Memory Controller Double-Map Scheme for Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Non-volatile memory systems lack a system protection function, making it difficult to implement access restrictions and protect sensitive data, especially in portable electronic devices where unauthorized access can cause system errors.
Innovation Solution
A memory system with a memory controller that uses a double-map scheme, where one map maintains critical data even after a reset and another map loses data after a reset, allowing for secure storage and access control by distinguishing between first-type and second-type data based on write modes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a non-volatile memory system implements access prohibition and system protection functions, then data security and system reliability are improved, but device complexity and difficulty of implementation increase
Solution Approach 1:
The memory space is segmented into a protection area and a non-protection area. The protection area stores critical data that requires access control, while the non-protection area stores general data. This segmentation allows the system to implement protection functions only where necessary, reducing overall complexity while maintaining security for critical data.
Solution Approach 2:
The system pre-allocates and identifies specific memory regions as protection areas during initialization or configuration. By preliminarily designating which areas require protection, the system avoids the need for complex runtime access control decisions, simplifying the implementation while ensuring critical data is protected from the outset.
2Ease of operation
If the entire memory area is accessible to user accounts, then ease of operation and usability are improved, but system security and data protection deteriorate
Solution Approach 1:
Different access control policies are applied to different memory regions. The protection area enforces strict access control to prevent unauthorized modifications, while the non-protection area allows free access for normal operations. This local differentiation maintains high usability for general operations while ensuring security for critical data.
Solution Approach 2:
The memory space is divided into protected and non-protected regions, allowing user accounts to freely access the non-protection area while restricting access to the protection area. This segmentation enables full usability for routine operations while maintaining security boundaries for critical system data.
3Reliability
If mapping information is maintained after reset operations, then data integrity and reliability are improved, but memory resource consumption and device complexity increase
Solution Approach 1:
The mapping information is segmented into two categories: critical mapping information that must be preserved after reset, and non-critical mapping information that can be discarded. By maintaining only essential mappings in the protection area, the system ensures data integrity for critical operations while minimizing memory resource consumption.
Solution Approach 2:
The system extracts and separates critical mapping information from the complete mapping table, storing only the essential mappings in the protection area that require persistence after reset. This extraction reduces the amount of memory resources dedicated to maintaining mapping information while ensuring integrity for critical data access.
Data Source
AI summary
A memory system that includes a system protection function implemented by using a double-map scheme, a memory controller, and operation methods thereof are disclosed. The memory system includes a memory device and a memory controller. The memory device includes a plurality of nonvolatile memory cells corresponding to a plurality of physical addresses respectively. The memory controller controls the memory device and uses a first map and a second map. The first map includes physical address mapping information based on a logical address for a physical address where first-type data is stored. The second map includes physical address mapping information based on a logical address for a physical address where second-type data is stored.