Storage Device Session Manager for Security Partition Termination
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional storage devices lack the capability to detect and terminate security sessions effectively, especially when system security or priorities dictate early termination due to incomplete or abnormal activities within the session.
Innovation Solution
A storage device with a session manager that monitors and manages security sessions by partitioning the storage medium into security partitions, enabling the controller to read and write data and terminate sessions based on predefined termination conditions without host system intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the host system terminates security sessions, then session management is simple, but the storage device cannot detect termination conditions like power failure, tampering, or excessive time
Solution Approach 1:
The patent divides session management responsibilities between the host system and the storage device. The storage device's session manager handles specific termination detection functions (power failure, tampering, time limits) independently, while the host system maintains overall session control. This segmentation allows the storage device to detect termination conditions without requiring full session management complexity.
Solution Approach 2:
The session manager acts as an intermediary component within the storage device that monitors session parameters and detects termination conditions. It serves as a mediator between the host system's session control and the storage device's security partitions, enabling automated termination detection without direct host intervention for every condition.
2Productivity
If the host system manages all session termination, then device complexity is low, but productivity decreases due to incomplete session activities and resource waste
Solution Approach 1:
The session manager is configured with predefined termination conditions (power failure detection, tampering detection, time limits, resource availability) before sessions begin. This preliminary configuration enables automated detection and termination actions without requiring complex real-time decision-making during session execution, improving efficiency while maintaining manageable complexity.
Solution Approach 2:
The storage device's session manager autonomously monitors session parameters and terminates sessions when termination conditions are met, without requiring continuous host system intervention. This self-service capability allows the storage device to manage its own session termination based on detected conditions, improving productivity by preventing resource waste from incomplete sessions.
3Reliability
If the storage device monitors session parameters autonomously, then security improves through proactive termination, but device complexity increases
Solution Approach 1:
The session manager implements specific, localized monitoring functions for particular termination conditions (power failure, tampering, time limits, resource availability) rather than comprehensive session management. Each monitoring function is tailored to detect specific security threats, providing targeted security improvements without requiring complex overall session control architecture.
Solution Approach 2:
The session manager is pre-configured with termination conditions and monitoring rules that enable it to proactively detect and respond to security threats before they can compromise the system. By establishing termination criteria in advance (time limits, resource constraints, tampering detection), the system prevents security breaches rather than reacting to them, improving reliability without requiring complex real-time security decision-making.
Data Source
AI summary
A storage device has a storage medium, a controller, and a session manager. The storage medium is partitioned into one or more security partitions. The controller is adapted to read and write data to and from the storage medium and to enable security sessions over an interface between one or more host systems and one or more security partitions. The session manager within the storage device is adapted to monitor parameters associated with the one or more security sessions.