Storage Device Fingerprint Verification Local Controller
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage devices with fingerprint identification capabilities are vulnerable to data theft due to the risk of being broken or compromised by malicious software, as the fingerprint verification process is often performed on the host device, which can be attacked or tampered with.
Innovation Solution
A storage device with separate controllers and storage units for registered fingerprints and data, where the fingerprint verification is performed locally within the device, ensuring that data access is controlled solely by the device itself, and optionally using key comparison for additional security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If fingerprint verification is performed on the host device, then the operation is simple and the host can easily access data, but the security is compromised because the host can be attacked or tampered with
Solution Approach 1:
The system is divided into two independent parts: the host device for simple operations and the storage device for secure verification. The fingerprint verification function is segmented from the host and embedded in the storage device, allowing the host to remain simple while the storage device ensures security through isolated verification operations
Solution Approach 2:
The storage device acts as an intermediary between the user and the data. Instead of the host directly verifying fingerprints, the storage device mediates the verification process by receiving fingerprint data, performing verification internally, and then controlling data access based on verification results, thus protecting against host-based attacks
2Reliability
If fingerprint verification is performed within the storage device, then the data security is enhanced against host compromise, but the device complexity increases with separate controllers and storage units
Solution Approach 1:
The verification controller and storage controller are merged into a single integrated controller within the storage device. This consolidation reduces the number of separate components while maintaining the security function, as the single controller can handle both verification operations and data storage management without requiring multiple independent units
Solution Approach 2:
The storage device is designed with multi-functionality, where the same storage unit and controller handle both secure fingerprint verification and general data storage operations. This universal design allows the device to perform multiple functions without proportionally increasing complexity, as the core components serve dual purposes
3Ease of operation
If only fingerprint verification is used for data access control, then the ease of operation is maintained, but the security is insufficient if the storage device itself is broken or compromised
Solution Approach 1:
The system performs preliminary verification actions by comparing fingerprints before allowing data access. Additionally, key comparison is performed in advance to establish secure access conditions. These preliminary checks ensure that even if the device is compromised, unauthorized access requires both physical access to the device and successful verification against stored credentials
Solution Approach 2:
The security system changes the verification parameter from simple fingerprint matching to a combination of fingerprint verification and key comparison. By introducing an additional verification parameter (the key stored in the storage unit), the system enhances security without significantly complicating the user operation, as both verifications are performed automatically by the controller
Data Source
AI summary
A storage device capable of fingerprint identification includes a first storage, a first controller and a second storage. The first storage is configured to store a registered fingerprint. The first controller is configured to compare the registered fingerprint with an input fingerprint, wherein the input fingerprint is obtained in response to a touch event. The second storage is configured to store a data. The data is, in response to a fingerprint comparison result, selectively allowed to be accessible or prohibited from being accessible to a host.