Wireless Self-Encrypting Storage Access Without Host Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing self-encrypting drives rely on host computers for decryption commands, making them vulnerable to data leakage, and are susceptible to data theft if the casing is damaged.
Innovation Solution
A self-encrypting storage device with a wireless communication module that receives decryption commands or authorization information directly from external devices, allowing secure operation authority retrieval without reliance on host computers, and includes features to detect unauthorized separation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If decryption commands are transmitted through the host computer to unlock the self-encrypting drive, then the authentication system can be implemented, but decryption commands or authentication information may be sniffed in the host computer, leading to data leakage
Solution Approach 1:
The patent extracts the decryption command transmission path from the host computer and implements direct wireless communication between the portable data storage device and external devices. This removes the vulnerable intermediate环节 (host computer) that was susceptible to sniffing attacks, thereby eliminating the data leakage risk while maintaining authentication functionality.
Solution Approach 2:
The patent introduces a wireless communication module as a new intermediary for transmitting decryption commands and authentication information. This wireless direct connection serves as a secure mediator that bypasses the traditional host computer pathway, preventing interception while enabling authorized access to encrypted data.
2Reliability
If a conventional portable data storage device is stolen and its casing is damaged, then malicious individuals can easily attempt to decrypt and read the internal components, but self-encrypting drives should prevent such data theft
Solution Approach 1:
The patent implements preliminary encryption of data before storage in the portable data storage device. This preliminary protective action ensures that even if the device casing is damaged or stolen, the data remains encrypted and inaccessible without the proper authentication credentials, which are transmitted through secure wireless communication.
Solution Approach 2:
The self-encrypting drive performs encryption and decryption operations independently within the device itself, rather than relying on external host computer processing. This self-service capability ensures that sensitive cryptographic operations never expose data to external systems, preventing data theft even when the physical device is compromised.
3Adaptability or versatility
If the authentication system maintains security independently without host computer dependency, then data security is enhanced, but decryption commands still need to be transmitted through the host computer in some operation schemes
Solution Approach 1:
The patent inverts the traditional authentication architecture by making the portable data storage device the independent authentication authority rather than the host computer. The device itself generates and manages cryptographic keys, and wireless communication enables direct authentication commands to be sent from external devices to the storage device, bypassing the host computer entirely and eliminating interception risks.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Enhances data security by preventing decryption and theft even if the casing is compromised, with flexible security settings and alerts for unauthorized separation.
Implementation Method 1
a wireless communication module, connected to the control unit through a second signal connection, wherein the wireless communication module receives a wireless signal from a first external device and converts the wireless signal into a wired signal transmitted to the control unit
Data Source
AI summary
A self-encrypting storage device, comprising: a data storage device, for storing data and providing a self-encrypting function for the data; a control unit, connected to the data storage device through a first signal connection; and a wireless communication module, connected to the control unit through a second signal connection, wherein the wireless communication module receives a wireless signal from a first external device and converts the wireless signal into a wired signal transmitted to the control unit. When the wireless signal delivers a decryption command or an authorization information corresponding to the data storage device, the control unit transmits the decryption command or the authorization information to the data storage device. The data storage device then unlocks its self-encrypting function according to the decryption command or the authorization information, to retrieve an operation authority of at least one storage section in the data storage device.