USB Apparatus with Integrated Security Token and Mass Storage Controller

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

As online transactions increase, existing security measures are compromised by malicious threats, necessitating a secure and user-friendly authentication method that also addresses data storage needs.

Innovation Solution

A USB apparatus integrating data storage and security token capabilities, featuring a controller module managing communication, mass storage, program storage, and security token functions, utilizing non-volatile memory and cryptographic processing for secure data handling.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If separate security token apparatus and portable mass storage device are used, then security and storage functionality are provided, but device complexity and user burden increase

Engineering Contradiction:
Improvefunctional integrationVSAvoiddevice structure
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent combines security token apparatus and portable mass storage device into a single integrated USB apparatus. The controller includes both a security token module for authentication operations and a mass storage module for data storage, allowing both functions to coexist in one device rather than requiring separate apparatus.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The USB apparatus is designed to perform multiple functions through a single device. The controller can switch between security token operations (authentication, digital signatures) and mass storage operations (data read/write), making the device universal and eliminating the need for users to carry or manage multiple separate devices.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If USB apparatus integrates both mass storage and security token modules, then functionality is improved, but protocol management complexity increases

Engineering Contradiction:
Improvedual functionalityVSAvoidprotocol management
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The controller dynamically switches between different USB communication protocols based on the operational mode. When security token operations are required, the USB 2.0 protocol is used; when mass storage operations are needed, the USB mass storage protocol is activated. This dynamic protocol selection manages complexity by activating only the necessary protocol at any given time.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The controller acts as an intermediary that manages communication between the host and different functional modules. It receives USB requests, determines whether they are for security token or mass storage operations, and routes them to the appropriate module using the corresponding protocol, thereby simplifying overall protocol management.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If cryptographic operations are performed within the USB apparatus, then security is enhanced, but processing time increases

Engineering Contradiction:
Improveauthentication securityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The apparatus performs cryptographic key generation and security token data preparation in advance during initialization. The security token module pre-generates cryptographic keys and stores them securely, so that during actual authentication operations, only verification needs to be performed, reducing the time required during critical authentication moments.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS7861015B2USB apparatus and control method therein
Publication Date: 2010.12.28 FEITIAN TECHNOLOGIES CO LTD
  • US7861015B2 patent drawing
  • US7861015B2 patent drawing
  • US7861015B2 patent drawing

AI summary

The present invention relates to an application of the Universal Serial Bus (USB) technology, and more particularly, to a USB apparatus with data storage and security token and control method therein. In an embodiment of the present invention, both mass storage and security token are implemented in a USB apparatus with a single controller. Thus, the host needs to enumerate the apparatus only once, and then may operate differentially in response to different commands. The mass storage is capable of swapping a mass of data, and has a file allocation table compatible with the system. The security token can be used for authenticating a person through digital certificates or biometric characteristics, maintaining the security of the computer and network applications.