Selective Write Access for Redirected USB Mass Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technologies restrict all redirected USB mass storage devices as read-only, regardless of user access permissions, failing to provide selective write access control on a per-device or per-user basis in a protocol-independent manner.
Innovation Solution
Implementing a method that uses a virtual USB bus driver to selectively restrict write access by setting device characteristics through the MODE SENSE (6) command, allowing read-only access for certain users while permitting read/write access for others, based on user-specific configuration data stored in the server's registry or active directory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all redirected USB mass storage devices are designated as read-only, then security is improved by preventing malicious software or improper access, but flexibility deteriorates by preventing authorized users from performing write operations
Solution Approach 1:
The patent applies local quality by differentiating access permissions on a per-device or per-user basis rather than applying a uniform read-only restriction to all USB mass storage devices. The virtual USB bus driver selectively sets device characteristics (read-only or read/write) based on specific user configurations stored in the server's registry or active directory, allowing authorized users to have write access while maintaining security for other users.
2Ease of operation
If a uniform read-only restriction is applied to all USB mass storage devices, then ease of operation is improved by simplifying the access control mechanism, but adaptability deteriorates by inability to provide selective write access
Solution Approach 1:
The system implements self-service by automatically determining the appropriate access mode (read-only or read/write) for each USB mass storage device based on pre-configured user-specific settings stored in the server's registry or active directory. The virtual USB bus driver automatically queries these configuration data and applies the appropriate device characteristics without requiring manual intervention or complex access control procedures from users.
3Adaptability or versatility
If selective write access control is implemented on a per-device or per-user basis, then adaptability is improved by allowing authorized users to perform write operations, but device complexity increases by requiring protocol-specific implementation
Solution Approach 1:
The patent achieves universality by creating a protocol-independent solution that works across different USB mass storage devices regardless of their specific protocols or implementations. The virtual USB bus driver implements a universal mechanism using the MODE SENSE (6) command to set device characteristics, which can be applied to any USB mass storage device redirected to the server, eliminating the need for protocol-specific custom implementations.
4Manufacturing precision
If protocol-specific methods are used to restrict write access, then manufacturing precision is improved by targeting specific device protocols, but adaptability deteriorates by inability to apply to different USB protocols
Solution Approach 1:
The patent uses an intermediary approach by introducing a virtual USB bus driver that acts as a mediator between the server and various USB mass storage devices with different protocols. This driver layer implements the MODE SENSE (6) command to set device characteristics in a protocol-independent manner, allowing selective write access control to be applied universally across different USB protocols without requiring protocol-specific implementation details.
Data Source
AI summary
Universal serial bus (USB) mass storage devices may be redirected to a server to create USB virtual mass storage devices. For characteristics of the redirected device to be propagated to other users (accessing the redirected device via the virtual device) it is necessary to alter the Mode Sense data. In one embodiment, certain users may be given only read-only access to the redirected device. In another embodiment only some of the redirected devices are write-protected. By saving characteristics of a redirected device in the server registry or active directory, the USB virtual bus driver may impose, for example, write-protection on one or more devices connected by one or more users.