Storage Device Partitioning With Dedicated Interfaces for Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing storage devices lack effective hardware-level partitioning and encryption methods to manage access permissions of secure and non-secure partitions, leading to vulnerabilities in permission management.

Innovation Solution

Implementing dedicated interfaces and unique hardware keys for each storage block to provide secure, hardware-level access control, preventing unauthorized access between storage blocks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If software-based access control is used to manage different containers, then ease of operation is improved, but reliability deteriorates due to lack of hardware-level protection

Engineering Contradiction:

Improveaccess control managementVSAvoidpermission management robustness

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The storage device is divided into multiple independent storage blocks (secure and non-secure partitions), each with its own dedicated interface and encryption key. This segmentation prevents unauthorized access from one partition to another, as each interface can only access its corresponding storage block through hardware-level isolation.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A dedicated interface acts as an intermediary between the host device and storage blocks, enforcing access control rules. The interface includes encryption/decryption circuits that mediate all data access, ensuring that only authorized operations can access specific storage blocks while maintaining ease of operation through a unified interface protocol.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Device complexity

If a single encryption key is used for all storage blocks, then device complexity is reduced, but reliability deteriorates due to inability to manage different access permissions

Engineering Contradiction:

Improveencryption key managementVSAvoidaccess permission security

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The encryption key management is segmented so that each storage block has its own dedicated encryption key stored in the controller. This allows different access permissions for different storage blocks while maintaining manageable complexity through automated key derivation from a master key, eliminating the need for manual management of multiple keys.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system dynamically changes encryption parameters by deriving different encryption keys from a single master key through a key derivation function. This allows the system to maintain simple key storage (one master key) while achieving complex security requirements (multiple different encryption keys for different storage blocks) through parameter transformation.

Inventive Principle:

Principle #35Parameter changes

3Reliability

If hardware-level partitioning with dedicated interfaces is implemented for each storage block, then reliability of permission management is improved, but device complexity increases

Engineering Contradiction:

Improvepermission management robustnessVSAvoidinterface architecture

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The dedicated interfaces are designed with multi-functionality, serving as both data transmission channels and access control enforcement points. Each interface can handle multiple operations (read, write, encrypt, decrypt) through a unified architecture, reducing overall device complexity despite the added security features.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The encryption/decryption circuits are merged into the controller unit, and multiple dedicated interfaces share common control logic and key management infrastructure. This consolidation reduces the actual hardware overhead while maintaining the security benefits of dedicated interfaces for each storage block.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS12462046B2Electronic device and method for performing permission management of storage device

Publication Date: 2025.11.04 PUFSECURITY CORP

AI summary

An electronic device and a method for performing permission management of a storage device are provided. The storage device includes multiple storage blocks. The electronic device includes a controller and multiple dedicated interfaces, wherein the multiple dedicated interfaces are coupled to multiple ports of the controller. The controller is configured to perform access control of the storage device. The multiple dedicated interfaces correspond to the multiple storage blocks, and each dedicated interface of the multiple dedicated interfaces is configured to provide a dedicated channel for accessing one of the multiple storage blocks corresponding to said each dedicated interface via the controller.