Data Signature Engine for Secure Memory Backup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current RAID storage systems lack efficient mechanisms for ensuring data integrity and security during power failures, particularly in system-on-a-chip (SoC) configurations, where data must be quickly and securely transferred from volatile to nonvolatile memory without software intervention.
Innovation Solution
A method and integrated circuit design that includes a data signature engine and controllers for isolating power, transferring data, and generating integrity signatures, which corrupts signatures in response to errors to indicate data integrity issues during memory backup, ensuring secure and error-detectable data transfer between volatile and nonvolatile memory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is transferred from volatile to nonvolatile memory during power failure, then data integrity is improved, but the complexity of the system increases due to hardware-controlled power isolation and signature generation
Solution Approach 1:
The system performs automatic power isolation and memory backup without software intervention. The hardware-controlled power isolation circuit automatically isolates power to volatile memory when failure is detected, and the signature engine automatically generates integrity signatures, enabling the system to protect itself during power failures
Solution Approach 2:
A dedicated data signature engine is introduced as an intermediary component between the volatile and nonvolatile memory. This specialized hardware module generates cryptographic signatures to verify data integrity, acting as a mediator that ensures reliable data transfer without requiring complex software validation protocols
2Reliability
If hardware-controlled power isolation is implemented, then data security is improved, but the ease of operation deteriorates due to automatic power cutoff
Solution Approach 1:
The system performs preliminary data backup to nonvolatile memory before complete power loss occurs. The hardware detection circuit identifies power failure conditions and triggers automatic backup operations, ensuring data is secured before the power cutoff that would otherwise make the system inoperable
3Productivity
If data is quickly transferred during power failure, then productivity is improved, but measurement precision deteriorates due to error detection challenges
Solution Approach 1:
The system replaces software-based error detection and validation mechanisms with hardware-based cryptographic signature generation and verification. The data signature engine uses cryptographic algorithms to create unique signatures for transferred data blocks, providing precise error detection through mathematical verification rather than mechanical or software checking processes
Data Source
AI summary
Disclosed is a power isolation and backup system. When a power fail condition is detected, temporary storage is flushed to an SDRAM. After the flush, interfaces are halted, and power is removed from most of the chip except the SDRAM subsystem. The SDRAM subsystem copies data from an SDRAM to a flash memory. On the way, the data may be encrypted, and/or a data integrity signature calculated. If an error is detected, a data integrity signature may be corrupted. A completion signature may be written. To restore data, the SDRAM subsystem copies data from the flash memory to the SDRAM. On the way, the data being restored may be decrypted, and/or a data integrity signature and completion signature checked.