for easy access; when inactivity exceeds the timeout threshold, it automatically transitions to a locked state. This dynamic behavior resolves the contradiction by adapting the security state to the actual usage context, providing ease of operation when needed while maintaining security when appropriate.
3Ease of operation
If the storage device remains unlocked during idle periods to maintain accessibility, then ease of operation is improved, but unauthorized data access by background applications increases
Solution Approach 1:
The patent applies preliminary action by proactively locking the storage device before any potential unauthorized access can occur. The session timeout mechanism continuously monitors usage and automatically initiates the locking action when the predetermined time limit is reached, preventing background applications from accessing data during idle periods. This preliminary locking action resolves the contradiction by establishing a security barrier in advance, ensuring accessibility during legitimate use while preventing unauthorized access before it can happen during idle periods.
Data Source
AI summary
A storage device restricts host access to data on the storage device. A controller on the storage device determines that a session protection feature is enabled on the storage device, initiates a session on the storage device, and sets a timer to an initial time. The controller obtains a session timeout value, calculates a session time, and stores the session time in a master index page. The controller further determines when a power reset has occurred and that the storage device is unlocked, initializes the timer with a session time value stored in the master index page prior to the power reset, and continues to calculate the session time. The controller compares the session time with the session timeout value and locks the storage device when the session time exceeds the session timeout value.