Storage Device Data Disposal via Security Chip Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for disposing of data from storage devices, such as physical shredding, are costly and time-consuming, and there is a need for a more efficient and cost-effective solution.
Innovation Solution
A storage device equipped with a non-volatile memory, a memory controller, and a security chip that encrypts and decrypts data using key information, allowing for secure data disposal by separating the security chip and confirming disposal through authentication with an external device, utilizing identification modules like QR codes or NFC for verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical shredding is used to dispose of storage devices, then data security is ensured, but disposal cost and time consumption increase significantly
Solution Approach 1:
The patent applies preliminary action by encrypting data with a key stored in a separate security chip before data disposal. This pre-encryption ensures that even if the storage medium is physically accessed, the data remains inaccessible without the key, eliminating the need for time-consuming physical shredding while maintaining security.
Solution Approach 2:
The patent segments the storage system into two independent parts: the storage device containing encrypted data and the security chip containing the decryption key. This segmentation allows the storage device to be disposed of without the key, ensuring data security while avoiding costly and time-consuming destruction of the entire system.
2Reliability
If physical shredding is used to dispose of storage devices, then data security is ensured, but disposal cost increases
Solution Approach 1:
The patent extracts the decryption key from the storage device and places it in a separate security chip. This extraction allows the storage device to be disposed of through simple, low-cost methods while maintaining data security, as the key required to access the data is not present in the disposed device.
3Reliability
If encryption with separate key storage is implemented, then data disposal becomes more secure and cost-effective, but device complexity increases
Solution Approach 1:
The security chip serves multiple functions: storing the encryption key, authenticating the storage device, and enabling secure data disposal verification. This multi-functionality reduces the need for additional components, thereby limiting the increase in system complexity while enhancing security.
4Measurement precision
If authentication module is added to verify data disposal, then disposal verification becomes reliable, but device complexity increases
Solution Approach 1:
The authentication functionality is merged into the security chip that already stores the encryption key. By combining key storage and authentication verification in a single component, the patent achieves reliable disposal verification without adding separate authentication hardware, thus minimizing the increase in device complexity.
Data Source
AI summary
A storage device includes at least one non-volatile memory device, a memory controller encrypting data using key information, storing the encrypted data in the at least one non-volatile memory device, or reading the encrypted data from the at least one non-volatile memory device, decrypting the read encrypted data using the key information and outputting the decrypted data to an external device, and a security chip connected to the memory controller, and storing the key information, and including an identification module for use in a data disposal operation.