Solid-State Storage Security via Restricted Memory Segmentation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional solid-state storage subsystems rely on user identity and access credentials for access control, which can be compromised, allowing unauthorized use and access to sensitive information.

Innovation Solution

Implementing a restricted memory area accessible only via non-standard commands, storing unique identifiers that control access to the main memory area, and using host software to verify these identifiers for secure access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional access control methods using user identity and credentials are used, then access to the storage subsystem is granted to authorized users, but the system is vulnerable to unauthorized use through credential theft, cracking, or misuse by authorized users

Engineering Contradiction:

Improveaccess control securityVSAvoidunauthorized access and misuse

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The storage subsystem is divided into a public memory area accessible via standard commands and a restricted memory area accessible only via non-standard commands. This segmentation isolates the security-critical identification information in the restricted area, protecting it from conventional access methods and credential theft attacks.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A host software component acts as an intermediary between the user and the storage subsystem. This component retrieves identification information from the restricted memory area using non-standard commands and controls access to information in the main memory area based on this identification, adding a software layer of security that prevents direct access to sensitive data.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If a restricted memory area with non-standard commands is implemented, then security against unauthorized access is improved, but the device complexity increases

Engineering Contradiction:

Improvesecurity protectionVSAvoidsystem structure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The storage subsystem maintains compatibility with standard memory access commands for the public memory area, allowing it to work with conventional systems. The non-standard commands for the restricted area are added without replacing the standard interface, enabling the system to serve multiple functions (standard storage and secure storage) without requiring complete system redesign.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS9251381B1Solid-state storage subsystem security solution

Publication Date: 2016.02.02 WESTERN DIGITAL TECHNOLOGIES INC

AI summary

A solid-state storage subsystem, such as a non-volatile memory card or drive, includes a main memory area that is accessible via standard memory access commands (such as ATA commands), and a restricted memory area that is accessible only via one or more non-standard commands. The restricted memory area stores information used to control access to, and/or use of, information stored in the main memory area. As one example, the restricted area may store one or more identifiers, such as a unique subsystem identifier, needed to decrypt an executable or data file stored in the main memory area. A host software component is configured to retrieve the information from the subsystem's restricted memory area, and to use the information to control access to and/or use of the information in the main memory area.