Ephemeral Cryptographic Key Generation for Non-Volatile Memory Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data encryption techniques lack effective methods to protect data stored in non-volatile memory from unauthorized access, particularly during critical data processing and device booting, as they often rely on static keys that can be compromised.
Innovation Solution
Generation of ephemeral encryption and decryption keys using a non-reversible function applied to a code stored in a non-volatile memory, which are generated at each booting or critical data processing and stored in a register, ensuring temporary availability and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static encryption keys are used to protect data in non-volatile memory, then data protection is provided, but the keys can be compromised and reused
Solution Approach 1:
The patent transitions from static encryption keys to dynamic ephemeral keys that are generated on-demand during device booting or critical data processing operations. These keys are stored in volatile memory and automatically erased after use, making them impossible to reuse or compromise long-term. This dynamic key generation approach directly addresses the key compromise issue while maintaining data protection reliability.
Solution Approach 2:
The patent employs ephemeral encryption keys that are created temporarily for a single use and then discarded. These short-living keys are generated from boot code or system identifiers and stored in volatile memory, ensuring they cannot be persisted or reused. This disposable key approach eliminates the risk of key reuse and provides enhanced security for protected data in non-volatile memory.
2Reliability
If ephemeral keys are generated at each booting or critical processing, then security is enhanced, but key generation time and computational overhead increase
Solution Approach 1:
The patent performs key generation during the device booting process or at the initiation of critical data processing operations, before the protected operations occur. By preparing the ephemeral key in advance during booting or critical task initiation, the system avoids adding significant delays during actual data access operations. The key is generated from boot code or system identifiers that are already available at these stages.
3Ease of operation
If codes are transferred to volatile memory before function application, then key generation is enabled, but memory access requirements increase
Solution Approach 1:
The patent uses volatile memory as an intermediary buffer to temporarily store the boot code or system identifier before applying the key generation function. This intermediary memory access step enables the ephemeral key to be generated from available system data without requiring direct access to non-volatile memory during the key generation process. The volatile memory acts as a working buffer that facilitates the key derivation operation.
Data Source
AI summary
An electronic device includes processing circuitry and one or more memories, including a non-volatile memory. Ephemeral cryptographic key generation circuitry, in operation, applies a function to code stored in the non-volatile memory, generating an ephemeral cryptographic key. Cryptographic circuitry coupled between the processing circuitry and the one or more memories, in operation, performs one or more cryptographic operations on data using the generated ephemeral cryptographic key. The device may include a register, which, in operation, temporarily stores the generated ephemeral cryptographic key.