Hardware Memory Protection Module for Integrated Circuit File Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for protecting files on integrated-circuit devices, such as system-on-chip (SoC) devices, are inadequate due to constraints in circuit complexity, storage space, and processing resources, as they rely on software techniques that are vulnerable to hacking and cannot effectively prevent unauthorized modifications or access.
Innovation Solution
A hardware memory protection module is implemented on integrated-circuit devices to control access to memory regions based on configuration settings, allowing metadata and content data to be stored in a common memory region, which can be protected from unauthorized access by setting appropriate access conditions, thereby preventing write and read access as needed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software techniques such as cryptography are used to protect files, then file integrity can be detected, but the protection is vulnerable to hacking and software bugs and cannot easily prevent changes
Solution Approach 1:
The patent replaces software-based cryptographic protection with a hardware-based memory protection mechanism. The memory protection module is implemented in hardware (e.g., as part of the memory controller or bus interface), providing enforcement of access conditions through circuit-level controls rather than software interpretation. This substitution eliminates vulnerabilities to software hacking and bugs while providing more reliable prevention of unauthorized modifications.
Solution Approach 2:
The patent introduces a hardware memory protection module as an intermediary between the processor/bus and the memory. This module intercepts memory access requests and enforces access conditions (read-only, read-write, or no access) based on metadata associated with file systems or memory regions. This intermediary layer provides secure enforcement without requiring complex software protection routines.
2Reliability
If hardware protection mechanisms are implemented on complex devices like personal computers, then file security is improved, but the circuit complexity, storage space, and processing resources become excessive for simple integrated-circuit devices
Solution Approach 1:
The memory protection module is designed to serve multiple functions within the integrated-circuit device. It not only protects file systems but can also protect arbitrary memory regions, support multiple access conditions, and work with different file system formats. This multi-functionality allows the same hardware module to provide comprehensive protection without requiring separate dedicated circuits for each protection need, thereby reducing overall complexity.
Solution Approach 2:
The patent applies protection selectively to specific memory regions or file systems rather than requiring uniform protection across the entire memory space. Each file system or memory region can have its own access conditions and protection level. This localized approach allows the system to enable protection only where needed, minimizing the complexity overhead compared to global protection schemes.
3Ease of operation
If metadata and content data are stored in separate memory regions, then file organization is improved, but protecting file metadata tables becomes more complex
Solution Approach 1:
The patent merges the protection of metadata and content data by treating them as a unified protectable unit. The memory protection module can set access conditions on memory regions that contain both file metadata and content data together. This approach simplifies protection configuration compared to separately managing protection for metadata tables and content regions, while still maintaining proper file organization through the metadata structure.
Data Source
AI summary
A method for the protection of files is performed on an integrated-circuit device that comprises a hardware memory protection module, which controls access to regions of the memory depending on region-specific settings. A new file is created in the memory by storing metadata and content data for the new file in a common memory region. An access condition is set for the common memory region in the configuration settings of the hardware memory protection module. A file is retrieved from the memory by searching the memory to identify a file meeting a search criterion. The searching involves comparing the metadata of files from the memory against the search criterion in order to identify a file from the memory that meets the search criterion.