Storage Device Address Range Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Non-volatile flash memory systems face challenges in managing diverse access requirements among multiple applications, including security, bandwidth, and power consumption, leading to potential data compromise and inefficient resource allocation.
Innovation Solution
The implementation of address ranges with associated characteristic sets for controlling encryption, power consumption, and access permissions, where authenticated entities apply a first set of characteristics and unauthenticated entities apply a second set, allowing for customized storage device behavior and enhanced security and performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If multiple applications share access to the same storage device, then storage space utilization is improved, but security and resource allocation control deteriorate
Solution Approach 1:
The storage device is segmented into multiple logical partitions, each with its own access control list (ACL). This allows different applications to access specific partitions based on their needs while maintaining security boundaries. The ACLs further segment access rights within partitions, enabling fine-grained control over which applications can access which data.
Solution Approach 2:
Different security and performance characteristics are applied to different logical partitions and address ranges within those partitions. Each partition can have customized encryption settings, power management parameters, and access permissions tailored to the specific requirements of applications accessing that partition.
2Ease of operation
If access control is simplified for shared storage, then ease of operation is improved, but security control deteriorates
Solution Approach 1:
A unified access control framework is implemented that works across all logical partitions and address ranges. The same ACL mechanism and authentication processes are universally applied throughout the storage device, providing consistent security management while handling diverse access requirements through configurable parameters rather than complex different mechanisms.
3Productivity
If bandwidth is allocated for high-performance applications, then application performance is improved, but power consumption increases
Solution Approach 1:
Power management parameters are dynamically configured for different logical partitions and address ranges based on application requirements. High-performance applications accessing specific partitions can be allocated higher bandwidth and performance characteristics when needed, while other partitions maintain lower power consumption settings, allowing the system to adapt power usage to actual performance needs rather than maintaining high performance continuously.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Enhanced configuration of security and access control for data in a storage device is disclosed. A request is received to access an addressable memory location in a storage media within the storage device. A set of addressable memory locations with contiguous addresses identified by an address range is associated with first and second characteristics. The first characteristic is applied if the addressable memory location is within the set of addressable memory locations, and an entity is currently authenticated to and authorized to access the set of addressable memory locations. The second characteristic is applied if the addressable memory location is within the set of addressable memory locations, and no entity is currently authenticated to and authorized to access the set of addressable memory locations. The set of addressable memory locations can also be a logical partition, where the first and second characteristics are stored in a logical partition table.