Host device and method for communicating a password between first and second storage devices using a double-encryption scheme
View Patent ↗A first storage device provides a host device with access to a private memory area by communicating a password between the first storage device and a second storage device via the host device using a double-encryption scheme. In one embodiment, a host device receives a twice-encrypted password from a first storage device, sends the twice-encrypted password to a second storage device, receives a once-encrypted password from the second storage device, decrypts the once-encrypted password to obtain the password, and sends the password to the first storage device. In another embodiment, a first storage device sends a twice-encrypted password to a host device, receives the password from the host device after the twice-encrypted password is decrypted by a second storage device and the host device, and provides the host device with access to the private memory area only if the password matches one that is stored in the first storage device.
1. A method for communicating a password between first and second storage devices through a host device, the method comprising:
performing by a host device which is in communication with first and second storage devices:
receiving a twice-encrypted password from the first storage device, the password being useable for accessing a private memory area in the first storage device;
sending the twice-encrypted password to the second storage device, wherein the second storage device is configured to decrypt the twice-encrypted password to obtain a once-encrypted password;
receiving the once-encrypted password from the second storage device;
decrypting the once-encrypted password to obtain the password; and
sending the password to the first storage device.
2. The method of claim 1 , wherein the host device receives the once-encrypted password from the second storage device via an unsecured channel and sends the password to the first storage device in plaintext form via a secured channel using a session key.
3. The method of claim 1 , wherein decrypting the once-encrypted password to obtain the password comprises:
calculating a decryption key; and
decrypting the once-encrypted password with the decryption key.
4. The method of claim 1 , wherein the twice-encrypted password is stored in a hidden area in the first storage device.
5. The method of claim 1 , wherein the host device gains access to the private memory area only if the password matches one that is stored in the first storage device.
6. The method of claim 1 , wherein the second storage device comprises a smart card.
7. The method of claim 1 , wherein the first storage device comprises a universal serial bus (USB) device.
8. The method of claim 1 , wherein the host device comprises a personal computer (PC).
9. The method of claim 1 further comprising sending a command to read or write to the private memory area after sending the password to the first storage device.
10. A host device comprising:
a first interface configured to communicate with a first storage device;
a second interface configured to communicate with a second storage device;
a controller in communication with the first and second interfaces, wherein the controller is configured to:
receive a twice-encrypted password from the first storage device, the password being useable for accessing a private memory area in the first storage device;
send the twice-encrypted password to the second storage device, wherein the second storage device is configured to decrypt the twice-encrypted password to obtain a once-encrypted password;
receive the once-encrypted password from the second storage device;
decrypt the once-encrypted password to obtain the password; and
send the password to the first storage device.
11. The host device of claim 10 , wherein the host device receives the once-encrypted password from the second storage device via an unsecured channel and sends the password to the first storage device in plaintext form via a secured channel using a session key.
12. The host device of claim 10 , wherein decrypting the once-encrypted password to obtain the password comprises:
calculating a decryption key; and
decrypting the once-encrypted password with the decryption key.
13. The host device of claim 10 , wherein the twice-encrypted password is stored in a hidden area in the first storage device.
14. The host device of claim 10 , wherein the host device gains access to the private memory area only if the password matches one that is stored in the first storage device.
15. The host device of claim 10 , wherein the second storage device comprises a smart card.
16. The host device of claim 10 , wherein the first storage device comprises a universal serial bus (USB) device.
17. The host device of claim 10 , wherein the host device comprises a personal computer (PC).
18. The host device of claim 10 , wherein the controller is further configured to send a command to read or write to the private memory area after sending the password to the first storage device.