Methods and devices for authentication and data encryption

A storage device configured to authenticate a host device, comprising:

• a non-volatile storage media;
• an interface coupled to the at least one host device;
• and
• a processor, the processor being operative to:
• receive, via an interface with the at least one host device, a request for authentication;
• read, from the non-volatile storage media, a first number;
• responsive to the received request for authentication, provide to the at least one host device, via the interface, a reply comprising the first number with which a cryptographic key was generated;
• receive, via the interface, a second number calculated by the at least one host device, the second number being calculated based on a cryptographic combination of the first number provided to the at least one host device and a second entered password;
• read, from the storage device, a first encrypted first entered password that has been encrypted with a cryptographic combination of a first entered password and the first number;
• and
• authenticate the at least one host device if the second number successfully decrypts the first encrypted first entered password.

A method for a storage device to secure a password and authenticate a host device, the method comprising:

• receiving, via, an interface with at least one host device, a first entered password needed for accessing data stored on the storage device;
• generating a first number;
• combining the first entered password and the first number;
• determining a cryptographic key based on the combination of the first entered password and the first number;
• encrypting at least the first entered password using the cryptographic key;
• storing the encrypted first entered password and the first number in the storage device;
• receiving, via the interface, a request for authentication;
• reading, from the storage device, a first number;
• responsive to the received request for authentication, providing to the at least one host device, via the interface, a reply comprising the first number with which the cryptographic key was generated;
• receiving, via the interface, a second number calculated by the at least one host device, the second number being calculated based on a cryptographic combination of the first number provided to the at least one host device and a second entered password;
• reading the encrypted first entered password from the storage device;
• and
• authenticating the at least one host device if the second number successfully decrypts the encrypted first entered password.

A method for a storage device to authenticate a host device, comprising:

• receiving, via an interface with the at least one host device, a request for authentication;
• reading, from the storage device, a first number;
• responsive to the received request for authentication, providing to the at least one host device, via the interface, a reply comprising the first number with which a cryptographic key was generated;
• receiving, via the interface, a second number calculated by the at least one host device, the second number being calculated based on a cryptographic combination of the first number provided to the at least one host device and a second entered password;
• reading, from the storage device, a first encrypted first entered password based on a cryptographic combination of a first entered password and the first number;
• and
• authenticating the at least one host device if the second number successfully decrypts the first encrypted first entered password.