Customizable Storage Controller With Integrated F+ Storage Firewall Protection

• US 20140020083A1
• Filed: 06/24/2013
• Published: 01/16/2014
• Est. Priority Date: 05/17/2006
• Status: Active Grant

• Current Assignee: Richard Fetik
• Original Assignee: Richard Fetik
• Inventors: FETIK, Richard
• Granted Patent: US 9,455,955 B2
• Time in Patent Office: Days
• US Class Current: 726/11
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/101 Access control lists [ACL]

Abstract

A Customizable Storage Controller (CSC) is a software defined storage device controller, a replacement for the ASIC storage controller approach that has been used up to now. The differences from the current storage controllers are that the CSC software will need to be protected from unauthorized modification and provides an excellent place to add additional storage management functionality. The CSC type of storage controller is a good place to integrate the F+ Storage Firewall storage protection technology, fitting the needs of the CSC as well as protecting stored data from unauthorized access. This portion of the larger patent disclosure provides the design of a CSC both with a software version of a F+ Storage Firewall, as well as an improved (more secure) CSC designed with a security co-processor and locked firmware. These designs can be implemented with standard parts such as microprocessors and/or FPGAs (Field Programmable Gate Arrays), RAM (Random Access Memory), and some version of nonvolatile memory as a program store.

Claims

1. A data storage apparatus, comprising:

a host interface for coupling said storage apparatus to a host computer;

a protected storage component; and

a storage firewall adapted to communicatively couple said protected storage component and said host interface, said storage firewall being operative to provide application software authentication including application registration, runtime authentication of application identity and permission to execute, user authentication &

authorization in the execution of an application, and examination, verification, and authentication of all storage access requests.

2. A data storage apparatus, comprising:

a host interface for coupling said storage apparatus to a host computer;

protected storage media; and

an integrated customizable storage controller and storage firewall

adapted to communicatively couple said

protected storage media

and said host interface,

said integrated customizable storage controller and storage firewall being operative to provide

storage controller functionality including

protected storage media access operations including read and write operations, and/or protected storage media management,

and/or storage device management,

and/or storage device monitoring,

and/or storage architecture collaboration and integration,

and/or data encryption,

and/or application software authentication including application registration, runtime authentication of application identity and permission to execute, user authentication &

authorization in the execution of an application, and examination, verification, and authentication of all storage access requests.