Authenticated Memory Access for Secure Execution-in-Place

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing memory device security systems, particularly in automotive applications, face challenges in ensuring secure execution-in-place operations without compatibility with shadow memory approaches, as they lack effective authentication mechanisms for direct code execution from nonvolatile memory.

Innovation Solution

Implementing per transaction authentication in nonvolatile memory devices that generate and transmit authentication values alongside data, using built-in authentication circuits to authenticate both data and the memory device itself, enabling secure execution-in-place operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If shadow memory approach is used to authenticate code, then security is improved, but compatibility with execution-in-place designs is lost

Engineering Contradiction:

ImprovesecurityVSAvoidcompatibility with execution-in-place designs

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The authentication process is segmented into two independent parts: device authentication (verifying the memory device identity) and data authentication (verifying the code integrity). This segmentation allows the system to authenticate code directly from nonvolatile memory without requiring shadow memory, resolving the contradiction between security and execution-in-place compatibility.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Authentication parameters act as an intermediary mechanism that enables both device and data authentication. These parameters are established between the host and memory device, allowing the system to achieve security goals while maintaining compatibility with execution-in-place architectures through a mediating authentication framework.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Device complexity

If conventional memory access is used, then simplicity is maintained, but security authentication is insufficient

Engineering Contradiction:

ImprovesimplicityVSAvoidsecurity authentication

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The patent merges device authentication and data authentication into a single integrated transaction process. The memory device simultaneously performs both authentication types and returns both device authentication data and data authentication data in one operation, maintaining simplicity while achieving comprehensive security.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The memory device performs authentication operations autonomously using its own authentication circuits and stored authentication parameters. This self-service capability eliminates the need for external authentication hardware, maintaining system simplicity while providing robust security authentication.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS12579246B2Methods, devices and systems with authenticated memory device access transactions

Publication Date: 2026.03.17 INFINEON TECHNOLOGIES LLC

AI summary

A method can include determining the CS signal has transitioned from inactive to active and receiving at least target address information at a bus interface of the IC device. In response to target address information, retrieving data stored at a corresponding storage location of the IC device. By operation of authentication circuits, generating an authentication value using at least one cryptographic function that includes at least the authentication parameters and the retrieved data. The authentication value can be transmitted with retrieved data from the IC device. Corresponding devices and systems are also disclosed.