Memory Controller Flag-Based Secret Area Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securing secret information in nonvolatile memory areas are inadequate as they allow unauthorized access when reading authentication information is known, compromising the secrecy of the information stored.
Innovation Solution
An information processing apparatus with a memory controller that allows reading of secret information only when a specified flag value is set and access validity is authenticated by an authentication controller, enhancing secrecy by combining flag information with authentication results.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If authentication using reading authentication information is implemented to allow reading of secret information, then accessibility of the secret area is improved, but secrecy of the information is compromised because anyone with the authentication information can read the program
Solution Approach 1:
The patent segments the authentication process into multiple independent stages: initial authentication using reading authentication information, subsequent authentication using writing authentication information, and flag information verification. This multi-stage segmentation ensures that possessing one type of authentication information is insufficient for complete access, thereby maintaining secrecy while enabling legitimate accessibility.
Solution Approach 2:
The system performs preliminary authentication using reading authentication information before allowing any reading operations, and sets flag information to a specific value. This preliminary action creates a conditional state where reading is permitted only under specific circumstances (when flag information matches expected values), preventing unauthorized access while allowing legitimate users to read the program.
2Ease of operation
If only authentication is used to control access to the secret area, then ease of access is improved, but the level of secrecy protection is insufficient because authentication information can be compromised
Solution Approach 1:
The access control mechanism is segmented into multiple independent verification layers: authentication information validation (both reading and writing types), flag information checking, and conditional access decisions. This segmentation ensures that compromise of a single authentication layer does not lead to complete system breach, maintaining both ease of legitimate access and strong secrecy protection.
Solution Approach 2:
Flag information acts as an intermediary element between authentication validation and actual access permission. Even when authentication information is successfully verified, the system introduces an additional verification step by comparing flag information against expected values. This intermediary mechanism strengthens secrecy protection without significantly complicating the access control process for legitimate users.
3Difficulty of detecting and measuring
If reading authentication information is made available for access control, then readability of the secret area is improved, but security is worsened because the authentication information itself becomes a vulnerability
Solution Approach 1:
The authentication information system is segmented into multiple types (reading authentication information and writing authentication information) with different purposes and validation methods. Reading authentication information controls read access while writing authentication information controls write access and flag setting. This segmentation reduces the vulnerability associated with any single authentication information type while maintaining controlled readability.
Solution Approach 2:
The system dynamically adjusts access permissions based on the state of flag information. Rather than using static authentication, the system changes the accessibility of the secret area by modifying flag information through authenticated write operations. This dynamic approach allows the system to adapt readability control based on operational context, reducing security vulnerabilities associated with static authentication credentials.
Data Source
AI summary
To provide an information processing apparatus, a reading control method, and a computer readable storage medium that can improve the secrecy of information written in a secret area compared with the case of controlling access only by authentication, the information processing apparatus includes a nonvolatile memory that has a secret area where secret information is stored, an authentication controller that authenticates access to the nonvolatile memory, a flag information storage unit that stores flag information, and a memory controller that controls access to the nonvolatile memory by using the flag information stored in the flag information storage unit. The memory controller allows reading of the secret information from the secret area when a value of the flag information is a specified value and validity of access is authenticated by the authentication controller.