SSD Internal Encryption Module for Data Security and Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current solid-state drive (SSD) storage systems lack efficient encryption mechanisms, relying on external processors or storage controllers for data encryption, which can be inefficient and may not adequately protect user data.
Innovation Solution
Implementing internal data encryption within the SSD using a memory controller with an encryption module, random access memory, and a key table to manage encryption keys, allowing for secure storage and retrieval of data using drive-specific and shared secret keys, with the option to delete user data while retaining memory health data for reuse or testing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data encryption is performed by external processors or storage controllers, then data security is provided, but encryption efficiency is reduced and system complexity increases
Solution Approach 1:
The patent merges the encryption function into the SSD controller by integrating an encryption module directly into the memory controller. This combines data storage and encryption functions into a single device, eliminating the need for separate external encryption processors and improving encryption efficiency while maintaining data security.
Solution Approach 2:
The SSD performs encryption and decryption operations independently using its own integrated encryption module and stored encryption keys. The encryption key is stored in a protected area of the SSD, allowing the drive to encrypt data before writing to storage and decrypt data when reading, without requiring external cryptographic processing assistance.
2Reliability
If data is stored in encrypted form, then data security is improved, but data access and processing efficiency deteriorates
Solution Approach 1:
The patent implements preliminary encryption of data before it is written to the SSD storage medium. The encryption module encrypts incoming data using stored encryption keys prior to storage, so that data is already secured when written to the drive. This preliminary action ensures security without impacting subsequent read operations, as the same encryption module automatically decrypts data during read operations.
3Adaptability or versatility
If encryption keys are stored externally, then key management flexibility is improved, but security risks increase
Solution Approach 1:
The patent implements a nested structure where the encryption key is stored within the SSD itself in a protected area of the storage medium, rather than externally. The key is nested within the drive's storage architecture, accessible only through the integrated encryption module. This nested approach maintains key management flexibility while significantly reducing security risks by eliminating external key storage vulnerabilities.
Data Source
AI summary
A method of operating a solid-state storage drive is provided. The method includes encrypting, in the solid-state storage drive, first data by a first key, and writing the encrypted first data into solid-state storage memory of the solid-state storage drive. The method includes encrypting, in the solid-state storage drive, second data by a second key, and writing the encrypted second data into the solid-state storage memory of the solid-state storage drive, wherein at least one of the first key or the second key is supplied from a source external to the solid-state storage drive.