Location-Based Memory Encryption Controller
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current memory systems lack effective mechanisms to ensure the confidentiality of data stored within them, particularly in scenarios where access is unauthorized or unauthorized data leakage occurs.
Innovation Solution
A memory system is designed with a controller that generates encryption and decryption information based on the location of the memory system, using GPS data and cryptographic keys to limit access and prevent data leakage by encrypting data written to or read from nonvolatile memory only when the system is within a predetermined secure range.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored in nonvolatile memory without encryption, then access speed and simplicity are improved, but data confidentiality deteriorates
Solution Approach 1:
The patent applies preliminary action by encrypting data before it is written to nonvolatile memory. The encryption process is performed in advance during the write operation, so that when data is read, it is already in encrypted form stored in the memory. This eliminates the need for additional decryption steps during normal access operations while maintaining data confidentiality.
Solution Approach 2:
The patent changes the state parameter of data from plaintext to ciphertext through encryption. By transforming the data from an unencrypted state to an encrypted state before storage, the system maintains data confidentiality while allowing normal read/write operations to proceed without additional security interventions.
2Reliability
If location-based access control is implemented, then data security is improved, but system complexity increases
Solution Approach 1:
The patent introduces an intermediary mechanism - a location verification system that acts as a mediator between the memory system and external access requests. This intermediary checks the location information against predetermined secure locations before allowing access, providing a clear and manageable security layer without requiring complex cryptographic protocols or multi-factor authentication systems.
Solution Approach 2:
The patent implements dynamic access control where the security state of the memory system changes based on location. When the system detects a predetermined secure location, access control is enabled; otherwise, it remains restricted. This dynamic approach allows the system to adapt its security level based on environmental conditions rather than requiring static, always-on complex security protocols.
3Loss of information
If encryption is applied to all data operations, then data confidentiality is improved, but processing speed deteriorates
Solution Approach 1:
The patent applies preliminary action by performing encryption during the write operation itself, before data is committed to storage. This way, when data is read, no additional decryption processing is required - the data is already in its protected state. The encryption overhead is absorbed during the write phase rather than adding to both read and write paths.
Data Source
AI summary
A memory system includes a nonvolatile memory and a controller that controls the nonvolatile memory. The controller is configured to generate information relating to encryption and decryption of data based on a location of the memory system and to enable at least one process of encrypting data to be written to the nonvolatile memory or decrypting data read from the nonvolatile memory by using the information.