Storage Device Command Security via Dynamic Transition Information
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional storage devices without security functions are vulnerable to data analysis by unauthorized outsiders, as they use the same command for reading data at the same address, and existing encryption methods can be compromised if message transmission is observed, allowing reproduction of the same messages.
Innovation Solution
A storage device that inputs a command with address and attached information, generates transition information using an initial value, and outputs data only when the attached and transition information match, enhancing data security through a comparator and output controller.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the same command is always used to read out data at the same address, then the operation is simple and easy to implement, but the security is weakened because messages can be easily analyzed by unauthorized outsiders
Solution Approach 1:
The patent applies dynamics by making the command structure variable rather than static. The command includes a variable parameter that changes based on the data address, transforming the command from a fixed pattern to a dynamic one that adapts to different data locations. This resolves the contradiction by maintaining operational simplicity through automation while introducing variability that prevents message analysis by outsiders.
Solution Approach 2:
The patent changes the parameter structure of the command by adding a variable parameter component that depends on the data address. Instead of using identical commands for all addresses, the command parameters are modified based on the target address, creating unique command patterns for different data locations. This parameter change enables security enhancement while preserving ease of operation through systematic generation.
2Ease of manufacture
If encryption information is transmitted from the storage device to the information processor before data communication, then the encryption setup is completed, but the security cannot be guaranteed because observed messages can be reproduced by manufacturing another storage device
Solution Approach 1:
The patent applies preliminary action by pre-defining the encryption rule within the storage device itself, rather than transmitting encryption information externally before communication. The encryption mechanism is built into the storage device's operation, with the variable parameter automatically applied based on data addresses. This eliminates the need for separate encryption setup communication and prevents message reproduction, as the encryption logic cannot be extracted or replicated without the actual device.
Solution Approach 2:
The patent introduces an intermediary mechanism in the form of a variable parameter that mediates between the data address and the command transmission. This intermediary element transforms the direct relationship between address and command into an indirect relationship, where the variable parameter acts as a security layer. The mediator prevents direct observation and reproduction of encryption patterns while maintaining smooth data communication operations.
Data Source
AI summary
A storage device is capable of sequentially inputting a command, which includes address information and attached information, from an information processor through an input/output unit. The storage device includes a storage unit for storing data; an extractor for extracting the address information and the attached information from an input command inputted through the input/output unit; a generator for, in response to input of the input command, generating transition information that transitions according to rules using an initial value; a comparator for determining whether the attached information and the transition information agree with each other; and an output controller for, only when the attached information and the transition information agree with each other, outputting storage data out of the data, which corresponds to the address information extracted by the extractor, through the input/output unit.