Session-Level Restriction for USB Storage Devices

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Deploying software and data to remote client devices with limited processing capability and storage, especially in large networks, is hindered by bandwidth constraints and the need for IT expertise, and traditional approaches are costly and difficult to manage.

Innovation Solution

Implementing Session-Level Restriction (SLR) for USB storage devices by filtering disk and volume driver stacks, allowing access to be restricted to specific user sessions, and using a third-party kernel filter driver to manage access, enabling secure and efficient deployment of resources.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If USB storage devices are made accessible to multiple user sessions, then resource sharing and collaboration are improved, but security control and access management deteriorate

Engineering Contradiction:

Improveresource sharingVSAvoidsecurity control

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments access control to USB storage devices by implementing session-level restrictions that create separate access contexts for different user sessions. Each session receives customized driver stack configurations that allow controlled sharing while maintaining security boundaries between sessions.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary access control mechanism that mediates between USB storage devices and multiple user sessions. This intermediary layer implements session-level restrictions and customized driver stacks to enable secure resource sharing without compromising security control.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If USB storage devices are restricted to specific user sessions, then security control is improved, but resource sharing and collaboration deteriorate

Engineering Contradiction:

Improvesecurity controlVSAvoidresource sharing

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent implements dynamic access control where USB storage device availability and driver stack configurations change based on user session context. Session-level restrictions are dynamically applied to enable or disable USB storage access for different sessions, allowing secure multi-user environments with flexible resource sharing.

Inventive Principle:

Principle #15Dynamics

3Adaptability or versatility

If multiple driver stacks are implemented for USB storage devices, then adaptability to different user sessions is improved, but device complexity and management difficulty increase

Engineering Contradiction:

Improvesession-specific accessVSAvoiddriver stack management

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent performs preliminary configuration of customized driver stacks for different user sessions before USB storage devices are accessed. By pre-configuring session-specific driver stacks and applying session-level restrictions in advance, the system reduces runtime complexity and simplifies management of multiple driver stacks.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS9971726B2Session-level-restriction for universal serial bus storage devices

Publication Date: 2018.05.15 DELL PROD LP

AI summary

A system and method of implementing SLR for a USB device of an information handling system is disclosed herein. An OS may load a disk driver stack and a volume driver stack for the USB device, where the USB device is being enumerated by a first driver. The OS may load a second driver on the disk driver stack. The OS may also load second driver on the volume driver stack. The OS may restrict an access to the USB device at the second driver as loaded on the disk driver stack. Furthermore, the OS may restrict an access to a volume of the USB device at the second driver as loaded on the volume driver stack.