US 2017/0323121 A1 · STORAGE DEVICE TAMPERING DETECTION

Abstract

Apparatus (400, 500) and method (200, 220, 240, 260, 280, 300) for detecting unauthorized tampering with a data storage device (100, 110, 140, 520). In some embodiments, the data storage device has a housing (112, 142) and a memory (192) supported by the housing. A first identifier value (202A, 222A, 242A, 262A, 282A, 306A) is stored on an external surface of the housing and a second identifier value (202B, 222B, 242B, 262B, 282B, 306B) is stored within the memory. A digital signature (210, 256, 296) generated in response to the first and second identifier values and in response to a private key (208, 254, 288) is stored on the storage device. Thereafter, the first identifier value is retrieved from the external surface of the housing and the second identifier value is retrieved from the memory. The storage device is authenticated using the retrieved first and second identifier values, the digital signature and a public key (228, 274, 312).

Claims20

Dependent claims

A computer-implemented method of detecting a counterfeit storage device, the method comprising:

printing a first identifier value on an external surface of a housing of the storage device;
electronically storing a second identifier value in a memory supported by the housing;
generating a digital signature in response to the first and second identifier values and responsive to a private key of a public/private key pair;
storing the digital signature on the storage device by performing at least a selected one of printing the digital surface to the external surface of the housing or electronically storing the digital signature in the memory;
subsequently retrieving the first identifier value from the external surface of the housing, the second identifier value from the memory, and the digital signature from at least a selected one of the external surface of the housing or the memory;
and
authenticating the storage device using the retrieved first and second identifier values, the digital signature and a public key of the public/private key pair.

4 more elements

A computer-implemented method comprising:

providing a storage device having a housing and a memory supported within the housing;
printing a first identifier value associated with the storage device onto an external surface of the housing;
storing a second identifier value associated with the storage device in the memory;
combining at least the first identifier value and the second identifier value into a first combined identifier value;
generating a cryptographic digital signature using a cryptographic signing algorithm based on the first combined identifier value and a private cryptographic key of a private/public key pair;
storing the digital signature;
subsequently determining whether the storage device is an authentic device or a counterfeit device by steps comprising:
retrieving the first identifier value printed to the external surface of the housing and the second identifier value stored in the memory of the storage device;
combining at least the retrieved first and second identifier values into a second combined identifier value;
and
using a verification algorithm operable at least upon the digital signature, the second combined identifier value and a public cryptographic key of the private/public key pair to generate a pass/fail indication signal indicative of the authenticity of the storage device.

8 more elements

Dependencies are inferred from the claim text.

Storage device tampering detection

Life of this patent

Storage device tampering detection

Life of this patent

Abstract

Claims20