公开(公告)号：US09870462B2

公开(公告)日：2018-01-16

申请号：US14492168

申请日：2014-09-22

Applicant: Intel Corporation

Inventor： Sanjeev N. Trika ,  Jason Cox ,  Anand S. Ramalingam

IPC: G06F21/44 ,  H04L9/32 ,  G06F21/31

CPC classification number: G06F21/44 ,  G06F21/31 ,  G06F21/85 ,  G06F2221/2103 ,  H04L9/0894 ,  H04L9/3271

Abstract: Generally, this disclosure provides systems, devices, methods and computer readable media for prevention of cable swap security attacks on storage devices. A host system may include a provisioning module configured to generate a challenge-response verification key-pair and further to provide the key-pair to the storage device to enable the challenge-response verification. The system may also include a link error detection module to detect a link error between the host system and the storage device. The system may further include a challenge-response protocol module configured to initiate, in response to the link-error detection, a verification challenge from the storage system and to provide a response to the verification challenge based on the key-pair.

公开(公告)号：US09626531B2

公开(公告)日：2017-04-18

申请号：US14543935

申请日：2014-11-18

Applicant: Intel Corporation

Inventor： Shankar Natarajan ,  Jason Cox ,  Charles B. Foster ,  Hinesh K. Shah

IPC: G06F12/14 ,  G06F21/78 ,  G06F21/62 ,  G11B20/00 ,  G06F21/60 ,  G06F21/00 ,  H04L9/32

CPC classification number: G06F21/78 ,  G06F21/604 ,  G06F21/6245 ,  G06F2212/402 ,  G06F2221/2111 ,  G11B20/0021

Abstract: Generally, this disclosure provides systems, devices, methods and computer readable media for secure control of access control enablement and activation on self-encrypting storage devices. In some embodiments, the device may include a non-volatile memory (NVM) and a secure access control module. The secure access control module may include a command processor module configured to receive a request to enable access controls of the NVM from a user, and to enable the access controls. The secure access control module may also include a verification module configured to verify a physical presence of the user. The secure access control module may further include an encryption module to encrypt at least a portion of the NVM in response to an indication of success from the verification module.