SSD Account Mediation for Multi-Drive Authentication Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Managing multiple pieces of account information for accessing multiple self-encrypting drives (SEDs) is cumbersome and prone to errors, leading to potential data leakage or loss of access when information is forgotten or compromised.

Innovation Solution

A memory system architecture where a user SSD manages first account information for local access and network SSDs manage second account information, allowing seamless authentication and access without the user needing to manage multiple sets of credentials directly.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If multiple SEDs are deployed in a network, then storage capacity and accessibility are improved, but the complexity of managing multiple account information increases

Engineering Contradiction:
Improveaccessibility to multiple SEDsVSAvoidaccount information management
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a network SSD as an intermediary device that manages account information between client devices and user SSDs. The network SSD receives account information from client devices, authenticates it, and then provides access to the appropriate user SSD, eliminating the need for clients to directly manage multiple account credentials.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The network SSD serves multiple functions: it acts as a storage device, an authentication server, and an account management intermediary. This multi-functional design consolidates what would otherwise require separate systems, allowing a single device to handle access control for multiple SEDs.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If users manage multiple pieces of account information, then access control security is improved, but the risk of data leakage and loss of access increases

Engineering Contradiction:
Improveaccess control securityVSAvoiddata leakage risk
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

By positioning the network SSD as an intermediary, the patent creates a centralized authentication point that reduces the distribution of credential information. Instead of multiple clients storing and managing separate account information, all authentication requests pass through the network SSD, reducing the attack surface for credential leakage.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The network SSD autonomously handles authentication decisions without requiring user intervention. It automatically verifies account information, determines access rights, and manages the authentication process, reducing human error and the risk of users forgetting or compromising credentials.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS12493419B2Memory system and storage system managing first and second account information for authentication of first and second accounts
Publication Date: 2025.12.09 KIOXIA CORP
  • US12493419B2 patent drawing
  • US12493419B2 patent drawing
  • US12493419B2 patent drawing

AI summary

According to one embodiment, a memory system includes a nonvolatile memory and a controller. The controller manages first account information to be used for authentication of a first account and second account information to be used for authentication of a second account. The controller receives third account information from a host device. When the third account information matches the first account information, the controller permits access to at least a partial storage area of the nonvolatile memory based on a request from the host device and transmits first data that includes the second account information to a first memory system.