WORM Storage Time Verification via Reference Clock

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing storage systems with a WORM (Write Once Read Many) function face security risks due to the ease with which an intruder can modify the system time by altering the real-time clock (RTC), thereby changing the protection term of files and compromising their security.

Innovation Solution

Incorporating a reference clock that cannot be modified during system operation, which is used to verify the system time by comparing it with the RTC, and refusing data operation requests if the time difference exceeds the accumulated time precision error, thus preventing malicious changes to stored data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If an RTC is integrated into the southbridge chip to provide system time, then the storage system can obtain accurate time for WORM function, but the system time can be easily modified by intruders compromising security

Engineering Contradiction:
Improvetime accuracyVSAvoidtime security
Core Design Contradiction:
Measurement precisionVSReliability

Solution Approach 1:

The patent introduces a security chip as an intermediary component between the RTC and the processor. The security chip securely stores the RTC's initial time value and uses it to verify subsequent time values from the RTC. This mediator prevents intruders from directly modifying the RTC time, as any modification would be detected when compared against the securely stored initial time in the security chip.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If the RTC time can be modified to change system time, then the term of protection of files can be changed, but the security attribute and file content may be maliciously changed affecting file security

Engineering Contradiction:
Improvetime adjustment flexibilityVSAvoidfile security risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements a feedback mechanism where the processor periodically verifies the current RTC time against the securely stored initial time value in the security chip. When a data operation request is received, the system checks whether the RTC time has been modified by comparing it with the initial time. If modification is detected, the system refuses to execute the operation, providing feedback that prevents malicious file attribute changes while allowing legitimate operations within the protection period.

Inventive Principle:
Principle #23Feedback

3Device complexity

If the system uses a single RTC for timekeeping, then the device complexity is low, but the time verification and security protection capability is insufficient

Engineering Contradiction:
Improveclock system complexityVSAvoidtime verification capability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent segments the timekeeping system into two distinct functional components: the RTC that generates time values and the security chip that securely stores the initial time value for verification purposes. This segmentation allows the system to maintain low overall complexity while adding dedicated security functionality. The RTC continues its simple timekeeping role, while the security chip handles the secure storage and verification, creating a modular architecture that improves reliability without significantly increasing complexity.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS9753941B2Storage system and method for processing data operation request
Publication Date: 2017.09.05 HUAWEI TECH CO LTD
  • US9753941B2 patent drawing
  • US9753941B2 patent drawing
  • US9753941B2 patent drawing

AI summary

A storage system and a method for processing a data operation request are disclosed. The method is applied to a storage system that has a write once read many (WORM) function. In the method, after the storage system receives a data operation request, which is used to change data stored in the storage system, sent by an application server, the storage system acquires a time difference between a real-time clock (RTC) and a reference clock, wherein the RTC is configured to provide system time for the storage system, and the reference clock cannot be modified when the system is running. Then, the storage system determines whether the time difference is greater than an accumulated time precision error of the reference clock, and refuses to execute the data operation request when the time difference is greater than the accumulated time precision error.