Authentication Module Memory Segmentation for Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods, particularly of the challenge/response type between a verifier and a prover, lack reliability, making them vulnerable to unauthorized access and data breaches.
Innovation Solution
An authentication method where each device comprises a processor, memory, and an authentication module that restricts the processor's access to certain memory areas, generating and verifying matching data to ensure secure communication, with the authentication module intervening to prevent unauthorized data reading or writing and executing instructions only within designated memory areas.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the processor is allowed to access all memory areas during authentication, then the authentication process can be more flexible and comprehensive, but the security against unauthorized access is reduced
Solution Approach 1:
The memory is divided into multiple distinct areas with different access permissions. The authentication module restricts the processor to specific memory areas during authentication operations, preventing access to other areas that could contain sensitive data or malicious code. This segmentation isolates the authentication process from potential security threats in other memory regions.
Solution Approach 2:
The authentication module acts as an intermediary between the processor and the memory system. It controls and filters all memory access requests during authentication, allowing only permitted reads and writes to specific areas while blocking unauthorized access attempts. This intermediary layer ensures that the processor cannot directly access restricted memory regions.
2Reliability
If the authentication module restricts processor access to memory areas, then security is improved, but the device complexity increases
Solution Approach 1:
The authentication module is integrated directly into the processor's memory interface, allowing it to self-manage access control without requiring external control logic. The module autonomously evaluates memory access requests and enforces restrictions based on predefined authentication states, reducing the need for additional complex control circuitry outside the processor.
3Measurement precision
If the processor can read all memory data during authentication, then comprehensive verification is possible, but data protection against breaches is weakened
Solution Approach 1:
Memory is segmented into authentication-critical areas and protected areas. The processor is granted read access only to authentication-critical memory areas containing necessary verification data, while protected areas containing sensitive information remain inaccessible. This segmentation enables precise verification where needed while maintaining data protection where required.
Solution Approach 2:
Different memory areas are assigned different access qualities based on their security requirements. Authentication-critical areas allow processor reads for verification purposes, while protected areas enforce stricter access controls. This local differentiation of access permissions enables comprehensive verification in safe zones while maintaining data protection in sensitive zones.
Data Source
AI summary
The present disclosure relates to an authentication method of a first device by a second device, each first, second device having a processor, at least one memory, and an authentication circuit, in which the authentication circuit is configured to prohibit the processor from reading data stored in at least part of said memory. The authenticating includes generating a first datum, and a second datum. The second device verifies that the first and second data match.