AUTHORIZING AND VALIDATING REMOVABLE STORAGE FOR USE WITH CRITICAL INFRASTRCTURE COMPUTING SYSTEMS

摘要

An information processing system validates authorization of a removable storage device for accessing the system. For example, the system detects a removable storage device. A first content hash and a first set of device verification data are obtained from a validation token stored on the storage device. A second content hash is obtained based on hashing content currently stored on the storage device. A second set of device verification data is obtained from the storage device. The system denies the storage device access to the system based on at least one of the first and second content hashes failing to match and the first and second sets of device verification data failing to match. The system grants the storage device access to the system based on the first and second content hashes matching and the first and second sets of device verification data matching.