Storage Device Partition Update via Digital Signature Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for updating data in storage devices require a secure channel between the server and the storage device, which is costly and complex, and may involve encrypting and signing data with different keys for each device, necessitating continuous network connection during updates.
Innovation Solution
A storage device method that allows updating data without a secure channel by using a digital signature for integrity verification and a logical-to-physical address map to store updated data in a separate partition, enabling updates over an open channel and preserving original data in case of corruption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure channel is used between server and storage device for data updates, then data integrity is protected, but device complexity and cost increase
Solution Approach 1:
The patent extracts the security verification function from the communication channel itself and relocates it to the storage device's internal verification mechanism. Instead of relying on a secure channel to ensure data integrity, the system uses digital signatures that can be verified by the storage device independently, eliminating the need for complex secure channel establishment and maintenance.
Solution Approach 2:
The patent introduces a digital signature as an intermediary mechanism between the server and storage device. This signature serves as a trust anchor that allows the storage device to verify data integrity without requiring a secure communication channel. The signature acts as a mediator that carries security information independently of the communication path.
2Reliability
If encryption and signing data with different keys for each device is performed, then data security is improved, but update time and expense increase
Solution Approach 1:
The patent applies a universal digital signature approach where a single signature mechanism serves multiple storage devices. Instead of generating unique encryption keys for each device, the system uses a common signing mechanism that can be verified by any storage device, enabling faster updates without device-specific key management overhead.
3Reliability
If continuous network connection is maintained during update process, then data transmission reliability is ensured, but operational complexity increases
Solution Approach 1:
The patent performs preliminary verification of data integrity through digital signatures before the actual data update process. By verifying the signature in advance, the system ensures data authenticity without requiring continuous network connection during the update operation, simplifying the overall update process while maintaining reliability.
Data Source
AI summary
A storage device and method for updating data stored in a partition of the storage device are provided. In one embodiment, a storage device is provided that contains a logical-to-physical address map and a memory with a first partition storing original data and a second partition. The storage device receives from a host device (i) a command to write updated data to a first logical address and (ii) a signature for verifying integrity of the updated data, wherein the first logical address is mapped to a physical address of the first partition. The storage device then stores the updated data in the second partition instead of the first partition and attempts to verify the signature of the updated data. If the attempt to verify the signature is successful, the storage device updates the logical-to-physical address map to map the first logical address to a physical address of the second partition.