Storage Device Attestation for Continuous Security Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data sanitization methods fail to ensure complete data deletion, allowing recovered data access by attackers, compromising security and privacy, especially during prolonged device operation after attestation.
Innovation Solution
Implement continuous storage device security through persistent attestation by regularly comparing device attributes across discontinuous states, performing security actions based on attestation results, and logging attestations to maintain a secure channel.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is deleted from storage media using conventional sanitization methods, then the data is removed from visible access, but the data can be recovered by attackers who gain access to the device
Solution Approach 1:
The system performs attestation actions before data deletion operations to verify the security state of the storage device. This preliminary verification ensures that the device is in a secure state before allowing data sanitization, preventing attackers from recovering deleted data through unauthorized access or manipulation of the device after deletion.
Solution Approach 2:
The system continuously monitors and verifies the security state of the storage device through repeated attestation operations after data deletion. This feedback mechanism detects any changes in the device's security state that could indicate an attack, allowing the system to respond by preventing data recovery even after conventional deletion methods have been applied.
2Reliability
If periodic attestation is performed to maintain continuous security verification, then data security is improved, but system complexity and resource consumption increase
Solution Approach 1:
The system performs attestation operations at periodic intervals rather than continuously, balancing security verification with resource consumption. By scheduling attestation at appropriate intervals and triggering additional attestations based on security-sensitive operations, the system maintains continuous security verification without requiring constant monitoring that would overwhelm system resources.
Data Source
AI summary
Provided are systems, methods, and apparatuses for systems and methods of continuous storage device security based on discontinuous states. In one or more examples, the systems, devices, and methods include performing a first attestation of an attribute of a device based on a lapse of time period; comparing the first attestation to a second attestation stored in a buffer; and determining a security status of the device based on comparing the first attestation. The systems, devices, and methods include receiving, from a host at a device, a command; performing a first attestation of an attribute of the device based on a first bit associated with the command indicating to perform the first attestation; storing the first attestation in a first buffer of the host; determining a security status of the device based on the first attestation; and performing a security action based on the security status.