Memory Controller Dynamic Authentication for Secure Host Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory systems face security vulnerabilities due to weak authentication mechanisms that can be easily cracked, posing a significant risk of unauthorized access and data breaches.
Innovation Solution
Implement a dynamic authentication process using first and second authentication information generated from dynamic information and keys, with reauthentication mechanisms to enhance security by varying the authentication information each time, making it harder for unauthorized users to unlock the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authentication mechanisms are used, then the system is easy to operate, but the security is weak and can be easily cracked
Solution Approach 1:
The patent implements dynamic authentication by generating different authentication information (first authentication information from first dynamic information and first key, second authentication information from second dynamic information and second key) for each authentication attempt. This dynamic approach ensures that even if one authentication is compromised, previous and future authentications remain secure, thereby improving reliability without significantly increasing operational complexity for the user.
Solution Approach 2:
The authentication process is segmented into multiple independent stages: generating first authentication information, generating second authentication information, and performing reauthentication. This segmentation allows the system to enhance security through multiple layers of verification while maintaining a structured and manageable operation flow that does not overly complicate the user experience.
2Reliability
If authentication information is varied each time, then the difficulty of malicious unlocking increases, but the authentication process becomes more complex
Solution Approach 1:
The system employs dynamic information (first dynamic information, second dynamic information) that changes with each authentication attempt, making each authentication unique. This dynamic variation significantly increases resistance to malicious access and brute-force attacks, while the underlying complexity is managed through systematic key management and structured authentication flows.
Solution Approach 2:
The system performs preliminary actions by pre-generating keys (first key, second key) and dynamic information before the actual authentication occurs. This preliminary preparation allows the authentication process to execute efficiently during use, balancing the complexity of the mechanism with the simplicity of the user-facing operation.
3Reliability
If reauthentication is implemented, then security against unauthorized access is improved, but the time required for authentication increases
Solution Approach 1:
The system performs preliminary generation of dynamic information and authentication credentials before the authentication challenge. This preparation ensures that when reauthentication is required, the process can proceed efficiently without excessive time delay, as the computational heavy lifting has already been performed in advance.
Solution Approach 2:
The authentication mechanism maintains continuity by seamlessly transitioning between first authentication information verification and second authentication information verification. The reauthentication process is integrated into the overall authentication flow without significant interruptions, minimizing time loss while maintaining continuous security protection against unauthorized access.
Data Source
AI summary
The present disclosure provide an example memory system, including: a memory configured to store key information; and a memory controller coupled with the memory and configured to: generate first authentication information according to first dynamic information and a first key determined from the key information; receive second authentication information from a host, wherein the second authentication information is generated according to the first dynamic information and a second key in the host; determine whether the first authentication information matches the second authentication information; in response to a mismatch of the first authentication information and the second authentication information, generate second dynamic information; update the first authentication information according to the second dynamic information and the first key; and receive updated second authentication information from the host, wherein the updated second authentication information is generated according to the second dynamic information and an updated second key in the host.


