Flash Memory Controller Download Security Mode Transition
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing download security systems lack effective measures to prevent unauthorized data from being written to predetermined memory areas, particularly in portable terminals like IC cards, where data protection transitions and encryption keys management are inadequate.
Innovation Solution
A download security system that employs a memory controller to manage mode transitions and encryption keys, ensuring that only authorized data is written to designated areas by interposing a DL secure mode between the game mode and download mode, and using distinct encryption keys for each mode to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a write instruction with access key is used to control file writing from server, then writing control is achieved, but unauthorized data writing cannot be prevented
Solution Approach 1:
The system dynamically transitions between different modes (game mode, DL secure mode, download mode) based on operational requirements. The memory controller changes accessibility states of memory areas according to the current mode, enabling adaptive security control that responds to different operational contexts rather than using static access control
Solution Approach 2:
The DL secure mode acts as an intermediary between the game mode and download mode. This intermediate state provides an additional security layer by requiring specific transition conditions and authentication, preventing direct transitions that could allow unauthorized access. The intermediary mode ensures that sensitive operations are protected through multiple verification steps
2Device complexity
If mode transitions are not implemented, then system simplicity is maintained, but unauthorized data writing occurs
Solution Approach 1:
The system implements dynamic mode transitions with defined states (game mode, DL secure mode, download mode) and specific transition conditions. Each mode has distinct accessibility characteristics for different memory areas, creating a structured yet flexible security framework that balances complexity with protective capability
Solution Approach 2:
The memory areas are segmented into different accessibility zones (first memory area for game data, second memory area for download data) with controlled access based on operational mode. This segmentation allows different security levels to be applied to different data regions, managing complexity through organized structure
3Device complexity
If encryption keys are not managed distinctly for each mode, then key management is simplified, but security against unauthorized access is reduced
Solution Approach 1:
Different encryption keys are assigned to different operational modes and memory areas. The first encryption key protects the first memory area in game mode, while the second encryption key protects the second memory area in download mode. This localized key assignment ensures that compromise of one key does not affect security of other areas, balancing management complexity with security
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A download security system (100) includes a server (102) and an information processing apparatus (10). The information processing apparatus (10) includes a flash memory (64) for storing data downloaded from the server (102) and a memory controller (62). A transition command for a transition to a writable mode to the flash memory (64) is transmitted from the server (102), and in response to the transition command, a memory controller (62) makes a transition to the writable mode. The data downloaded from the server (102) is written to the flash memory (64) by the memory controller (62) in the writable mode.