Storage Device Secure Data Erasure via Code Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data preservation systems face challenges in accurately erasing or updating data due to vulnerabilities in host processor programs, leading to potential erroneous operations.
Innovation Solution
A storage device with an acquisition unit for acquiring erase permission notifications, a generation unit for generating a second erase code based on specific data and authentication information, and an erase unit for erasing data when the first and second codes match, ensuring secure data deletion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data erasing is performed based on host processor program instructions, then data can be deleted from storage device, but erroneous erasing may occur due to program vulnerability
Solution Approach 1:
The patent introduces an intermediary authentication mechanism between the host processor and storage device. Instead of directly executing erase instructions, the system generates authentication information (first erase code) based on specific data, transmits it to the storage device, which then generates a second erase code for verification. This intermediary code-based authentication acts as a mediator that prevents erroneous erasing while maintaining operational capability.
Solution Approach 2:
The patent implements a feedback mechanism where the storage device generates a second erase code based on the received first erase code and specific data, then compares it with the first erase code before executing the erase operation. This feedback loop ensures that erasing only occurs when authentication succeeds, providing reliability control over the data deletion process.
2Reliability
If authentication mechanism is implemented to prevent erroneous erasing, then data preservation reliability is improved, but system complexity increases
Solution Approach 1:
The patent changes the parameter of authentication from simple keyword matching to a multi-step code generation and verification process. The system transforms erase instructions into authenticated operations by generating first erase codes from specific data, transmitting them, and verifying against second erase codes. This parameter change enhances reliability while keeping the complexity manageable through structured parameter transformation rather than complex architectural changes.
Data Source
AI summary
According to an embodiment, a storage device includes an acquisition unit, a first generation unit, and an erase unit. The acquisition unit is configured to acquire erase permission notification which is generated based on specific data and first authentication information to authenticate the specific data, and includes a first erase code to erase the specific data and physical area information indicating a physical area of the specific data. The first generation unit is configured to generate a second erase code using the specific data stored in the physical area indicated by the physical area information and the first authentication information. The erase unit is configured to erase data stored in the physical area indicated by the physical area information when the first erase code corresponds to the second erase code.