SSD Account Mediation for Multi-Drive Authentication Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing multiple pieces of account information for accessing multiple self-encrypting drives (SEDs) is cumbersome and prone to errors, leading to potential data leakage or loss of access when information is forgotten or compromised.
Innovation Solution
A memory system architecture where a user SSD manages first account information for local access and network SSDs manage second account information, allowing seamless authentication and access without the user needing to manage multiple sets of credentials directly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple SEDs are deployed in a network, then storage capacity and accessibility are improved, but the complexity of managing multiple account information increases
Solution Approach 1:
The patent introduces a network SSD as an intermediary device that manages account information between client devices and user SSDs. The network SSD receives account information from client devices, authenticates it, and then provides access to the appropriate user SSD, eliminating the need for clients to directly manage multiple account credentials.
Solution Approach 2:
The network SSD serves multiple functions: it acts as a storage device, an authentication server, and an account management intermediary. This multi-functional design consolidates what would otherwise require separate systems, allowing a single device to handle access control for multiple SEDs.
2Reliability
If users manage multiple pieces of account information, then access control security is improved, but the risk of data leakage and loss of access increases
Solution Approach 1:
By positioning the network SSD as an intermediary, the patent creates a centralized authentication point that reduces the distribution of credential information. Instead of multiple clients storing and managing separate account information, all authentication requests pass through the network SSD, reducing the attack surface for credential leakage.
Solution Approach 2:
The network SSD autonomously handles authentication decisions without requiring user intervention. It automatically verifies account information, determines access rights, and manages the authentication process, reducing human error and the risk of users forgetting or compromising credentials.
Data Source
AI summary
According to one embodiment, a memory system includes a nonvolatile memory and a controller. The controller manages first account information to be used for authentication of a first account and second account information to be used for authentication of a second account. The controller receives third account information from a host device. When the third account information matches the first account information, the controller permits access to at least a partial storage area of the nonvolatile memory based on a request from the host device and transmits first data that includes the second account information to a first memory system.


