Wireless Storage Interface Device for Dynamic Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current storage devices lack comprehensive protection against unauthorized access, as they rely on user intervention for SmartCard removal or password security, which can be vulnerable to hacking and do not effectively segregate access rights for different user groups.
Innovation Solution
An interface device with a wireless signal detector and controller that derives a key from a unique identifier from a wireless device to dynamically lock or unlock logical sections of a storage device, providing secure access based on user authentication and access permission rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SmartCard interface is used to protect data from unauthorized access, then data security is improved, but user convenience deteriorates because user must remember to remove SmartCard after every use
Solution Approach 1:
The patent replaces the mechanical SmartCard interface with a wireless authentication system using Bluetooth or other wireless protocols. The wireless device communicates with the storage device without physical contact, eliminating the need for manual card insertion and removal while maintaining security through cryptographic authentication.
Solution Approach 2:
The system implements automatic authentication and data protection without requiring user intervention. The wireless device automatically establishes secure connections, and the storage device automatically encrypts and decrypts data based on authenticated sessions, freeing users from manual security management tasks.
2Ease of operation
If SmartCard is left attached to storage device, then ease of operation is improved, but data security deteriorates because storage device becomes vulnerable to unauthorized access
Solution Approach 1:
The patent implements dynamic session management where authentication credentials are time-limited and automatically expire after a set period or upon detecting unauthorized presence. The system dynamically adjusts security states based on active authentication sessions, allowing continuous access during authorized use while automatically securing data when sessions end.
3Reliability
If password encryption is used to protect data, then data security is improved, but ease of operation deteriorates because password is difficult to memorize and there is possibility of hacking
Solution Approach 1:
The patent introduces a wireless authentication device as an intermediary that handles complex cryptographic operations. Instead of requiring users to manage complex passwords, the wireless device stores authentication credentials securely and performs cryptographic handshakes with the storage device, replacing password-based authentication with key-based cryptographic authentication.
4Ease of operation
If access rights are not segregated for different user groups, then ease of operation is improved, but data security deteriorates because different levels of access control cannot be provided
Solution Approach 1:
The patent segments access control by creating separate logical partitions or encrypted volumes within the storage device, each with its own authentication requirements and access policies. Different wireless devices can be assigned to different logical partitions, enabling fine-grained access control where users only access data relevant to their role while maintaining a unified physical device interface.
Data Source
AI summary
A method and system for securing access to a storage device including one or more locked logical sections. The method includes providing an interface device including a first port connected to a computing system and a second port connected to the storage device. Further, the method includes receiving a unique identifier from a wireless device, and deriving a key from the unique identifier. Based on the derived key, the method unlocks a logical section in the storage device. The method may further store access permission rights for the locked logical sections in the interface device and unlock the logical section based on the access permission rights. Moreover, the method may further authenticate the identity of a user of the wireless device for unlocking the storage device.