One-Time Password Generation for Data Storage Sleep Mode Security

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing information handling systems face vulnerabilities in storing data storage device passwords during sleep modes, as these passwords must be saved for extended periods, making them susceptible to malicious attacks.

Innovation Solution

A method is introduced where a one-time password is generated by the data storage device in response to a suspend command, stored securely within the system, and used to re-enable access upon resuming from the sleep state, ensuring the original password remains secure and cannot be reused.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the data storage device stores the password for extended periods during sleep mode, then the device can maintain authentication capability, but the password becomes susceptible to malicious attacks

Engineering Contradiction:

Improveauthentication capabilityVSAvoidpassword exposure to attacks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements one-time passwords that are generated temporarily and deleted after use. Instead of storing permanent passwords in the data storage device, the system creates disposable authentication credentials that exist only for the duration of the sleep mode transition, eliminating the security risk of long-term password storage while maintaining authentication capability.

Inventive Principle:

Principle #27Cheap short-living objects (Disposable)

Solution Approach 2:

The system generates and stores the one-time password in volatile memory before the sleep mode begins. This preliminary action ensures that authentication credentials are prepared in advance in a secure manner, allowing the device to authenticate upon wake-up without requiring long-term password storage that would be vulnerable to attacks.

Inventive Principle:

Principle #10Preliminary action

2Use of energy by stationary object

If the system transitions to energy saving state, then power consumption is reduced, but security measures must be maintained

Engineering Contradiction:

Improvepower consumptionVSAvoidsecurity protection

Core Design Contradiction:

Use of energy by stationary objectVSReliability

Solution Approach 1:

The patent extracts the password storage function from permanent storage media and relocates it to volatile memory for the duration of sleep mode. This separation allows the system to enter low-power states while maintaining security, as the extracted authentication data exists only temporarily in volatile memory and is automatically cleared when power is reduced or the system wakes up.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS11340796B2Method for managing sleep mode at a data storage device and system therefor

Publication Date: 2022.05.24 DELL PROD LP

AI summary

A method includes issuing a suspend command to a data storage device at an information handling system. In response to receiving the suspend command, the data storage device generates a one-time password that is stored at the data storage device. The one-time password is provided to a process executing at the information handling system that stores the one-time password at a memory device at the information handling system. Operation of the data storage device is transitioned to an energy saving state.