Storage Side-Channel Failover for Secure Host Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing multi-device storage systems lack reliable failover options for secure data access beyond RAID configurations, particularly in complex electromechanical systems like autonomous vehicles, where catastrophic failures can disrupt data access and require secure failover through side channels.
Innovation Solution
A data storage device with a storage interface and a side channel interface, controlled by a controller that reconfigures to process host storage commands during interface failures, using failover credentials and modes to ensure secure and selective access through low-bandwidth channels like control and debug buses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If side channel interfaces (control bus, debug bus) are used for failover access, then system reliability is improved, but bandwidth and transfer speed deteriorate
Solution Approach 1:
The side channel interface dynamically reconfigures from its normal low-bandwidth device management function to a high-priority failover data transfer function. The controller detects storage interface failures and activates the side channel for host storage command processing, allowing the interface to adapt its functionality based on system conditions. This dynamic reconfiguration enables the side channel to provide reliable failover access while minimizing the impact of its inherently lower bandwidth characteristics.
2Reliability
If side channel interfaces are reconfigured to process host storage commands, then failover capability is improved, but interface complexity increases
Solution Approach 1:
The side channel interface is designed with multi-functionality, serving both as a low-bandwidth device management interface during normal operation and as a failover data transfer path when the primary storage interface fails. The controller is also multi-functional, handling both regular storage commands and failover commands through the same interface. This universal design reduces the need for separate dedicated failover hardware, thereby managing complexity while improving reliability.
Solution Approach 2:
The controller acts as an intermediary that manages the reconfiguration of the side channel interface. Rather than requiring complex hardware switching mechanisms, the controller software/firmware mediates the transition by detecting interface failures and redirecting host storage commands through the side channel. This software-based mediation simplifies the overall system architecture compared to hardware-based failover mechanisms.
3Reliability
If selective processing of host storage commands is enabled on side channels, then secure access control is improved, but processing time increases
Solution Approach 1:
Access credentials and security parameters are pre-configured in the controller before failover occurs. When the primary storage interface fails, the controller already has the necessary authentication information ready to quickly verify incoming failover commands through the side channel. This preliminary preparation of security credentials minimizes the time penalty associated with selective command processing, as the security verification can proceed efficiently without requiring complex real-time authentication negotiations.
Data Source
AI summary
Systems, methods, and data storage devices for secured failover access through data storage device side channels are described. Storage devices may include a storage interface and one or more side channels, such as control bus and debug bus interfaces. The different interfaces may use different interface protocols and physical interface connections configured for different types of commands to the data storage device. When a failure of the storage interface occurs, the data storage device may receive a failover message through one or more side channels to reconfigure the side channel interface to receive, execute, and return a response for host storage commands targeting host data on the storage medium.