Storage Drive Key Shredding for Non-Persistent Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection methods fail to effectively secure non-persistent data by not ensuring its immediate invalidation after use, leading to potential unauthorized access.
Innovation Solution
A storage system that automatically generates and deletes encryption keys upon powering on and off, respectively, ensuring that non-persistent data remains inaccessible by encrypting and decrypting it with expiring keys based on a data retention policy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If encryption keys are retained for data access, then data accessibility is improved, but security against unauthorized access deteriorates
Solution Approach 1:
The system performs preliminary encryption of data before it is written to the cache, and automatically deletes the encryption key after the data is flushed from cache. This preliminary action ensures data is protected during its most vulnerable period (when in cache) without requiring manual intervention or complex key management protocols.
Solution Approach 2:
The patent employs short-lived encryption keys that are generated, used, and immediately deleted. These disposable keys exist only for the brief period needed to encrypt data in the cache, then are destroyed. This approach prioritizes security over key persistence, accepting that keys must be constantly regenerated rather than reused.
2Object-affected harmful factors
If encryption keys are deleted immediately after use, then security is improved, but data accessibility deteriorates
Solution Approach 1:
Data is encrypted with the encryption key before the key is deleted. The encryption operation completes entirely while the key is still valid, ensuring that even though the key is immediately deleted afterward, the data remains fully accessible through its encrypted form. This preliminary encryption action eliminates any access delay.
Solution Approach 2:
The system rushes through the encryption and key deletion process in rapid succession, minimizing the window where security could be compromised. The key is used immediately for encryption and then instantly deleted, skipping any intermediate storage or prolonged retention that would create security vulnerabilities or access delays.
3Productivity
If data is stored in cache for fast access, then productivity is improved, but security against data loss deteriorates
Solution Approach 1:
The system performs preliminary encryption of data before it is placed in the cache, ensuring that even though the data resides in the vulnerable cache memory for extended periods to enable fast access, it remains protected. The encryption key is then deleted, creating a security model where the data's persistent presence in cache does not compromise security.
Data Source
AI summary
Systems and methods for encryption key shredding to protect non-persistent data are described. In one embodiment, the storage system device may include a storage drive and a controller. In some embodiments, the controller may be configured to power on the storage drive, identify an encryption key on the storage drive created upon powering on the storage drive, and encrypt data in a cache of the storage drive using the encryption key. In some embodiments, the controller may be configured to power off the storage drive and delete the encryption key upon powering off the storage drive. In some cases, the storage drive may include at least one of a solid state drive and a hard disk drive. In some embodiments, the storage drive may include a hybrid storage drive that includes both a solid state drive and a hard disk drive.