Memory Device Unauthorized Access Logging and Credential Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory devices lack effective mechanisms to prevent unauthorized access, relying solely on host security measures which may not be sufficient to protect sensitive data from unauthorized read and write operations.
Innovation Solution
Implementing a memory device with security measures that verify access commands using credentials stored within the device, locking or unlocking addresses based on security modes, and logging unauthorized access attempts to enhance data protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If memory devices rely solely on host security measures, then device complexity is reduced, but security against unauthorized access is insufficient
Solution Approach 1:
The patent segments security functionality into separate components: credentials are stored in dedicated credentials storage, access commands are verified by a verification module, and unauthorized access attempts are logged in separate log storage. This segmentation allows security features to be added without fundamentally redesigning the entire memory device architecture.
Solution Approach 2:
The memory device incorporates multiple functions within existing components: the controller performs both normal memory management and security verification, the credentials storage serves both authentication and authorization purposes, and the logging mechanism provides both security monitoring and forensic capability. This multi-functionality reduces the need for entirely separate security hardware.
2Reliability
If access commands are verified using stored credentials, then unauthorized access is prevented, but processing time increases
Solution Approach 1:
Credentials are pre-stored in the memory device during manufacturing or initialization, eliminating the need for real-time credential retrieval or complex authentication protocols during access operations. The verification process simply compares the provided credentials against pre-stored values, significantly reducing verification time.
Solution Approach 2:
The patent uses credential copying where a provided credential (such as a key or password) is compared against a stored credential copy. This direct comparison method is much faster than cryptographic verification or multi-factor authentication processes, while still providing adequate security for the application.
3Reliability
If unauthorized access attempts are logged, then security monitoring is improved, but additional storage and processing requirements increase
Solution Approach 1:
The logging functionality is implemented with local quality by storing logs in a dedicated portion of the memory device rather than requiring separate external storage. The log storage is localized within the controller or in reserved memory regions, allowing security monitoring without adding external storage components.
Solution Approach 2:
The logging mechanism is designed to overwrite or discard old log entries when storage capacity is reached, automatically managing the log storage lifecycle. This allows continuous security monitoring without indefinite storage growth, and important log data can be recovered or exported before overwriting occurs.
Data Source
AI summary
Apparatuses and methods related to tracking unauthorized access commands for memory. Identifying unauthorized memory access can include verifying whether an access command is authorized to access a protected region of a memory array. The authorization can be verified utilizing a key and a memory address corresponding to the access command. If an access command is authorized to access a protected region, then a row of the memory array corresponding to the access command can be activated. If an access command is not authorized to access the protected region, then an access count can be incremented to signify the unauthorized access command.