Cryptographic Memory Block Locking for Secure Fast Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory devices lack secure and flexible mechanisms to individually lock or unlock blocks in non-volatile memory, such as NAND flash, leading to potential security breaches and increased access times when locking entire arrays.
Innovation Solution
Implementing cryptographic block locking through a system controller and memory device that uses cryptographic signatures to securely enable or disable read, write, and erase access to individual blocks, utilizing a security block to store cryptographic keys and monotonic counter values for verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If entire memory arrays are locked to secure data, then data security is improved, but access time increases significantly
Solution Approach 1:
The patent divides the memory array into multiple independently lockable blocks. Instead of locking the entire array, only specific blocks containing sensitive data are locked using cryptographic signatures. This segmentation allows selective access control where locked blocks are protected while unlocked blocks remain accessible, thereby maintaining data security for critical portions without imposing access time penalties on the entire memory array.
2Ease of operation
If individual blocks are locked using traditional methods, then access control is improved, but security is insufficient
Solution Approach 1:
The patent introduces cryptographic signatures as an intermediary mechanism between the controller and memory blocks. Before accessing a locked block, the controller must provide a valid cryptographic signature that proves authorization. This intermediary layer enhances security by preventing unauthorized access while maintaining ease of operation for authorized users, as the signature verification process is transparent and automated.
Solution Approach 2:
The patent changes the access control parameter from simple enable/disable flags to cryptographic signatures. Each locked block requires a specific cryptographic signature for access, transforming the access control mechanism from a basic on/off state to a multi-level security system. This parameter change enables fine-grained access control where different signatures can grant different levels of access to different blocks.
3Adaptability or versatility
If cryptographic block locking is implemented, then security and flexibility are improved, but device complexity increases
Solution Approach 1:
The patent implements a universal cryptographic locking mechanism that can be applied to any memory block within the array. The same cryptographic signature verification process works across all blocks, providing a multi-functional security solution. This universal approach enhances flexibility and adaptability, as the system can selectively lock or unlock any block using the same proven mechanism, rather than requiring different security approaches for different blocks.
Data Source
AI summary
A memory device may be configured to receive a command to access a block of memory that is one of multiple blocks of memory included in the memory device. The memory device may be configured to receive a cryptographic signature associated with the command. The memory device may be configured to enable or disable access to the block of memory based on the command and based on the cryptographic signature. The memory device may be capable of separately restricting access to each individual block of the multiple blocks.