Method and system for authentication of a storage device
AssigneeSamsung Electronics Co., Ltd.
InventorsPranab Kumar Teegavarapu, Imtiaz Ahmed
Life of this patent
Estimating the term…
Abstract
A method for authenticating a storage device includes sending encrypted host device data from a host device to the storage device for a current authentication session, receiving encrypted storage device specific data and an encrypted first output string from the storage device based on the encrypted host device data sent to the storage device, and authenticating the storage device based on the encrypted storage device specific data and the encrypted first output string from the storage device.
Claims6
A method for authenticating a storage device, the method comprising:
- sending, by an authentication module of a host device, encrypted host device data to the storage device for a current authentication session;
- receiving, by the authentication module, encrypted storage device specific data and an encrypted first output string from the storage device based on the encrypted host device data sent to the storage device;
- and
- authenticating, by the authentication module, the storage device based on the encrypted storage device specific data and the encrypted first output string from the storage device, wherein
- the encrypted host device data is obtained by:
- generating a random seed index corresponding to a random seed table, wherein the random seed index is for the current authentication session, and the random seed table is in the host device and the storage device;
- and
- obtaining the encrypted host device data by randomizing host device data based on a first seed from the random seed table, wherein the host device data includes the random seed index, a start signature, and an end signature.
A host device, comprising:
- a processor;
- a memory;
- an authentication module in the memory, the authentication module to:
- send encrypted host device data to a storage device for a current authentication session;
- receive encrypted storage device specific data and an encrypted first output string from the storage device based on the encrypted host device data sent to the storage device;
- and
- authenticate the storage device based on the encrypted storage device specific data and the encrypted first output string from the storage device, wherein
- the authentication module is to obtain the encrypted host device data by:
- generating a random seed index corresponding to a random seed table, wherein the random seed index is for the current authentication session and the random seed table is in the host device and the storage device;
- and
- obtaining the encrypted host device data by randomizing a host device data using a first seed from the random seed table, wherein the host device data includes the random seed index, a start signature, and an end signature.
A storage device, comprising:
- a processor;
- a memory;
- an authentication module in the memory, the authentication module to:
- receive encrypted host device data from a host device for a current authentication session;
- and
- send encrypted storage device specific data and an encrypted output string to the host device in response to the encrypted host device data from the host device, wherein
- the authentication module is to send the encrypted storage device specific data and the encrypted output string by:
- decrypting, based on a first seed of a random seed table, the encrypted host device data to generate host device data including a random seed index of the random seed table, a start signature and an end signature, wherein the random seed index in the host device data is for the current authentication session and the random seed table is in the host device and the storage device;
- encrypting storage device specific data to generate the encrypted storage device specific data, wherein the storage device specific data is encrypted using a second seed of the random seed table, wherein the second seed is located using the
- random seed index from the host device data and the storage device specific data is device unique data including at least one parameter;
- encrypting an output string to generate the encrypted output string based on a key, wherein the key is derived based on the at least one parameter of the device unique data and the random seed table, wherein the output string is a function of the at least one parameter of the device unique data;
- and
- sending the encrypted storage device specific data and the encrypted output string to the host device for authentication of the storage device by the host device.
Dependencies are inferred from the claim text.