Storage Controller Namespace Key Management for TCG NVMe Conflict Resolution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage device standards, such as TCG and NVMe, lack detailed operations for combining locking functions and write protection functions, leading to inconsistencies and potential data loss when transitioning between different standards or during initialization processes.
Innovation Solution
A storage device system that integrates both TCG and NVMe standards by using distinct encryption keys for different namespaces, managing virtual ranges internally, and allowing the Revert command to update encryption keys for non-write protected namespaces while maintaining data integrity in write protected namespaces.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If both TCG locking function and NVMe write protection function are used concurrently, then data protection capability is improved, but operational complexity and potential conflicts between standards increase
Solution Approach 1:
The patent introduces a management layer that acts as an intermediary between the TCG locking function and NVMe write protection function. This management layer coordinates the operations of both standards, preventing conflicts during initialization and data protection processes. The intermediary manages encryption key updates and command execution sequences to ensure both standards work harmoniously without causing data loss or operational conflicts.
2Reliability
If Revert command is executed to update encryption keys, then security is improved, but data may be unintentionally erased in write protected namespaces
Solution Approach 1:
The patent applies preliminary anti-action by checking the write protection status of namespaces before executing the Revert command that updates encryption keys. The system proactively identifies write protected namespaces and prevents the Revert command from affecting them, thereby avoiding unintentional data erasure. This preliminary check and protective measure ensure that security updates do not compromise data integrity in protected areas.
Solution Approach 2:
The system performs preliminary actions by maintaining separate encryption keys for different namespaces and establishing a management structure that tracks write protection status before any key update operations. This preliminary organization allows the system to selectively apply encryption key updates only to non-write protected namespaces, preventing data loss while still improving security where appropriate.
3Reliability
If encryption keys are updated for all namespaces, then security is improved, but data readability is lost in write protected namespaces
Solution Approach 1:
The patent implements local quality by applying different encryption key management policies to different namespaces based on their write protection status. Write protected namespaces maintain their original encryption keys to preserve data readability, while non-write protected namespaces receive updated encryption keys for enhanced security. This localized approach ensures that security improvements do not compromise data accessibility in protected areas.
Data Source
AI summary
According to one embodiment, a storage device includes a nonvolatile storage medium and a controller. The controller encrypts data with an encryption key, writes encrypted data into the storage medium, and manages a first and second encryption keys. The first encryption key encrypts data to be written into a first area and a second encryption key encrypts data to be written into a second area. The controller updates, if the first area is write protected and the second area is not write protected, the second encryption key without updating the first encryption key when receiving an initialization command from a host.