Virtual Disk Management via Dual-Host Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional virtual disk management methods lack authority control mechanisms, making it difficult to manage access for multiple users and allowing encrypted files to be easily copied and used on different hosts without proper authorization.
Innovation Solution
Implementing a virtual disk management system that uses device codes and passwords to authenticate and authorize access, where a disk root key and disk encryption key are generated using encryption algorithms like RSA or AES to encrypt and decrypt files, and an access control list defines user permissions, ensuring only authorized users can mount encrypted files as virtual disks on specific hosts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional password-based encryption is used, then user information can be protected from viruses and hackers, but the password can be easily ascertained and the encrypted file can be used by others without authority control
Solution Approach 1:
The patent segments the authentication mechanism into multiple independent components: device code (identifying the host device), password (user credential), disk root key (derived from device code), and disk encryption key (derived from password and disk root key). This segmentation allows each component to serve a specific security function while working together to provide both strong security and flexible access control for multiple users on different hosts.
2Adaptability or versatility
If conventional virtual disk management is used, then encrypted files can be mounted on any host, but the encrypted files can be copied onto other hosts and used there without authorization
Solution Approach 1:
The patent implements preliminary action by binding the device code to the disk root key during the encryption phase. The device code, which uniquely identifies the host device, is used to generate the disk root key that is then embedded in the encrypted file structure. This preliminary binding ensures that when the file is mounted on a different host, the system can verify whether the host's device code matches the expected device code, preventing unauthorized access before it occurs.
3Ease of operation
If no authority control mechanism is provided, then access is simple and direct, but access flexibility for multiple users is lacking
Solution Approach 1:
The patent implements universality by creating an authentication system that serves multiple functions simultaneously: it authenticates user identity via password, verifies host identity via device code, controls file access permissions, and enables multi-user support. The dual-authentication mechanism (password + device code) provides a universal framework that can accommodate multiple users with different access levels while maintaining operational simplicity through automated verification.
Data Source
AI summary
Virtual disks management methods and systems. First, a file space is set and a first password is set. A first device code is acquired. The file space is encrypted according to the first password and the first device code to obtain an encrypted file. Thereafter, a designation of the encrypted file is received. A second password is received, and a second device code is acquired. It is determined whether the second password conforms to the first password, and whether the second device code conforms to the first device code. If so, the encrypted file is mounted as a virtual disk.