# Securing Data Storage Commands with Passcodes > This patent describes a system for securely executing commands on data storage systems by requiring a generated passcode, which is based on user authentication and specific storage entity attributes. - **Patent:** US 10102356 - **Original title:** Securing storage control path against unauthorized access - **Owner:** EMC IP Holding Co LLC - **Granted:** 2018 - **Status:** Active - **Times cited:** 89 - **Field:** consumer_electronics, software, telecommunications, semiconductors ## What it does This patent details a method for protecting data storage systems from unauthorized actions. When a user wants to issue a command, like modifying or deleting data, they first provide their user ID and authentication info. If that checks out (like a password and a code from an app), the system generates a special passcode. This passcode isn't random; it's created using specific details about the storage system or the data being targeted, like its serial number or a snapshot ID. The user then sends their command along with this passcode. The storage system checks if the passcode is valid for that specific command and data, and only if it matches does it execute the command. This ensures that even if someone intercepts a command, they can't run it without the correct, context-aware passcode. ## What it does NOT cover - Commands that do not require a passcode because they are not part of a predefined subset of sensitive operations. - Executing control commands without first successfully authenticating the user identifier. - Generating a passcode that is not based on at least one attribute of the specific data storage entity being targeted. - Using a passcode that has not been validated by the data storage system against the specific command and entity. - Control commands that are not part of an 'allowable' set of operations defined by policies. ## The clever bit The innovation lies in generating a dynamic passcode that is intrinsically linked to the specific data storage entity and the type of command being issued. Instead of a static password, it uses attributes of the target data, making the passcode context-aware and much harder to spoof or reuse incorrectly. ## Real-world examples 1. Enterprise storage management software 2. Cloud storage control planes 3. Data backup and recovery systems ## Why it matters In enterprise data centers, managing vast amounts of storage is critical. Unauthorized changes to storage configurations, like deleting critical data or logical devices, can have catastrophic consequences. This patent provides a robust mechanism to prevent such accidental or malicious actions by adding an extra layer of security specifically for sensitive storage operations. ## Frequently asked questions ### What does Securing Data Storage Commands with Passcodes cover? This patent describes a system for securely executing commands on data storage systems by requiring a generated passcode, which is based on user authentication and specific storage entity attributes. ### Who owns patent US 10102356? EMC IP Holding Co LLC owns this patent, granted in 2018. ### When does this patent expire? This patent is expected to expire on October 16, 2038, when the invention enters the public domain. ### What is patent US 10102356 cited by? This patent has been cited by 89 later patents that build on its ideas. ### What problem does this patent solve? In enterprise data centers, managing vast amounts of storage is critical. Unauthorized changes to storage configurations, like deleting critical data or logical devices, can have catastrophic consequences. This patent provides a robust mechanism to prevent such accidental or malicious actions by adding an extra layer of security specifically for sensitive storage operations. ### What does this patent NOT cover? Commands that do not require a passcode because they are not part of a predefined subset of sensitive operations. **Full plain-English explainer:** https://patentbrief.org/patent/us/10102356/macos-dark-mode **Original patent:** https://patents.google.com/patent/US10102356 --- _Source: PatentBrief — https://patentbrief.org. Patent facts are from public records; the plain-English explanation is PatentBrief's._ ## Related patents Semantically similar inventions in the PatentBrief corpus: - [How Devices Use 'Credits' to Manage Data Flow to Storage](https://patentbrief.org/patent/us/11593031/operating-method-of-host-device-and-storage-device-using-credit) — This patent describes a system where a main device and a storage device use a 'credit' system to efficiently manage the flow of commands and responses, preventing either side from being overwhelmed with too much data. - [How Computers Use Hardware to Stop Software Piracy and Cracking](https://patentbrief.org/patent/us/4558176/computer-systems-to-inhibit-unauthorized-copying-unauthorized-usage-and-automated-cracking-of-protected-software) — A 1982 hardware-based security system that prevents software from being copied or cracked by destroying sensitive data if the computer detects unauthorized access or execution. - [How Wearable Devices Act as Secure Bridges for Transactions](https://patentbrief.org/patent/us/9699159/microsoft-teams) — A system where a wearable device acts as a secure middleman between your phone and a payment terminal or electronic lock to verify your identity and complete transactions. - [How Virtual Machines Keep Their Data Separate on Shared Storage](https://patentbrief.org/patent/us/9760393/azure-machine-learning) — A method for virtual machines to store data in isolated, non-mixed logical storage units to improve security and management efficiency within a shared physical storage pool. - [How Microsoft Protects Corporate Data on Employee Devices](https://patentbrief.org/patent/us/9430664/windows-defender-antivirus) — A system that lets companies remotely lock or delete specific work data on a phone or computer without wiping the user's personal files.