CLIAMS:We Claim:
1. A method of performing secure read/write operation in a pluggable flash storage device, said method comprising:
receiving, from at least one of user and a storage controller, one or more requests for at least one of writing and reading of data in/from the pluggable flash storage device;
upon receiving the request for writing data, authenticating the pluggable flash storage device based on a predetermined signature of the pluggable flash storage device;
authenticating at least one of user and the storage controller by comparing a write access key provided to at least one of user and the storage controller with a predetermined write access key; and
performing write operation of data in the pluggable flash storage device upon authenticating the pluggable flash storage device and at least one of the user and the storage controller.
2. The method as claimed in claim 1, wherein the predetermined signature of the pluggable flash storage device is generated by the steps of:
extracting information associated with the pluggable flash storage device, the information include at least physical serial number, model number, manufacturing identity number and name of manufacturer;
generating a pseudo number based on the extracted information and storing the generated pseudo number in the predefined memory location of the storage controller;
processing the pseudo number using hash function to generate a hashed value; and
encrypting the hashed value into the predetermined signature of the pluggable flash storage device.
3. The method as claimed in claim 1, wherein authenticating the pluggable flash storage device comprises the steps of:
determining signature of the pluggable flash storage device stored in a predefined memory location of the pluggable flash storage device;
decrypting the determined signature into a hashed value;
generating a pseudo number based on the hashed value;
comparing the generated pseudo number of the pluggable flash storage device with a predetermined pseudo number stored in the predefined memory location of the storage controller; and
authenticating the pluggable flash storage device based on comparison.
4. The method as claimed in claim 1, further comprising:
determining a last session ID of a last session established between the authenticated pluggable flash storage device and at least one of the user and the storage controller;
upon determining the last session ID, performing write operation of unfinished data of the last session; and
creating a new session between the authenticated pluggable flash storage device and at least one of the user and the storage controller based on the last session ID for performing write operation of data in the pluggable flash storage device.
5. The method as claimed in claim 1, wherein performing the write operation of data in the pluggable flash storage device comprising the steps of:
encrypting the data to be written in the pluggable flash storage device;
compressing the encrypted data into a compressed data; and
storing the compressed data in the predetermined memory location of the pluggable flash storage device.
6. The method as claimed in claim 1, further comprising:
upon receiving, from at least one of user or the storage controller, a request for reading of data from the pluggable flash storage device;
authenticating at least one of the user and the storage controller by comparing a read access key provided to at least one of user and the storage controller with a predetermined read access key;
upon authenticating, extracting the compressed data from the predefined memory location of the pluggable flash storage device;
decompressing the extracted compressed data to obtain an encrypted data;
decrypting the encrypted data to generate the decrypted data; and
performing read operation of the decrypted data from the pluggable flash storage device.
7. The method as claimed in claims 1, 4 and 6, wherein the predetermined write access key, the predetermined read access key, and last session ID are stored in predefined memory location of the storage controller.
8. A system for performing secure read/write operation in a pluggable flash storage device, the system comprising:
a user IO request queue for receiving one or more requests for at least one of reading and writing of data from at least one of user and a storage controller;
the pluggable flash storage device;
an IO engine coupled with the pluggable flash storage device;
the storage controller coupled with the user IO request queue and the IO engine, comprising:
at least a device authentication and data security (DADS) component configured to:
receive, from the user IO request queue, the one or more requests for writing data;
upon receiving the request, authenticate the pluggable flash storage device based on a predetermined signature of the pluggable flash storage device;
authenticate at least one of user and the storage controller by comparing a write access key provided to at least one of user and the storage controller with a predetermined write access key; and
perform write operation of data in the pluggable flash storage device upon authenticating the pluggable flash storage device and at least one of the user and the storage controller .
9. The system as claimed in claim 8, wherein the DADS component comprises at least a hash key generating and authenticating unit configured to generate the predetermined signature of the pluggable flash storage device by the steps of:
extracting information associated with the pluggable flash storage device, the information include at least physical serial number, model number, manufacturing identity number and name of manufacturer;
generating a pseudo number based on the extracted information and storing the generated pseudo number in the predefined memory location of the storage controller;
processing the pseudo number using hash function to generate a hashed value; and
encrypting the hashed value into the predetermined signature of the pluggable flash storage device.
10. The system as claimed in claim 8, wherein the hash key generating and authenticating unit is configured to authenticate the pluggable flash storage device by the steps of:
determining signature of the pluggable flash storage device stored in a predefined memory location of the pluggable flash storage device;
decrypting the determined signature into a hashed value;
generating a pseudo number based on the hashed value;
comparing the generated pseudo number of the pluggable flash storage device with a predetermined pseudo number stored in the predefined memory location of the storage controller; and
authenticating the pluggable flash storage device based on comparison.
11. The system as claimed in claim 8, wherein the DADS component further comprises a session and write control unit configured to:
determine a last session ID of a last session established between the authenticated pluggable flash storage device and at least one of the user and the storage controller;
upon determining the last session ID, perform write operation of unfinished data of the last session; and
create a new session between the authenticated pluggable flash storage device and at least one of the user and the storage controller based on the last session ID for performing write operation of data in the pluggable flash storage device.
12. The system as claimed in claim 8, wherein the DADS component further comprises a encryption and compression unit configured to perform the write operation of data in the pluggable flash storage device by the steps of:
encrypting the data to be written in the pluggable flash storage device;
compressing the encrypted data into a compressed data; and
storing the compressed data in the predetermined memory location of the pluggable flash storage device.
13. The system as claimed in claim 8, wherein the DADS component is further configured to:
receive, from at least one of user or the storage controller, a request for reading of data from the pluggable flash storage device;
authenticate at least one of the user and the storage controller by comparing a read access key provided to at least one of user and the storage controller with a predetermined read access key;
upon authenticating, extract the compressed data from the predefined memory location of the pluggable flash storage device;
decompress the extracted compressed data to obtain an encrypted data;
decrypt the encrypted data to generate the decrypted data; and
perform read operation of the decrypted data from the pluggable flash storage device.
14. The system as claimed in claim 8, further comprises a dedicated controller cache coupled with the storage controller, configured to store predetermined write access key, the predetermined read access key, the pseudo number and the last session ID are stored in predefined memory location of the storage controller.
15. A non-transitory computer readable medium including instructions stored thereon that when processed by at least one processor cause a system to perform acts of:
receiving, from at least one of user and a storage controller, one or more request for at least one of writing and reading of data in/from the pluggable flash storage device;
upon receiving the request for writing data, authenticating the pluggable flash storage device based on a predetermined signature of the pluggable flash storage device;
authenticating at least one of user and the storage controller by comparing a write access key provided to at least one of user and the storage controller with a predetermined write access key; and
performing write operation of data in the pluggable flash storage device upon authenticating the pluggable flash storage device and at least one of the user and the storage controller.

Dated this 5th day of February 2015
M.S. Devi
Of K&S Partners
Agent for the Applicant
,TagSPECI:FIELD OF THE DISCLOSURE
The present subject matter is related, in general to data security, and more particularly, but not exclusively to method and system for preforming secure read/write operation in a pluggable flash storage device.