Memory Data Obfuscation Using Dummy Address Operations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory systems are vulnerable to malicious data extraction techniques such as invasive probing, photonic analysis, and side-channel analysis, despite encryption methods, which can compromise sensitive data like cryptographic keys.
Innovation Solution
Implementing memory address obfuscation and operation obfuscation techniques, including transforming memory addresses using address mask data to generate target and dummy addresses, and employing cryptographic keys that change with each power cycle to encrypt and re-encrypt data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption methods are used to protect data in memory, then data security is improved, but the system remains vulnerable to invasive probing and side-channel analysis
Solution Approach 1:
The memory system is divided into multiple logical units, and data is scattered across these units using obfuscation techniques. Each logical unit contains portions of data that appear random and unrelated when viewed individually, making it difficult for attackers to reconstruct the original data even if they access multiple units through invasive probing or side-channel analysis.
Solution Approach 2:
The patent changes the parameter of data representation by transforming readable data into obfuscated form using multiple cryptographic keys and obfuscation functions. The data is stored in an encrypted and scattered state across memory locations, and only the authorized processing device with the correct keys can transform it back to its readable form, thereby maintaining security against extraction attacks.
2Reliability
If data is encrypted and scattered across multiple logical units, then security against extraction is improved, but data access complexity increases
Solution Approach 1:
The authorized processing device automatically performs the obfuscation and de-obfuscation operations using embedded cryptographic keys and obfuscation functions. The system self-manages the complexity of accessing scattered encrypted data by integrating the decryption and reassembly logic directly into the processing device, eliminating the need for external complex access mechanisms.
Solution Approach 2:
The patent introduces cryptographic keys and obfuscation functions as intermediaries between the stored data and the authorized processing device. These intermediaries facilitate secure access by automatically transforming the obfuscated data into readable form for authorized devices while blocking unauthorized access, thereby managing access complexity through standardized cryptographic mechanisms.
3Object-affected harmful factors
If obfuscation techniques are implemented, then resistance to malicious extraction is improved, but memory operation overhead increases
Solution Approach 1:
The data is obfuscated and scattered across multiple logical units before being stored in memory, using preliminary cryptographic transformations. This preliminary action ensures that even if attackers gain access to the memory, they encounter already-obfuscated data that requires additional cryptographic keys and processing to decode, thereby adding a layer of security without significantly impacting read/write operations for authorized devices.
Data Source
AI summary
A request to perform a memory operation addressed to a first address corresponding to a first logical unit of logical units of a memory is received. Address mask data that corresponds to the logical units is identified. Multiple transformed addresses are determined using the first address and the address mask data. The transformed addresses can include a target address corresponding to the first logical unit and additional addresses corresponding to other logical units. The memory operation is performed at the target address corresponding to the first logical unit and dummy memory operations are performed at the additional addresses corresponding to the additional logical units.