# US 9,436,400 B2 · Transient storage device configuration silo > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,436,400 B2 - Document ID: US9436400B2 - Status: Granted - Kind: B2 - Application number: 14/589,875 - Filed: 2015-01-05 - Published: 2015-07-09 - Granted: 2016-09-06 - Earliest claimed: 2009-01-19 - Assignees: Microsoft Technology Licensing, LLC - Applicants: Microsoft Corporation - Inventors: David Abzarian; Harish S. Kulkarni; Todd Carpenter - Web page: https://patentgrep.com/patent/US9436400B2 ## CPC - G06F 3/0622: {in relation to access} - G06F 3/0637: {Permissions} - G06F 3/0673: {Single storage device} - G06F 21/31: User authentication - G06F 21/78: to assure secure storage of data (address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00) - G06F 2221/2129: Authenticate client device independently of the user - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A device configuration silo is arranged to be accessed as an IEEE 1667-compatible silo which exposes interfaces to a host application to make changes to the presence of one or more other silos, as well as make changes to silo configurations on a per-silo basis for data and method sharing among silos across the ACTs on a storage device such as a transient storage device. The interfaces exposed by the device configuration silo are arranged to enable an authenticated provisioner, like administrator in a corporate network environment, to perform configuration changes to silos after the storage device is released into the field through a secure provisioning mechanism. In addition, users may make configuration changes to silos at runtime in some usage scenarios, for example to enable discrete portions of functionality on a storage device, by using a secure secondary authentication mechanism that is exposed by the device configuration silo. ## Claims ### Claim 1 A computer-readable storage manufacture comprising a storage device that includes a plurality of silos including a configuration silo, where the storage device is Institute of Electrical And Electronic Engineers (IEEE) 1667-compliant, the storage device configured for performing actions comprising: exposing, by the storage device, an interface of the configuration silo, where the configuration silo is configured for accessing the silos and is further configured for exercising control over the silos; and configuring, by the storage device via the exposed interface, a sharing model of the storage device, where the sharing model controls segregation and un-segregation of each of the silos. ### Claim 2 (depends on 1) The computer-readable storage manufacture of claim 1 where the interface is configured for enabling a provisioner to perform configuration changes to the silos, or for setting an authentication mechanism and a secondary authentication mechanism. ### Claim 3 (depends on 2) The computer-readable storage manufacture of claim 2 where the performed configuration changes are performed at a runtime. ### Claim 4 (depends on 2) The computer-readable storage manufacture of claim 2 where the performed configuration changes are performed by the administrator based on authentication of the provisioner. ### Claim 5 (depends on 1) The computer-readable storage manufacture of claim 1 where the configuration silo is implemented on at least ne addressable command target (“ACT”) of the storage device. ### Claim 6 (depends on 1) The computer-readable storage manufacture of claim 1 where the interface is configured for setting a sharing model in which one of the silos is segregated so that the one of the silos will store data on a per-addressable command target (“ACT”) basis. ### Claim 7 (depends on 1) The computer-readable storage manufacture of claim 1 where the interface is configured for setting a sharing model in which one of the silos is unsegregated so that a common view of data is exposed regardless of from which addressable command target (“ACT”) the one of the silos is accessed. ### Claim 8 A method of operating a computer-readable storage manufacture comprising a storage device that includes a plurality of silos including a configuration silo, where the storage device is Institute of Electrical And Electronic Engineers (IEEE) 1667-compliant, the method comprising: exposing, by the storage device, an interface of the configuration silo, where the configuration silo is configured for accessing the silos and is further configured for exercising control over the silos; and configuring, by the storage device via the exposed interface, a sharing model of the storage device, where the sharing model controls segregation and un-segregation of each of the silos. ### Claim 9 (depends on 8) The method of claim 8 where the interface is configured for enabling a provisioner to perform configuration changes to the silos, or for setting an authentication mechanism and a secondary authentication mechanism. ### Claim 10 (depends on 9) The method of claim 9 where the performed configuration changes are performed at a runtime. ### Claim 11 (depends on 9) The method of claim 9 where the performed configuration changes are performed by the administrator based on authentication of the provisioner. ### Claim 12 (depends on 8) The method of claim 8 where the configuration silo is implemented on at least one addressable command target (“ACT”) of the storage device. ### Claim 13 (depends on 8) The method of claim 8 where the interface is configured for setting a sharing model in which one of the silos is segregated so that the one of the silos will store data on a per-addressable command target (“ACT”) basis. ### Claim 14 (depends on 8) The method of claim 8 where the interface is configured for setting a sharing model in which one of the silos is unsegregated so that a common view of data is exposed regardless of from which addressable command target (“ACT”) the one of the silos is accessed. ### Claim 15 A computer-readable storage manufacture storing instructions that, when executed by a processor of a storage device of the computer-readable storage manufacture, cause the storage device to perform actions, the storage device including a plurality of silos including a configuration silo, where the storage device is Institute of Electrical And Electronic Engineers (IEEE) 1667-compliant, the actions comprising: exposing, by the storage device, an interface of the configuration silo, where the configuration silo is configured for accessing the silos and is further configured for exercising control over the silos; and configuring, by the storage device via the exposed interface, a sharing model of the storage device, where the sharing model controls segregation and un-segregation of each of the silos. ### Claim 16 (depends on 15) The computer-readable storage manufacture of claim 15 where the interface is configured for enabling a provisioner to perform configuration changes to the silos, or for setting an authentication mechanism and a secondary authentication mechanism. ### Claim 17 (depends on 15) The computer-readable storage manufacture of claim 15 where the data and methods of a segregated silo are segregated to a particular addressable command target (ACT). ### Claim 18 (depends on 16) The computer-readable storage manufacture of claim 16 where the performed configuration changes are performed by the administrator based on authentication of the provisioner. ### Claim 19 (depends on 16) The computer-readable storage manufacture of claim 16 where the configuration silo is implemented on at least one addressable command target (“ACT”) of the storage device. ### Claim 20 (depends on 16) The computer-readable storage manufacture of claim 16 where the interface is configured for setting a sharing model in which one of the silos is segregated so that the one of the silos will store data on a per-addressable command target (“ACT”) basis, or where the interface is configured for setting a sharing model in which one of the silos is unsegregated so that a common view of data is exposed regardless of from which addressable command target (“ACT”) the one of the silos is accessed.