Inline Encryptor ASIC for Post-Quantum Memory Sanitization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing flash memory sanitization methods are inadequate for memory types with wear leveling, such as DDR SRAM, as they cannot guarantee sanitization, leading to the need for costly and time-consuming replacement of circuit card assemblies to destroy Critical Program Information (CPI), which can damage adjacent components.
Innovation Solution
An inline encryptor ASIC that uses Post Quantum Cryptography algorithms to encrypt and decrypt data, allowing sanitization of memory by sanitizing encryption keys, thereby preventing the need for physical destruction of flash memory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If physical destruction of flash memory is used to destroy CPI, then data security is improved, but device complexity and cost increase due to CCA replacement
Solution Approach 1:
The patent extracts the critical security function from physical destruction and isolates it into a separate cryptographic module. By removing the need to physically destroy the entire CCA and extracting only the essential security requirement (data destruction), the system achieves security through cryptographic key sanitization while preserving the memory device.
Solution Approach 2:
The patent introduces cryptographic keys as an intermediary between the CPI data and the memory storage. Instead of directly destroying physical memory, the system uses cryptographic keys as a mediator to control data accessibility. Sanitizing these intermediary keys achieves data destruction without physical memory modification.
2Reliability
If chip removal and destruction is performed to sanitize memory, then data security is improved, but adjacent components may be damaged
Solution Approach 1:
The patent extracts the security-critical function from physical destruction and isolates it into cryptographic key management. By removing the need for physical chip removal and destruction, the system eliminates the harmful thermal effects on adjacent components while maintaining data security through key sanitization.
Solution Approach 2:
The patent replaces the mechanical/thermal destruction process with a cryptographic software-based solution. Instead of using physical methods (heating, crushing) to destroy data, the system uses cryptographic key management to logically destroy data accessibility, eliminating mechanical harm to components.
3Reliability
If CCA replacement is performed to prevent CPI exposure, then data security is improved, but time and cost increase
Solution Approach 1:
The patent implements preliminary cryptographic protection by encrypting CPI with cryptographic keys before storage. This preliminary encryption action ensures that even if physical access occurs, data remains protected. The pre-established cryptographic framework enables rapid key sanitization instead of time-consuming CCA replacement.
Solution Approach 2:
The patent creates a cryptographic copy/protection layer over the physical memory. Instead of modifying or destroying physical components, the system uses cryptographic keys as a virtual layer to control data security. Sanitizing this cryptographic copy (keys) achieves security without physical intervention.
4Stability of the object's composition
If flash memory with wear leveling is used, then data integrity is improved, but sanitization capability deteriorates
Solution Approach 1:
The patent introduces cryptographic keys as an intermediary layer between the data and physical storage medium. This intermediary cryptographic layer enables sanitization by controlling data accessibility through key management, bypassing the wear leveling mechanism that prevents traditional sanitization methods.
Solution Approach 2:
The patent replaces physical sanitization mechanisms (which don't work with wear leveling) with cryptographic sanitization. Instead of using physical methods like overwriting or degaussing that are blocked by wear leveling, the system uses cryptographic key invalidation to achieve logical sanitization while preserving data integrity.
Data Source
AI summary
An inline encryptor ASIC avoids contaminating memory with data which may be compromised by quantum computers. The inline encryptor ASIC encrypts the data using Post Quantum Cryptography algorithms before storing the data in the memory. The data in the memory is then resistant to quantum computer attacks. The inline encryptor ASIC may sanitize the memory via sanitizing a key used to encrypt the data. Sanitizing the memory by sanitizing the key enables writing CPI data to flash memory without requiring destruction of the flash memory.