Flash Memory Authenticated Write Operations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Memory devices, particularly those in portable systems, are vulnerable to unauthorized modifications from hackers, viruses, and worms, as important data is frequently updated and lacks robust protection mechanisms compared to software, which is typically secured during installation.
Innovation Solution
Implementing authenticated write operations using randomly generated public and private key pairs, where the key pairs are periodically regenerated, and multiple key pairs can be used for each data block, leveraging cryptographic algorithms like RSA to authenticate and secure data storage in flash memory devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional software protection mechanisms are applied to data, then security against unauthorized modification is improved, but the complexity of the system increases due to the need for authentication mechanisms
Solution Approach 1:
The system divides data protection into multiple segments by creating separate authentication mechanisms for different data types and locations. Each data block can have its own authentication key, allowing selective protection without requiring system-wide complexity. The flash memory controller implements separate authentication paths for different memory blocks, enabling granular security control.
Solution Approach 2:
The flash memory controller acts as an intermediary between the host system and the data storage. It performs authentication operations locally within the controller before allowing write operations to proceed. This intermediary function handles the cryptographic verification and key management, shielding the host system from direct complexity while maintaining security.
2Reliability
If multiple key pairs are used for each data block, then the strength of data protection is improved, but the time required for authentication operations increases
Solution Approach 1:
The system implements partial authentication by using multiple key pairs selectively rather than exhaustively. Instead of requiring authentication with all possible key pairs for every write operation, the system uses a subset of key pairs appropriate for each specific data block. This partial action approach maintains security strength while reducing the time required for authentication operations.
3Reliability
If key pairs are periodically regenerated, then the security against hacking is improved, but the frequency of system operations increases
Solution Approach 1:
The system implements periodic key pair regeneration at predetermined time intervals or after a certain number of write operations. This periodic action maintains security freshness and resistance to hacking while allowing the system to operate efficiently during normal operations. The regeneration occurs at scheduled intervals rather than continuously, balancing security maintenance with operational productivity.
Data Source
AI summary
A scheme for securing a locally generated data on a system using authenticated write operations is disclosed. According to an embodiment of the present invention, a private/public key pair is randomized and repeatedly generated to protect operations to data blocks.