Semiconductor Memory Authentication via Asymmetric Key Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods for semiconductor memory devices are vulnerable to illegitimate use of secret information, especially when identification key information is leaked, and lack efficient mechanisms for maintaining confidentiality and reducing circuit complexity.
Innovation Solution
A method involving a host device and semiconductor memory device that employ a multiply-encrypted key management system, where the host device decrypts and transmits an index key to the semiconductor memory device to decrypt and obtain a management key, ensuring asymmetric secret levels and preventing illegitimate use, while using AES encryption to reduce implementation load.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication methods using shared secret information are used, then authentication can be performed, but the system becomes vulnerable to illegitimate use when identification key information is leaked
Solution Approach 1:
The authentication key is divided into multiple components: identification key information stored in the semiconductor memory device and decryption key information stored in the host device. This segmentation ensures that neither party alone can compromise the authentication security, resolving the vulnerability to key leakage while maintaining authentication functionality.
Solution Approach 2:
The patent implements asymmetric secret levels where the semiconductor memory device holds identification key information and the host device holds decryption key information. This asymmetric distribution means that even if one party's keys are leaked, the other party's keys remain secure, thereby maintaining authentication reliability without the system being vulnerable to complete compromise.
2Reliability
If multiple encryption layers are implemented to prevent illegitimate use, then security is improved, but circuit complexity increases
Solution Approach 1:
The patent introduces an intermediary key management mechanism where the host device decrypts the management key using its own decryption key information, then transmits this decrypted management key to the semiconductor memory device. This intermediary step simplifies the overall circuit architecture by centralizing the decryption function in the host device rather than requiring complex encryption circuits in both devices.
Solution Approach 2:
The patent uses AES encryption with specific parameter settings (128-bit block size, variable key lengths) to achieve secure confidentiality protection while controlling circuit complexity. By optimizing the encryption parameters, the system achieves strong security without requiring excessively complex circuit implementations.
3Reliability
If session keys are shared between host device and semiconductor memory device, then illegitimate use is prevented, but key management complexity increases
Solution Approach 1:
The patent implements preliminary key establishment where the host device and semiconductor memory device pre-share identification key information and decryption key information respectively before actual authentication. This preliminary action simplifies subsequent key management during authentication operations, as the keys are already in place and only need to be transmitted and decrypted during the actual authentication process.
Solution Approach 2:
The patent incorporates feedback mechanisms where the semiconductor memory device transmits the decrypted management key back to the host device, and the host device verifies the authentication result. This feedback loop simplifies key management by providing clear verification steps and allowing the system to adapt to different authentication scenarios without requiring overly complex key management protocols.
Data Source
AI summary
According to one embodiment, encrypted secret identification information (E-SecretID) and the key management information (FKB) are read from a memory device. Encrypted management key (E-FKey) is obtained using the key management information (FKB) and index information (k). The index information (k) and the encrypted management key (E-FKey) are transmitted to the semiconductor memory device. An index key (INK) is generated using the first key information (NKey) and the received index information (k). The encrypted management key (E-FKey) is decrypted using the index key (INK) to obtain management key (FKey), which is transmitted to the host device.