Multichannel DIMM Row Address Remapping for Side Channel Attack Mitigation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current memory technologies are vulnerable to side channel attacks such as covert side channel attacks using access conflicts in DRAM row buffers and row-hammer attacks, which can bypass hardware and software protections, allowing unauthorized access and control.
Innovation Solution
A method and system for remapping row addresses on a multichannel DIMM using a key-based mapping method, involving encryption and XOR processes to generate new access addresses, ensuring that adjacent row addresses are assigned to different channels, thereby mitigating side channel attacks without degrading read/write performance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If row address remapping is implemented to prevent side channel attacks, then security against side channel attacks is improved, but device complexity increases
Solution Approach 1:
The patent introduces a memory controller as an intermediary component that performs row address remapping between the host and the DIMM. The memory controller encrypts the row address using a key-based mapping method before sending it to the DIMM, and decrypts it before accessing the data. This intermediary approach allows the security function to be implemented without requiring changes to the host or the memory architecture itself, thus improving security while controlling device complexity.
Solution Approach 2:
The patent changes the row address parameter through encryption and decryption operations. By transforming the row address into a different value (the encrypted address) before accessing the memory, the system prevents side channel attacks while maintaining the same memory access functionality. This parameter change approach allows security enhancement without fundamentally altering the memory access mechanism.
2Reliability
If row address remapping is implemented to prevent side channel attacks, then security against side channel attacks is improved, but read/write performance may be degraded
Solution Approach 1:
The patent performs the encryption and decryption operations in advance, before the actual memory access. The memory controller pre-calculates the encrypted row address and stores it in a lookup table or buffer, so that when a memory access is requested, the system can quickly retrieve the encrypted address without performing complex cryptographic operations during the critical memory access path. This preliminary action minimizes the impact on read/write performance while maintaining security.
Solution Approach 2:
The patent creates a copy of the row address through encryption, where the encrypted address serves as a placeholder that maps to the original address. This copying approach allows the system to maintain the original memory layout and access patterns while introducing security through the encrypted copy, thus avoiding performance degradation that would result from completely redesigning the memory access mechanism.
3Reliability
If key-based mapping method is used to encrypt row addresses, then security against side channel attacks is improved, but manufacturing complexity increases
Solution Approach 1:
The patent implements self-service by having the memory controller automatically perform the encryption and decryption operations without requiring external intervention. The system uses its own resources (the memory controller's processing capability and the key material) to secure the row addresses, eliminating the need for complex external security hardware or software solutions. This self-service approach simplifies manufacturing by reducing the number of additional components needed while maintaining strong security.
Solution Approach 2:
The patent makes the memory controller universal by integrating the row address remapping and encryption functionality into an existing component. Rather than adding a separate dedicated security module, the memory controller performs multiple functions (address translation, encryption, decryption, and memory control) within a single component. This multi-functionality approach reduces manufacturing complexity by avoiding additional hardware while still providing robust security against side channel attacks.
Data Source
AI summary
This application relates to the field of memory technology, in particular to a method and a system for remapping a row address on a multichannel DIMM. The method is applied to a memory controller, comprising: receiving a first read/write access address and extracting a first channel row address from the first read/write access address; encrypting and mapping the first channel row address through a key-based mapping method to obtain a second channel row address that corresponds to the first channel row address within a predetermined address range; forming a second read/write access address based on the second channel row address and unextracted address information in the first read/write access address, and performing read/write access to the DIMM based on the second read/write access address. The present application can alleviate side channel attack without causing degradation of read/write performance.