Cryptographic Engine Non-Volatile Memory Low-Powered State Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for securing data on computing devices are inefficient, as they either incur high performance costs through constant encryption and decryption during use or fail to secure data when the device is in a low-powered state, leaving data vulnerable to theft or unauthorized access.

Innovation Solution

A system that utilizes a cryptographic engine coupled to non-volatile memory, powered by a secondary source when the device transitions to a low-powered state, to encrypt data stored in non-volatile memory cells, ensuring security even when decoupled from the computing device, and decrypts data when the device is powered back on with appropriate authorization.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If data is encrypted during operation of the computing device, then data security is improved, but performance and power consumption increase significantly

Engineering Contradiction:
Improvedata securityVSAvoidperformance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent applies periodic action by encrypting data only during specific operational states (low-powered states) rather than continuously during all operations. The cryptographic engine is activated selectively when the device transitions to low-powered states where data security is critical but performance overhead must be minimized, thus resolving the contradiction between continuous encryption and performance maintenance.

Inventive Principle:
Principle #19Periodic action

2Reliability

If data is encrypted when the device is powered down, then data security at rest is improved, but additional power management complexity is introduced

Engineering Contradiction:
Improvedata security at restVSAvoidpower management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the cryptographic engine with the non-volatile memory module, combining data storage and encryption functions into a single integrated component. This integration eliminates the need for separate power management systems for encryption operations, as the cryptographic engine shares the memory module's power supply and operational states, thereby reducing overall system complexity while maintaining security.

Inventive Principle:
Principle #5Merging (Combining)

3Reliability

If a cryptographic engine is always active, then data security is maintained continuously, but power consumption increases

Engineering Contradiction:
Improvecontinuous data securityVSAvoidpower consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements dynamics by making the cryptographic engine's operational state variable rather than fixed. The engine dynamically transitions between active and inactive states based on the computing device's operational mode, being activated only during low-powered states when security is paramount and deactivated during high-powered states to conserve energy, thus optimizing the balance between continuous security and power consumption.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS11586775B2Securing data
Publication Date: 2023.02.21 HEWLETT PACKARD DEVELOPMENT COMPANY LP
  • US11586775B2 patent drawing
  • US11586775B2 patent drawing
  • US11586775B2 patent drawing

AI summary

In some examples, securing data on a computing device includes one or more cryptographic operations on at least a portion of data stored in a memory module of the computing device in response to a change of operational state of the system from a first operational state to a second operational state.