Flash Memory Bypass-Flag Layout for Faster Encrypted Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing flash memory devices face inefficiencies in encrypting and decrypting user data due to the arrangement and configuration of encryption, decryption, and bypass paths, which affect overall system performance.
Innovation Solution
An apparatus and method that utilize a bypass-flag writing circuit and a flash interface controller to store a bypass flag in the remaining bit of space originally allocated for End-to-End Data Path Protection (E2E DPP) in flash memory devices, indicating whether user data has been encrypted, and configure decryption or bypass paths accordingly, using an encryption-and-decryption engine for decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption and decryption hardware is added to flash memory devices, then data security is improved, but device complexity and programming time increase
Solution Approach 1:
The flash memory device performs self-encryption of user data using integrated encryption hardware before writing to storage units. The device automatically manages encryption/decryption operations without requiring external security hardware, thereby improving data security while avoiding increased device complexity from additional external components.
2Reliability
If encryption hardware is integrated into flash memory devices, then data security is improved, but programming time and read efficiency deteriorate
Solution Approach 1:
The encryption hardware is pre-integrated into the flash memory device during manufacturing, so that encryption operations are performed automatically as part of the normal write process. This preliminary integration eliminates the need for additional encryption steps during programming, thereby maintaining data security while avoiding increases in programming time.
Solution Approach 2:
The encryption and decryption functions are merged into the existing flash memory controller and data path. By combining security functions with the existing hardware architecture rather than adding separate external security devices, the system achieves data security without significant increases in programming time or read efficiency degradation.
3Productivity
If a bypass path is provided for unencrypted data, then programming efficiency is improved, but system configuration complexity increases
Solution Approach 1:
The system dynamically switches between encryption and bypass paths based on the host's encryption requirements. The flash memory controller automatically determines whether to route data through the encryption hardware or directly to storage units, allowing programming efficiency to be optimized for each specific operation while managing configuration complexity through automated control logic.
Data Source
AI summary
The invention introduces an apparatus for encrypting and decrypting user data, including a memory, a bypass-flag writing circuit and a flash interface controller. The bypass-flag writing circuit writes a bypass flag in a remaining bit of space of the memory that is originally allocated for storing an End-to-End Data Path Protection (E2E DPP), where the bypass flag indicates whether user data has been encrypted. The flash interface controller reads the user data, the E2E DPP and the bypass flag from the memory and programs the user data, the E2E DPP and the bypass flag into the flash device.