Autonomous Memory Subsystem Certificate Extension After Firmware Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory sub-systems face challenges in autonomously extending device identity certificates when mutable firmware changes, particularly in isolated environments without access to a trusted certificate authority.
Innovation Solution
A memory sub-system is configured to autonomously extend its certificate chain by persisting a first device identity key pair during a firmware update, generating a new device identity key pair based on updated firmware, and using the persisted key to sign a new device identity certificate, thereby ensuring trust and validity of the extended certificate chain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a memory sub-system updates its mutable firmware to improve functionality and security, then the device identity changes requiring a new certificate, but accessing external certificate authorities may not be available in isolated environments
Solution Approach 1:
The memory sub-system performs self-service by autonomously extending its own certificate chain using its private key to sign new device identity certificates, eliminating the need for external certificate authority intervention and enabling operation in isolated environments
Solution Approach 2:
The system performs preliminary action by storing the private key in a persistent security component before firmware updates occur, ensuring the key is available to sign new certificates after the update changes the device identity, while maintaining security through restricted access
2Extent of automation
If the private key is persisted in non-volatile memory to enable autonomous certificate extension, then certificate chain can be extended without external authorities, but security risks increase if the key is compromised
Solution Approach 1:
The system segments the key management functionality by separating the private key storage in a dedicated persistent security component from the firmware update and certificate generation functions, providing physical and logical isolation to enhance security
Solution Approach 2:
A secure element or trusted platform module acts as an intermediary between the private key and the firmware/certificate operations, mediating access to the key and ensuring it is used only for authorized certificate signing operations
Data Source
AI summary
A processing device receives a firmware update for a memory sub-system comprising a memory device. Based on the firmware update, the processing device stores a private key of a first device identity key pair in a non-volatile memory component of the memory sub-system such that the private key is persisted upon reset. The first device identity key pair is based on a first device identifier. Upon reset of the memory sub-system, the processing device generates a second device identifier based on the firmware update and generates a second device identity key pair based on the second device identifier. The processing device generates a new device identity certificate based on a public key of the second device identity key pair and signs the new certificate using the private key of the first device identity key pair. The processing device injects the new certificate into a certificate chain for the memory device.