US 11,693,969 B2 · System and method for providing security protection for FPGA based solid state drives

Abstract

According to some example embodiments, a method for providing security to a storage device includes receiving, by the storage device, a public key via a network; sending, by the storage device, the received public key and a proposed configuration corresponding to the storage device to a security manager that resides in a control plane of the network; determining, by the security manager, whether the public key received from the storage device matches a private key available to the security manager; downloading, by the security manager, the proposed configuration to the storage device; determining, by the security manager, if the proposed configuration is successfully downloaded to the storage device; operating the storage device according to the downloaded configuration; and granting, by the security manager, a request to lease the storage device operating in the downloaded configuration for a time interval.

Claims20

Dependent claims

A method comprising:

receiving, at a controller, an encrypted key via a network to generate a received encrypted key;
determining, by the controller, that the received encrypted key is valid by using a private key available to the controller;
receiving, at the controller, an encrypted image via the network to generate a received encrypted image;
downloading, by the controller, the received encrypted image to a storage device connected to the controller;
receiving, at the storage device via the network, an assigned key to decrypt the received encrypted image;
and
decrypting, by the storage device, the received encrypted image with the assigned key.

4 more elements

A method comprising:

receiving, at a controller, an encrypted key via a network to generate a received encrypted key;
receiving, at the controller, an encrypted image to generate a received encrypted image;
downloading, by the controller, the received encrypted image to a storage device connected to the controller;
and
decrypting, by the storage device, the received encrypted image with an assigned key received by the storage device.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application

17/320,083Filed 13 May 2021 · division

Priority

20 Sep 2018

Published

US 2021/0279335 A19 Sep 2021

Granted

4 Jul 2023

Term ends

Not estimatedThe source records don’t support an estimate.

Classification12 codes

G06F 21/572
Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates…:…
G06F 21/79
To assure secure storage of data: in semiconductor storage media, e.g. directly-addressable memories
H04L 9/0825
Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely…: using…
H04L 9/0894
Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords: escrow, recovery or storing of secret…

Family

Application62/733,995Us provisional application · filed 20 Sep 2018

Application16/197,237Parent of this division · filed 20 Nov 2018

US 2021/0279335 A1Pre-grant publication · published 9 Sep 2021

US 11,030,316 B2Parent of this division

US 2020/0097659 A1Published application

US 11,693,969 B2This patent

From the US filing history. Foreign family members aren’t listed.

System and method for providing security protection for FPGA based solid state drives

Life of this patent

System and method for providing security protection for FPGA based solid state drives

Life of this patent

Abstract

Claims20