Flash ROM Command Filtering for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Flash ROM devices are vulnerable to data corruption and unauthorized access due to the inability to discern between authorized and unauthorized modifications, leading to potential system malfunction and security breaches during BIOS updates or malicious attacks.
Innovation Solution
Implementing a command comparison mechanism within an ASIC or memory controller that stores a list of authorized commands and parameters, which discards any commands not matching these criteria before they are sent to the flash ROM, ensuring only approved operations are executed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If flash ROM devices allow unrestricted write access for updates, then ease of operation is improved, but reliability deteriorates due to vulnerability to data corruption and unauthorized access
Solution Approach 1:
The patent introduces a management controller as an intermediary between the host system and the flash ROM device. This controller acts as a security gatekeeper that intercepts all write commands, verifies their authenticity using cryptographic authentication, and only permits authorized modifications. This resolves the contradiction by maintaining ease of operation for legitimate updates while blocking unauthorized access to preserve data integrity.
Solution Approach 2:
The system performs preliminary authentication verification of write commands before allowing them to reach the flash ROM device. The management controller checks cryptographic signatures and validates command authenticity in advance, preventing unauthorized data corruption before it can occur. This preliminary security check enables reliable operation while maintaining ease of use for authenticated updates.
2Device complexity
If flash ROM devices implement no security measures, then device complexity is reduced, but object-affected harmful factors increase due to malicious attacks and unauthorized modifications
Solution Approach 1:
The management controller serves as a security intermediary that handles all authentication and verification operations. By placing this security layer between the host and flash ROM, the patent protects the memory device from malicious attacks without requiring the flash ROM itself to become complex. The security functionality is isolated in the management controller, keeping the flash ROM device simple while still providing robust protection against harmful factors.
3Reliability
If flash ROM devices lock the device to prevent modifications, then reliability is improved by preventing unauthorized access, but ease of operation deteriorates by making authorized changes impossible
Solution Approach 1:
The patent implements a dynamic security system where the flash ROM device transitions between locked and unlocked states based on authentication results. The management controller can temporarily unlock the device for authorized updates, perform the modification, then re-lock it. This dynamic approach maintains reliability through default locking while enabling ease of operation during authorized maintenance windows, resolving the contradiction between security and modifiability.
Data Source
AI summary
Some examples described relate to securing a memory device of a computing system. For instance, a method may comprise comparing a command for the memory device to each command in a list of commands. The command is accepted when the command matches an authorized command in the list of commands. The accepted command is issued to the memory device.