Storage Device Security via Seed Code Hashing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing reliance on electronic data storage devices poses a significant risk of unauthorized access, compromising personal privacy and data security.
Innovation Solution
A security system comprising a server and storage device that uses a non-volatile storage unit to generate a seed code, which is hashed to create a data access code, compared with a stored password to enable or deny access, with the option to write the data access code as a password if none is present, ensuring secure locking of data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is stored in electronic storage devices, then storage efficiency and accessibility are improved, but vulnerability to unauthorized access and data theft increases
Solution Approach 1:
The system performs preliminary actions by pre-storing a seed code in non-volatile storage and pre-computing hashed passwords for authorized users. When access is needed, the system retrieves the seed code and generates access codes by hashing user passwords, enabling rapid authentication without real-time computational overhead, thus maintaining both security and accessibility.
Solution Approach 2:
The patent introduces an intermediary mechanism using hashed passwords and access codes as intermediaries between the storage device and authorized users. Instead of storing plain text passwords or relying on complex authentication protocols, the system uses pre-computed hashed values as intermediaries that enable fast verification while maintaining security, resolving the contradiction between access speed and security.
2Reliability
If access control mechanisms are implemented, then data security is improved, but access speed and convenience deteriorate
Solution Approach 1:
The system performs preliminary computation by pre-storing hashed passwords in non-volatile memory. When a user attempts access, the system retrieves the pre-computed hashed values and compares them with the provided password hash, eliminating the need for real-time cryptographic computations and enabling instant verification, thus achieving both security and speed.
Solution Approach 2:
The patent uses copies of hashed password values stored in non-volatile memory as rapid verification references. Instead of performing complex authentication algorithms during access, the system compares provided hashes against pre-stored copies, enabling O(1) lookup time authentication that maintains both security and access speed.
3Adaptability or versatility
If password storage is implemented, then access control capability is improved, but system complexity increases
Solution Approach 1:
The patent extracts the password storage function from the main storage device by using a separate non-volatile storage unit specifically for storing seed codes and hashed passwords. This separation simplifies the main storage device architecture while providing secure password management, reducing overall system complexity despite adding access control capability.
Solution Approach 2:
The system implements self-service authentication where the storage device automatically retrieves seed codes, generates access codes by hashing user passwords, and compares them against stored hashed values without requiring external authentication servers or complex manual verification processes, thus adding security while minimizing operational complexity.
Data Source
AI summary
A security system and a security method of stored data are provided. In the security system and the security method, a central processing unit performs hashing operation on a seed code to generate a data access code, which is then compared with a password stored in a storage device. If there is no password in the storage device, the data access code is written into the storage device as the password. On the other hand, if the data access code does not match the password, the storage device denies the access request from the central processing unit.