Semiconductor Memory Authentication via Segmented Secure Element
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods in semiconductor memory devices are vulnerable to unauthorized access and content piracy, particularly in environments where hardware implementation of public key cryptosystems is challenging due to circuit scale restrictions, and there is a need for a secure and efficient mechanism to prevent unlawful use of secret information.
Innovation Solution
A semiconductor memory device configuration that includes a first memory area for storing a unique key and secret identification information, a second memory area for encrypted secret identification information, and a third memory area for generating and storing a session key, along with a one-way function processor to authenticate and output encrypted information, ensuring secure authentication and key recovery while minimizing circuit scale.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key cryptosystem is implemented for authentication, then security against unauthorized access is improved, but circuit scale becomes too large for practical implementation
Solution Approach 1:
The authentication system is segmented into two parts: a secure element (SE) that stores secret information and performs cryptographic operations, and a host device that provides the public key interface. This segmentation allows the SE to use lightweight cryptography while the host handles complex operations, resolving the circuit scale contradiction.
Solution Approach 2:
The secure element acts as an intermediary between the host device and the authentication process. It receives public keys from the host, performs secure authentication using stored secret information, and returns authentication results. This intermediary approach enables public key functionality without requiring the host to implement full public key cryptography.
2Ease of operation
If secret information is stored in accessible memory, then ease of operation is improved, but vulnerability to unauthorized access increases
Solution Approach 1:
The memory system is divided into different access zones: a first memory area accessible by both host and SE, and a second memory area accessible only by the SE. Secret information is stored in the restricted second area, providing local security while maintaining overall system accessibility through the first area.
Solution Approach 2:
The secure element serves as an intermediary that controls access to secret information. Even though the host can communicate with the system, it cannot directly access the second memory area where secret information is stored. The SE mediates all access requests, ensuring security while maintaining operational functionality.
3Reliability
If authentication mechanism is made more secure, then prevention of content piracy is improved, but device complexity increases
Solution Approach 1:
The complex cryptographic processing is extracted from the host device and placed in the secure element. The host only needs to implement simple key management and communication protocols, while the SE handles the complex authentication logic, secret information storage, and cryptographic operations internally.
Solution Approach 2:
The secure element is a self-contained unit that performs all authentication operations internally using its own stored secret information. It autonomously generates authentication proofs, validates public keys, and manages its own security without requiring complex external authentication infrastructure, simplifying the overall system while maintaining high security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
According to one embodiment, a device includes a first memory area to store a first key. A second memory area stores encrypted secret identification (ID) information generated from secret ID information with a family key. A third memory area stores a family key block including data generated from the family key with an ID key. An authentication module performs authentication. A second key is generated from a first number with the first key, a session key is generated from a random number with the second key, and authentication information is generated from the secret ID information with the session key. The encrypted secret ID information, family key block and the authentication information is output.