SSD Redundancy via Command Asymmetry for Control Error Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing redundant storage systems using SSDs cannot detect design errors in the control modules of electronic disks, as these errors cause identical malfunctions across both disks, which are not detectable by comparing read values.

Innovation Solution

Applying a transfer function to read/write commands sent to a subset of physical storage devices, ensuring that the commands executed by the disks are different, and applying an inverse transfer function to the data read, allowing for the detection of design errors by comparing the values received from the disks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If identical read/write commands are sent to redundant electronic disks, then the system maintains simplicity in command management, but design errors in control modules cannot be detected

Engineering Contradiction:
Improvedetection of design errorsVSAvoidcommand management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies asymmetry by introducing a transfer function that modifies commands differently for each redundant disk. Specifically, commands sent to the first electronic disk remain in their original form, while commands sent to the second electronic disk are transformed through a mathematical transfer function. This asymmetric treatment ensures that if a design error exists in the control module, it will manifest differently for each disk, allowing error detection through comparison of results.

Inventive Principle:
Principle #4Asymmetry

2Ease of manufacture

If the same control module software is used on redundant disks, then ease of manufacture and deployment is improved, but identical errors cannot be detected through comparison

Engineering Contradiction:
Improvedeployment simplicityVSAvoiderror detection capability
Core Design Contradiction:
Ease of manufactureVSDifficulty of detecting and measuring

Solution Approach 1:

The patent introduces a transfer function as an intermediary element between the command generation and disk execution. This intermediary transforms the original commands before they reach the second disk's control module, while leaving commands to the first disk unchanged. The transfer function acts as a mediator that creates controlled differences in command execution, enabling error detection without requiring changes to the fundamental control module software deployment process.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Stability of the object's composition

If redundant disks execute identical operations, then the system maintains operational consistency, but fault detection capability is reduced

Engineering Contradiction:
Improveoperational consistencyVSAvoidfault detection capability
Core Design Contradiction:
Stability of the object's compositionVSReliability

Solution Approach 1:

The patent segments the redundant disk system into two distinct operational paths: one path processes original commands directly, while the other path processes transformed commands through a transfer function. This segmentation allows the system to maintain operational consistency for valid data while creating controlled variations that enable fault detection. The segmentation of command processing paths ensures that differences in execution results can be attributed to either operational variations or undetected errors.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS9436393B2Secure redundant storage device and secure read/write method on such a device
Publication Date: 2016.09.06 AIRBUS OPERATIONS (SAS)
  • US9436393B2 patent drawing
  • US9436393B2 patent drawing
  • US9436393B2 patent drawing

AI summary

Redundant storage devices in particular suitable for so-called SSD electronic disks. A data storage system is proposed based on a plurality of redundant physical storage disks in which the read/write commands intended to be sent to the redundant disks are subjected to a transfer function before being sent to at least one of the disks so that the actual commands sent to at least two disks are different. The values returned by the disks that received the commands that had undergone the transfer function are subjected to the inverse transfer function. Thus, a design error in the control module of the disks will be detected, since the control modules of the disks will not be called identically.