eMMC Access Protection Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current embedded Multimedia card (eMMC) devices lack secure protection mechanisms, allowing unauthorized entities to alter their access protection schemes, which is a critical vulnerability in securing memory operations.
Innovation Solution
Implementing an authentication technique that requires successful completion of an authentication process to alter the access protection scheme, utilizing pre-programmed cryptographic keys and additional registers in the eMMC device to ensure only authorized changes can be made to the configuration, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access protection schemes are implemented in eMMC devices, then write protection for memory partitions is provided, but the schemes can be altered by unauthorized entities
Solution Approach 1:
Cryptographic keys are pre-programmed into the eMMC device during manufacturing, and authentication credentials are established in advance. This preliminary setup enables the device to verify future access requests and prevent unauthorized alterations to protection schemes.
Solution Approach 2:
An authentication mechanism acts as an intermediary between access requests and the access protection scheme configuration. The mechanism verifies credentials before allowing any modifications to protection settings, blocking unauthorized entities from altering the scheme.
2Reliability
If authentication techniques are implemented to secure access protection, then only trusted hosts can alter configuration, but device complexity increases
Solution Approach 1:
The authentication mechanism leverages existing eMMC interface protocols and register structures, making the security feature work within the existing device framework rather than requiring entirely new hardware components. This reduces the impact on device complexity.
Solution Approach 2:
The authentication mechanism controls access by changing the state of specific bits in configuration registers based on authentication results. When authentication succeeds, write enable bits are set; when it fails, they remain cleared. This parameter-based control provides security without adding complex structural elements.
Data Source
AI summary
A device includes a memory. The device also includes a controller. The controller includes a register configured to store an indication of whether an ability of a received command to alter an access protection scheme of the memory is enabled. The received command may alter the access an access protection scheme of the memory responsive to the indication.