摘要 |
<p>Extension fields (212) in a provisioning certificate (204) in the authentication silo (200) of a transient storage device (TSD) (100) are used to provide secure configuration options for TSDs while operating within the constraints of the current IEEE 1667 standard. Immutable values for configurable settings of the storage device (100) are set in extension fields (212) of a provisioning certificate (204). The provisioning certificate (204) is then installed on the storage device (100). The method takes advantage of properties unique to the IEEE 1667 certificate silo specification and ITU-T X.509 certificate specification, while satisfying the security requirements for device configuration and taking advantage of the existing standards definitions as they are, without modification. An administrator may choose to set several device settings, for example, the number of addressable command targets (ACTs) (218), the portion of total data storage area allocated to each ACT (214), and access settings (220, 222).</p> |