Storage device authentication

Patent metadata

Field	Value
Publication number	US-2016170908-A1
Application number	US-201615050082-A
Country	US
Kind code	A1
Filing date	Feb 22, 2016
Priority date	May 15, 2009
Publication date	Jun 16, 2016
Grant date	—

Abstract

Systems and methods authenticate storage devices. In one implementation, a computer-implemented method is provided for authenticating a storage device. According to the method, a manifest that identifies a destination is receive. A transfer station reads a digital signature from the storage device. The digital signature is validated and, based on the validation of the digital signature, a transfer of one or more files from the storage device via the transfer station is authorized to the destination identified in the manifest.

First claim

1 .- 16 . (canceled)

17 . A computer-implemented method for authenticating a storage device, comprising:
receiving a manifest, the manifest identifying a destination; reading, by a transfer station, a digital signature from the storage device; validating the digital signature; and authorizing, based on the validation of the digital signature, a transfer of one or more files from the storage device via the transfer station to the destination identified in the manifest.

18 . The computer-implemented method of claim 17 , further comprising:
validating a format of the manifest.

19 . The computer-implemented method of claim 17 , further comprising:
transmitting, to a sender of the manifest, a device identifier.

20 . The computer-implemented method of claim 19 , further comprising:
retrieving the manifest based on the device identifier.

21 . The computer-implemented method of claim 17 , wherein the storage device further has the device identifier stored thereon.

22 . The computer-implemented method of claim 17 , wherein the storage device further has an identifier of the sender stored thereon.

23 . The computer-implemented method of claim 17 , further comprising:
transferring, when the digital signature is valid, the one or more files from the storage device via the transfer station to the destination.

24 . The computer-implemented method of claim 17 , further comprising:
storing the manifest to a memory location that is accessible by the transfer station over a network.

25 . The computer-implemented method of claim 17 , wherein reading the digital signature by the transfer station further comprises reading the storage device via a port of the transfer station.

26 . The computer-implemented method of claim 17 , wherein reading the digital signature by the transfer station further comprises reading the storage device via a drive of the transfer station.

27 . The computer-implemented method of claim 17 , wherein the destination comprises a storage location of a storage server that is external to the transfer station.

28 . The computer-implemented method of claim 17 , wherein the destination is a storage location available over a network.

29 . The computer-implemented method of claim 28 , wherein the manifest further comprises instructions specifying a directory of the storage location for transferring the one or more files.

30 . The computer-implemented method of claim 17 , wherein validating the digital signature comprises sending the digital signature to an external service.

31 . The computer-implemented method of claim 30 , wherein the external service uses a secret key of the sender.

32 . The computer-implemented method of claim 30 , wherein the external service uses a secret key of a recipient of the storage device.

33 . A system for authenticating a storage device, the system comprising:
a server comprising a processor and a data store, the server being in communication with a network; and a transfer station in communication with the network, the transfer station operable to:
receive a manifest, the manifest identifying a destination;
read a digital signature from the storage device;
validate the digital signature; and
authorize, based on the validation of the digital signature, a transfer of one or more files from the storage device to the destination identified in the manifest.

34 . The system of claim 33 , wherein the transfer station is further operable to retrieve the manifest.

35 . The system of claim 33 , wherein the transfer station uses the destination to identify a storage location of the data store to which the one or more files are uploaded.

36 . The system of claim 35 , wherein the manifest further comprises instructions specifying a directory of the storage location for transferring the one or more files.

37 . The system of claim 33 , wherein validating the digital signature comprises sending the digital signature from the transfer station to an external service over the network.

Assignees

• Amazon Tech Inc

Inventors

• Coughlin Chesley B
• Wagner Eric M

Classifications

• G06F2212/1052

  Security improvement · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• H04L9/3268

  using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL] · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• G06F12/1408 Primary

  by using cryptography (for digital transmission H04L9/00) · CPC title