Storage Module Authentication via Unique Individual Information

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional Digital Rights Management (DRM) technologies fail to securely authenticate storage devices, allowing improper operations and illegal copying due to the lack of distinct module authentication, which can lead to security attacks.

Innovation Solution

A method and apparatus that authenticate each module within a storage device using unique individual information (UII) and authentication information, with an Enhanced Media Identifier (EMID) calculated based on the UII and content type, ensuring secure access to content by validating additional authentication information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If conventional DRM technologies use a single unique media ID for the entire storage device, then device authentication is simplified, but security is compromised when modules are improperly replaced or used

Engineering Contradiction:

Improveauthentication processVSAvoidsecurity protection

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent divides the storage device into multiple independent modules (first module and second module), each with its own unique identifier (UII) and authentication information. This segmentation allows individual module verification, preventing security attacks that exploit module replacement or improper usage while maintaining a structured authentication process

Inventive Principle:

Principle #1Segmentation

2Reliability

If multiple modules are authenticated independently with separate UIIs, then security against module replacement attacks is improved, but authentication complexity increases

Engineering Contradiction:

Improvesecurity protectionVSAvoidauthentication process

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an Enhanced Media Identifier (EMID) as an intermediary element that connects multiple module UIIs to a single content encryption key. The EMID serves as a mediator that consolidates the authentication results of multiple modules into a unified identifier, simplifying the key generation process while maintaining security

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent combines multiple module UIIs and authentication information into a single EMID, which then serves as the basis for generating the content encryption key. This merging approach reduces the complexity of managing multiple separate keys while preserving the security benefits of multi-module authentication

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentEP2695102B1Method, host, storage, and machine-readable storage medium for protecting content

Publication Date: 2019.06.12 SAMSUNG ELECTRONICS CO LTD

Figure 1
Figure 2
Figure 3

AI summary

Methods and apparatus are provided for protecting content of a storage. First authentication information regarding a first module is acquired. The first module is one of a plurality of modules included in the storage. The first module is authenticated based on first Unique Individual Information (UII) of the first module and the first authentication information. Second authentication information regarding a second module is acquired. The second module is another of the plurality of modules included in the storage. The second module is authenticated based on second UII of the second module and the second authentication information. Access to content stored in the storage is permitted when at least the first module and the second module are successfully authenticated.