Encrypted Map Data Sharing for Faster Address Translation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In data processing systems, existing memory systems face challenges in efficiently managing data communication and security, particularly in reducing address translation time and improving I/O throughput, while maintaining data integrity and security during data transmission between the memory system and host devices.
Innovation Solution
The implementation of a method and apparatus that dynamically allocates data paths based on component usage, employs a controller to encrypt and decrypt map data, and uses a host performance booster to transmit encrypted map information, thereby reducing overhead and enhancing security and performance by minimizing unnecessary decoding operations at the host.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If map information is transmitted from the memory system to the host to reduce address translation time, then input/output performance is improved, but data security and communication overhead are worsened
Solution Approach 1:
The patent creates an encrypted copy of the map information (physical address to logical address mapping) and transmits it to the host. Instead of transmitting the original map data directly, an encrypted version is generated and sent, allowing the host to use the mapping information for address translation while the original sensitive data remains protected in the memory system.
Solution Approach 2:
The patent changes the state of the map information by applying encryption algorithms, transforming the data from its original readable form into an encrypted form that cannot be directly interpreted. This parameter change (from plaintext to ciphertext) allows the map information to be transmitted without compromising security, as the encrypted form does not reveal the actual mapping relationships.
2Speed
If map information is transmitted to the host to eliminate address translation overhead, then data access speed is improved, but communication overhead and security risks increase
Solution Approach 1:
An encrypted copy of the map information is transmitted to the host, enabling the host to perform address translation using this copy. This eliminates the need for the memory system to perform address translation for every data access, thereby improving data access speed while the encryption mechanism manages the additional communication overhead.
Solution Approach 2:
The map information is encrypted and transmitted to the host in advance, before actual data access operations occur. This preliminary action allows the host to have the mapping information readily available for quick address translation during data access, improving speed while the encryption is performed as a one-time preliminary operation rather than for every access.
3Reliability
If encryption is applied to map data to enhance security, then data protection is improved, but processing overhead and complexity increase
Solution Approach 1:
Instead of encrypting all data in the system, the patent applies encryption specifically to the map information copy that needs to be transmitted. This selective copying and encryption approach enhances data protection for the critical mapping information while minimizing processing overhead compared to encrypting all data paths.
Solution Approach 2:
The encryption is applied locally and selectively to the map information that requires protection during transmission, rather than applying a universal encryption scheme to all data. This local quality approach ensures that only the necessary data (map information) undergoes the complex encryption process, reducing overall processing overhead while maintaining security where needed.
Data Source
AI summary
A controller is coupled to a non-volatile memory device and a host. The controller is configured to perform a cyclic redundancy check on map data associated with user data stored in the memory device, generate an encryption code based on a logical address included in the map data, generate encrypted data through a logical operation on the encryption code and the map data, and transmit the encrypted data to the host.