Authenticated Memory Encryption Engine Counter Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing authentication systems using authentication trees are vulnerable to data tampering, as deleted nodes can be re-added without undergoing authentication processes, compromising data confidentiality.
Innovation Solution
An information processing device equipped with an authenticated memory encryption engine that performs cryptographic and authentication processes using an authentication tree. The engine updates counter values when nodes are deleted and sets counter values for new nodes based on their parent nodes, ensuring that re-added nodes undergo authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If nodes are deleted from the authentication tree to optimize storage, then storage efficiency is improved, but security deteriorates because deleted nodes can be re-added without authentication
Solution Approach 1:
The patent applies preliminary action by updating the counter value of the parent node before deleting a child node. This ensures that when the node is later re-added to the authentication tree, the counter mismatch prevents unauthorized re-addition without authentication. The counter update is performed in advance to establish a security barrier against future re-addition attempts.
2Reliability
If counter values are updated for all parent nodes when deleting nodes, then security is improved, but processing complexity increases
Solution Approach 1:
The patent applies local quality by updating the counter value only for the immediate parent node of the deleted node, rather than updating all ancestor nodes in the authentication tree. This localized approach maintains security by preventing unauthorized re-addition while minimizing processing complexity by limiting the scope of counter updates to only what is necessary.
Data Source
AI summary
An information processing device includes an authenticated memory encryption engine configured to perform a cryptographic process and an authentication process using an authentication tree for data, and perform an authentication process for tags of respective nodes present on a path from a leaf node to which the data is assigned to a root node, in which the authenticated memory encryption engine is further configured to: update, when any of nodes in the authentication tree is to be deleted, a counter value assigned to a parent node of the node to be deleted based on a counter value assigned to the node to be deleted; and set, when a new node is to be added at a position where the deleted node was originally located in the authentication tree, a counter value assigned to the added node based on a counter value assigned to a parent node of the added node.