Storage Device Write Protection Area Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current storage devices lack efficient security read performance, as they do not adequately ensure data integrity and authenticity during read operations, making them vulnerable to attacks and compromising security.
Innovation Solution
Incorporating a write protection area within the storage device and a memory controller that generates a device authentication code based on a shared key with the host, allowing for parallel data transmission and authentication, thereby enhancing security read performance by verifying data integrity and preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional read operations are performed without authentication, then data transmission speed is maintained, but data integrity and authenticity cannot be ensured
Solution Approach 1:
The patent implements preliminary authentication by having the host generate an authentication code based on write data before transmission, and the storage device generate a device authentication code based on stored data during read operations. This preliminary authentication mechanism ensures data integrity is verified in advance, resolving the contradiction between maintaining read performance and ensuring data reliability.
Solution Approach 2:
The patent establishes a feedback mechanism where authentication codes are generated and compared to verify data integrity. The host compares the authentication code with the device authentication code to confirm data authenticity, providing feedback that ensures reliable data transmission while maintaining efficient read operations through parallel authentication code generation.
2Reliability
If authentication codes are generated sequentially before data transmission, then data authenticity is verified, but transmission time increases
Solution Approach 1:
The patent maintains continuity of useful action by enabling parallel generation of authentication codes and data transmission. The storage device generates the device authentication code in parallel with transmitting read data to the host, eliminating sequential delays and ensuring continuous efficient operation while maintaining data authenticity verification.
3Reliability
If security verification is performed during read operations, then data security is enhanced, but read speed decreases
Solution Approach 1:
The patent performs preliminary authentication code generation during write operations, storing the authentication code alongside the data. During read operations, the stored authentication code is retrieved and compared with a newly generated code, enabling security verification without adding significant delay to read speed while maintaining enhanced security.
Solution Approach 2:
The patent ensures continuous efficient read operations by implementing parallel processing where the storage device retrieves stored data and generates/compares authentication codes simultaneously. This continuous parallel operation maintains high read speed while ensuring security verification is performed, resolving the contradiction between security and speed.
Data Source
AI summary
An electronic device is provided. A computing system includes a storage device and a host. The storage device includes a memory device including a write protection area. The host performs an operation of providing, to the storage device, a first request regarding security write and write data in parallel with an operation of generating a host authentication code based on the write data and a key shared with the storage device.