Hierarchical Memory Counters for Replay-Safe Off-Chip Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection mechanisms are vulnerable to replay attacks and require excessive storage and memory overhead for maintaining counters, especially when handling large data sets.
Innovation Solution
Implementing a hierarchical counter system with minor, middle, and major counters to manage data integrity and security, reducing storage overhead by incrementing and re-encrypting only specific subsets of data items based on counter overflows.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single counter is used for each data item to prevent replay attacks, then data security is improved, but storage overhead and memory requirements increase excessively
Solution Approach 1:
The patent divides the counter system into three hierarchical levels: major counters (one per cache set), minor counters (one per cache line), and intermediate counters (one per group of cache lines). This segmentation allows the system to track access counts at different granularities, enabling selective re-encryption only when necessary while reducing overall storage requirements compared to maintaining individual counters for every data item.
Solution Approach 2:
The patent introduces a hierarchical dimension to the counter structure, organizing counters in multiple levels (major, intermediate, minor) rather than using a flat single-counter-per-data-item approach. This dimensional organization enables the system to manage counter state more efficiently by aggregating counter information at higher levels and only triggering re-encryption when lower-level counters overflow, thereby reducing total storage overhead.
2Reliability
If counters are maintained for all data items to ensure data integrity, then replay attack protection is improved, but memory overhead increases
Solution Approach 1:
The patent merges counter functionality across multiple data items by introducing major counters that serve entire cache sets and intermediate counters that serve groups of cache lines. Instead of maintaining separate counters for each individual data item, the system combines counter state at higher hierarchical levels, reducing total memory overhead while still providing integrity protection through selective re-encryption triggered by counter overflows.
Solution Approach 2:
The counter system is segmented into three functional levels with different scopes: major counters for cache set-level tracking, intermediate counters for cache line group tracking, and minor counters for individual cache line tracking. This segmentation enables the system to maintain data integrity by monitoring access patterns at appropriate granularities without requiring full counter state for every single data item in memory.
3Reliability
If frequent re-encryption is performed to maintain security, then protection against replay attacks is improved, but processing time and system performance deteriorate
Solution Approach 1:
The patent applies partial action by triggering re-encryption only when minor counters overflow, rather than re-encrypting all data items on every access. The hierarchical counter structure allows the system to perform encryption operations selectively on subsets of data (those associated with overflowing minor counters and their parent intermediate/major counters) rather than universally, reducing processing time while maintaining security.
Solution Approach 2:
The segmentation of counters into hierarchical levels enables selective re-encryption of only the data subsets associated with overflowing counters at each level. When a minor counter overflows, only the corresponding cache line and its associated higher-level counters need re-encryption, rather than re-encrypting the entire dataset. This segmented approach significantly reduces processing time compared to universal re-encryption.
4Quantity of substance
If a hierarchical counter system is implemented to reduce storage overhead, then memory efficiency is improved, but device complexity increases
Solution Approach 1:
The hierarchical counter system is segmented into three distinct levels (major, intermediate, minor) with clearly defined responsibilities and scopes. Each level manages counters for a specific granularity of data organization, which simplifies the overall management logic compared to a flat counter system. The segmentation allows independent management of each counter level, reducing the complexity of tracking and updating counter state across the entire system.
Solution Approach 2:
By introducing hierarchical dimensions to the counter structure, the patent organizes counter management in a multi-level framework that naturally handles complexity through layering. Each dimension (major, intermediate, minor) operates semi-independently with well-defined relationships to parent and child counters, making the system more manageable than a single-dimensional flat counter approach would be for achieving the same memory efficiency.
Data Source
AI summary
There is provided an apparatus provided with counter control circuitry to maintain counters associated with data items including: minor counters, middle counters, and a major counter. The apparatus is also provided with a memory protection unit configured, in response to a transfer of a data item from secure storage to off-chip storage, to modify a minor counter associated with the data item, and to encrypt the data item based on counters associated with the data item. The memory protection unit is also responsive to an overflowing minor counter, to perform a middle re-encryption process comprising modifying a middle counter associated with the data item and re-encrypting data items associated with the middle counter. The memory protection unit is also responsive to an overflowing middle counter, to perform a major re-encryption process comprising modifying the major counter, and re-encrypting each of the data items.