Data Storage Device User File Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage devices shared among multiple users face challenges in restricting access to specific user data, as anyone with access to the password can access all data, and managing access privileges becomes complex due to different host devices and operating systems.
Innovation Solution
A computer-implemented method and device that selectively enables access to user data files by using unique user identifiers associated with authentication credentials, allowing only authorized users to access their designated files, and includes features for user registration, authentication, data writing, reading, and deletion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If password-based authentication is used to restrict access to user data, then security is improved, but any user with access to the password can access all data on the device
Solution Approach 1:
The patent segments user data by associating each file with a unique user identifier. The file system is divided into user-specific accessible portions, where each user can only access files matching their unique identifier. This segmentation prevents any single user from accessing all data even if they compromise another user's password.
2Reliability
If the data storage device is split into multiple partitions with different access privileges, then access control is improved, but storage space utilization deteriorates due to partition resizing requirements
Solution Approach 1:
Instead of dividing storage space into separate partitions (spatial dimension), the patent introduces a logical dimension by embedding unique user identifiers within file metadata. This allows multiple users to share the same physical storage space while maintaining distinct access control boundaries through the identifier dimension, eliminating the need for partition resizing.
3Reliability
If access privileges are managed by the operating system of a host computer, then access control functionality is improved, but compatibility deteriorates across different host devices and operating systems
Solution Approach 1:
The data storage device performs self-service by implementing its own access control mechanism independent of the host operating system. The controller embeds unique user identifiers in file metadata and autonomously filters files based on the authenticated user's identifier, eliminating dependency on host OS access control features and ensuring consistent behavior across different platforms.
4Ease of operation
If a single password provides access to all users, then ease of operation is improved, but security control deteriorates as all users can access each other's data
Solution Approach 1:
The patent segments the authentication system by associating each user with a unique identifier that is embedded in their files. While users still authenticate with individual credentials, the system segments file accessibility so that each user's password only grants access to files containing their unique identifier, providing both simplicity and user-specific protection.
Data Source
AI summary
A data storage device and method to selectively enable access to stored user data files. The method includes receiving authentication credential from a user and, in response, retrieving a unique user identifier associated with the authentication credential. The stored user data files on the data storage device each has respective data file identifier. The method includes, for each user, enumerating a directory of stored data files where the data file identifier matches the unique user identifier of that user. This enables selective access of files corresponding the user. Multiple users can be registered to the same data storage device and selective access prevents one user from accessing another user's data files.