Storage Device Secure Delete via Encryption Key Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage devices fail to securely delete data, as they do not physically erase data when a delete operation is requested, allowing malicious users to potentially recover the data, which compromises data security and integrity.
Innovation Solution
A storage device is designed with a secure region that allocates a first encryption key for secure write operations, decrypts valid data using that key, re-encrypts it with a new key, and stores it in another block, then deletes the original encryption key, ensuring that the data cannot be recovered even if the device experiences a sudden power loss.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the storage device deletes only the mapping relationship without physically erasing data, then the delete operation is simple and fast, but the data can be retrieved by malicious users compromising security
Solution Approach 1:
The patent extracts the encryption key from the storage system to achieve secure deletion. By removing the key rather than physically erasing the data, the system makes the data unrecoverable while avoiding the complexity of physical erasure operations. The key is stored separately and its deletion renders the encrypted data inaccessible.
Solution Approach 2:
The patent changes the encryption parameter (encryption key) to achieve data security. By generating a new encryption key and deleting the old one, the system ensures that previously encrypted data becomes unrecoverable. This parameter change approach provides security without requiring physical data erasure.
2Reliability
If the storage device physically erases data to ensure security, then data cannot be retrieved, but the process is complex and time-consuming
Solution Approach 1:
The patent extracts the encryption key from the storage system to achieve secure deletion. By removing the key rather than physically erasing the data, the system makes the data unrecoverable while avoiding the complexity of physical erasure operations. The key is stored separately and its deletion renders the encrypted data inaccessible.
Solution Approach 2:
The patent uses an encryption key as an intermediary to control data accessibility. Instead of directly manipulating the stored data, the system controls access through the key. Deleting the key acts as an intermediary action that secures the data without requiring direct physical erasure of the data blocks.
3Reliability
If the storage device re-encrypts valid data with a new key after deleting the old key, then data security is maintained, but the process requires additional time and resources
Solution Approach 1:
The patent performs preliminary action by generating a new encryption key before deleting the old one. This ensures that valid data can be quickly re-encrypted without waiting for key generation during the deletion process. The preliminary key preparation reduces the overall time required for secure key management operations.
Solution Approach 2:
The patent maintains continuity of useful action by keeping the encryption functionality active throughout the key management process. Instead of disabling encryption during key transitions, the system continuously protects data by re-encrypting with the new key, ensuring uninterrupted security while managing key transitions efficiently.
Data Source
AI summary
Disclosed is a method of operating a storage device which communicates with a host device. The method includes allocating a secure region and a user region, storing first data encrypted by using a first encryption key in a first data block of the secure region, receiving a first request indicating a first secure delete operation of the first data from the host device, decrypting at least one valid data of the first data block by using the first encryption key based on the first request, wherein the at least one valid data do not include the first data, encrypting the decrypted at least one valid data by using a second encryption key different from the first encryption key, storing the encrypted at least one valid data in a second data block of the secure region, and deleting the first encryption key.