Memory Authentication Using Asymmetric Keys Against Hardware Cloning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory system security techniques are vulnerable to identification information being stolen or cloned, particularly in the context of signaling between host systems and memory systems, lacking robust authentication of unique hardware identities.
Innovation Solution
Implementing asymmetric cryptographic security functionality directly in memory systems, using asymmetric public and private keys for authenticating host and memory systems, enabling secure exchange of commands and data through asymmetric or symmetric keys based on unique hardware identities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If asymmetric cryptographic security functionality is implemented directly in memory systems, then security and authentication strength is improved, but device complexity increases
Solution Approach 1:
The patent combines cryptographic security functionality directly into the memory system controller, merging authentication capabilities with the existing memory management functions. This integration allows the memory system to perform asymmetric cryptographic operations (key generation, encryption, decryption, signing, verification) without requiring separate dedicated security hardware, thus improving security while managing device complexity through functional consolidation.
2Reliability
If asymmetric keys are used for authentication between host and memory system, then verification of authenticity is improved, but processing time and computational overhead increase
Solution Approach 1:
The patent performs authentication using asymmetric keys during the initialization and mounting phases of memory system operation, before actual data access operations begin. By completing the computationally intensive cryptographic verification in advance, the system ensures security without impacting the performance of subsequent read/write operations, thus reducing the perceived processing time loss during normal operation.
Data Source
AI summary
Methods, systems, and devices for memory system security and authentication using asymmetric keys are described. In some examples, host systems and memory systems may be configured to implement techniques for the generation and distribution of asymmetric keys, which may support evaluating the authenticity of interfacing systems (e.g., system identities) in connection with exchanged signaling, such as access commands, requests, data, or other signaling. Such techniques may include implementing asymmetric cryptographic security directly in a memory system. For example, a memory system may be configured to be cryptographically identified by a public asymmetric key, and authenticity of the memory system may be proven by signing a challenge using an asymmetric private key of the memory system. Further, a host system may be identified by signing signaling with its asymmetric private key, and the signature may be verified by a memory system using an asymmetric public key of the host system.