TWO STAGE ACCESS CONTROL FOR INTELLIGENT STORAGE DEVICE

• US 20100037319A1
• Filed: 08/08/2008
• Published: 02/11/2010
• Est. Priority Date: 08/08/2008
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Steeves, David J., Herley, Cormac E.
• Application Number:
  US12/188,442
• Publication Number:
  US 20100037319A1
• Time in Patent Office: Days
• US Class Current: 726/23
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha

Abstract

Systems and methods that resist malicious attacks on an intelligent storage device via an access control component that supplies security at a dual layer of defense. Such dual layer defense encompasses both resistance to brute force (e.g., unauthorized users), and resistance to a replay attack (e.g., a malicious code residing on a machine that hosts the intelligent storage device.) Accordingly, an access control component includes an anti malicious user component and an anti malicious code component, which can resist malicious attacks from both a person and a host unit with a malicious code residing thereon.

Claims

1. A computer implemented system comprising the following computer executable components:

an intelligent storage unit; and

an access control component as part of the intelligent storage unit to provide access thereto, the access control component further comprises an anti malicious user component that resists brute force and an anti malicious code component that resists replay attacks by a code.

2. The computer implemented system of claim 1, the intelligent storage unit further comprising partitioned subsets for storage of data.

3. The computer implemented system of claim 1, the intelligent storage unit positionable within a host machine for interaction therewith.

4. The computer implemented system of claim 1, the anti malicious user component further comprising an identity component that determines identity of a user.

5. The computer implemented system of claim 4, the anti malicious user component further comprising a configuration component that applies settings associated with an authorized user to the intelligent storage unit.

6. The computer implemented system of claim 4, the anti malicious code component further comprising a human interactive proof component.

7. The computer implemented system of claim 6, the intelligent storage unit component with a user interface that employs a challenge-response string.

8. The computer implemented system of claim 1, the intelligent storage unit is a USB type device, or a secure digital card, or a smart card, or a hard drive with crypto processor.

9. The computer implemented system of claim 1, the intelligent storage unit further comprising an artificial intelligence component that facilitates verification of a user.

10. A computer implemented method comprising the following computer executable acts:

resisting both a brute force attack by unauthorized users and a replay attack by a code, to contents of an intelligent storage unit; and

interacting with the intelligent storage unit through a machine that is operatively connected thereto.

11. The computer implemented method of claim 10 further comprising hosting the intelligent storage unit by the machine.

12. The computer implemented method of claim 11 further comprising accessing contents in subsets of the intelligent storage unit upon proving human interaction.

13. The computer implemented method of claim 11 further comprising receiving identification from a user.

14. The computer implemented method of claim 11 further comprising assigning security levels to memory partitions of the intelligent storage unit.

15. The computer implemented method of claim 11 further comprising employing biometrics to unlock the intelligent storage unit.

16. The computer implemented method of claim 11 further comprising configuring the intelligent storage unit based on users settings.

17. The computer implemented method of claim 11 further comprising inferring challenges in form request-response to a user.

18. The computer implemented method of claim 11 further comprising plugging the intelligent storage unit into the machine.

19. The computer implemented method of claim 18 further comprising verifying presence of a human by supplying a user'"'"'s personal photos for recognition thereof.

20. A computer implemented system comprising the following computer executable components:

means for resisting a brute force attack in an intelligent storage unit; and

means for resisting replay attacks by a code in the intelligent storage unit.