Removable Storage Device User Access Control

Solution Overview

Problem

When multiple users share a host computer connected to an external storage device, existing access control methods fail to prevent malicious users from accessing other users' storage areas, as the operating system can access all users' storage areas, allowing potential tampering or unauthorized access.

Innovation Solution

A removable storage device with a control unit that simulates mounting the storage area for the authenticated user and unmounts the area for other users upon successful authentication, effectively creating a logical multicard reader configuration where each user can only access their own storage area, preventing access to others' areas.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the operating system accesses all users' storage areas to enable file management operations, then ease of operation is improved, but security against malicious access deteriorates

Engineering Contradiction:

Improvefile management operationVSAvoidmalicious access

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The storage device is segmented into multiple independent virtual storage areas (virtual SD cards), each assigned to a specific user. The control unit creates logical partitions that are independently mounted and unmounted based on authentication status, physically isolating user data from unauthorized access while maintaining full OS compatibility for file operations.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The control unit acts as an intermediary layer between the operating system and the physical storage areas. It intercepts OS mount requests, authenticates users, and dynamically mounts only the authorized user's virtual storage area while keeping other areas unmounted and inaccessible, thus preventing malicious access without compromising ease of operation.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If multiple users share the same external storage device, then adaptability is improved, but data privacy protection deteriorates

Engineering Contradiction:

Improveuser sharingVSAvoiddata privacy

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The storage device is segmented into multiple independent virtual storage areas (virtual SD cards), each assigned to a specific user. The control unit creates logical partitions that are independently mounted and unmounted based on authentication status, physically isolating user data from unauthorized access while maintaining full OS compatibility for file operations.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The mounting state of virtual storage areas is dynamically adjusted based on authentication status. When a user authenticates successfully, their specific virtual storage area is mounted while other users' areas are unmounted. This dynamic reconfiguration ensures data privacy is maintained adaptively for each user session.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS8356118B2Storage device and storage device access control method

Publication Date: 2013.01.15 BUFFALO CORP LTD

AI summary

A storage device is removably connectable to a host computer. The storage device includes: a storage unit on which one or more storage areas are allocatable to a plurality of users; and a control unit. The control unit is operable to, when the storage deice receives authentication success information indicating that authentication for one of the users is succeeded from the host computer or other external device, simulatively mount the storage area allocated to the authenticated user and unmount the storage area allocated to another user.