| CPC H04L 9/3213 (2013.01) [H04L 9/0643 (2013.01); H04L 9/0861 (2013.01); H04L 9/3247 (2013.01)] | 20 Claims |
|
1. A storage device comprising:
a memory device storing data; and
a controller controlling the memory device,
wherein the controller obtains and stores a certificate including a public key of an administrator from a host device, provides a nonce to the host device in response to a request from the host device, receives a token request signature including the nonce, a user identifier (ID), an allowed command list and a lifetime from the host device, and when it is verified that the token request signature is generated by a legitimate administrator by decrypting the token request signature with the public key, generates a token for allowing a user corresponding to the user ID to execute a command included in the allowed command list during the lifetime, and a token secret key corresponding to the token, and provides the token and the token secret key to the host device.
|