Erase Counter Segmentation for Non-Volatile Memory Tamper Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing memory systems lack effective mechanisms to monitor and detect unauthorized data manipulation, particularly in non-volatile memories, where erase counters are needed to track usage but can be tampered with or reset by application software.

Innovation Solution

Implementing an erase counter system with dedicated fields in memory that store selection codes and address information, allowing for the determination of physical memory addresses and incrementing the counter without software manipulation, ensuring it cannot be deleted by customers and is only updated via authorized means.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If erase counters are implemented in non-volatile memory to track usage, then monitoring capability is improved, but vulnerability to software manipulation and tampering increases

Engineering Contradiction:
Improvemonitoring capabilityVSAvoidintegrity of erase counter
Core Design Contradiction:
Measurement precisionVSReliability

Solution Approach 1:

The erase counter system is segmented into multiple independent fields (first erase counter field, second erase counter field, third erase counter field) with different functions. The first field stores the actual erase count, the second field stores selection codes, and the third field stores address information. This segmentation isolates the monitoring function from manipulation risks.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary processing mechanism that combines selection codes and address information from separate fields to determine physical addresses. This intermediary process prevents direct software access to modify erase counter values, as the system requires coordinated access to multiple fields through a controlled combining process.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If erase counter fields are made accessible for monitoring purposes, then ease of operation is improved, but susceptibility to unauthorized modification increases

Engineering Contradiction:
Improveaccessibility for monitoringVSAvoidunauthorized modification
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

Different erase counter fields are assigned different local qualities or access characteristics. The first field containing the actual erase count has restricted access properties, while the second and third fields containing selection codes and address information have different access properties. This localized quality differentiation allows monitoring while preventing unauthorized modification of critical data.

Inventive Principle:
Principle #3Local quality

3Adaptability or versatility

If multiple erase counter fields are used to store selection codes and address information, then functionality is improved, but device complexity increases

Engineering Contradiction:
ImprovefunctionalityVSAvoidnumber of erase counter fields
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The erase counter system implements multi-functionality by using multiple fields that can serve different purposes. The same erase counter structure can monitor different memory regions, support various addressing modes, and provide multiple levels of access control. This universal design allows the system to handle diverse monitoring requirements without requiring completely separate counter structures for each function.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS9466377B2Method and device for processing an erase counter
Publication Date: 2016.10.11 INFINEON TECHNOLOGIES AG
  • US9466377B2 patent drawing
  • US9466377B2 patent drawing
  • US9466377B2 patent drawing

AI summary

A embodiment relates to a method for processing an erase counter comprising erase counter fields, the method comprising the steps of (i) determining an unused erase counter field; (ii) writing a selection code and an address information in the unused erase counter field, wherein the selection code and the address information are combined to determine at least one physical address of a memory.