Storage Block Traversal Authentication for Host Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage devices lack continuous authentication mechanisms, leaving them vulnerable to unauthorized access and data theft after initial authentication, and do not allow dynamic permission updates based on ongoing host actions.
Innovation Solution
A method involving iterative block traversal and authentication, where a data storage device continuously verifies access by checking if each block has been read, and only authenticates the host system once all blocks have been successfully accessed, with additional authentication processes to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If continuous authentication mechanisms are implemented, then security against unauthorized access is improved, but device complexity increases
Solution Approach 1:
The patent performs preliminary authentication actions by requiring the host to read all storage blocks before granting access permissions. This preliminary verification ensures that only authenticated hosts can access the storage device, establishing security before actual data operations begin. The authentication process is completed in advance through systematic block reading verification.
Solution Approach 2:
The storage device autonomously manages its own authentication process by internally tracking which blocks have been read and automatically determining authentication status. The device maintains its own authentication state without requiring external verification systems, reducing the need for additional complex authentication infrastructure while improving security.
2Reliability
If iterative block reading authentication is performed, then security verification is improved, but access time increases
Solution Approach 1:
The authentication process is performed as a preliminary action before actual data access operations. By completing the iterative block reading and verification in advance, the system establishes authentication status upfront, allowing subsequent data operations to proceed without repeated verification delays. This separates the authentication time from the data access time.
Solution Approach 2:
The patent requires reading all storage blocks for authentication, which may seem excessive compared to reading only essential blocks. However, this comprehensive approach ensures complete verification of the storage medium's integrity and authenticity, preventing unauthorized access while maintaining a straightforward implementation without complex selective reading algorithms.
3Adaptability or versatility
If dynamic permission updates based on host actions are enabled, then security adaptability is improved, but system complexity increases
Solution Approach 1:
The system implements feedback by continuously monitoring host actions during the authentication process. As the host reads blocks and demonstrates legitimate access patterns, the system provides feedback by updating authentication status and granting appropriate permissions. This feedback mechanism enables dynamic permission updates based on observed host behavior without requiring complex predictive algorithms.
Solution Approach 2:
The authentication system transitions from static pre-defined permissions to dynamic permission granting based on actual host actions. Permissions are not fixed in advance but are dynamically adjusted as the host completes authentication steps, allowing the system to adapt to the host's demonstrated legitimacy while maintaining manageable complexity through rule-based transitions.
Data Source
AI summary
A method for authenticating a host computer system to access a data storage device (DSD) comprising a non-volatile storage medium including a plurality of blocks, the method comprising: receiving, from a computer program on the host computer system, an initial read request to read a block of the plurality of blocks and in response sending information from the block to the host computer system; iteratively receiving, from the computer program on the host computer system, a subsequent read request to read a subsequent block of the plurality of blocks based on the information sent from the block of a previous response; and in each iteration sending information from the subsequent block to the host computer system or terminating the iterative process in response to determining that each block of the plurality of blocks has been read; and determining the host computer system is authenticated in response to determining one or more conditions are met, wherein the one or more conditions include determining that each block of the plurality of blocks has been read.