Memory Device Mode-Based Access Control for Security Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory devices face challenges in securely storing and protecting security data from unauthorized access, as security data can still be hacked despite security measures, such as separate storage and access control policies.
Innovation Solution
A memory device with a control logic that manages two operation modes, where access to security data is restricted in one mode and counted as scan data in the other mode, allowing for secure storage and deletion of both scan and security data when abnormal access is detected.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control policies are implemented to protect security data, then security is improved, but unauthorized access can still occur through mode switching
Solution Approach 1:
The system performs preliminary actions by counting access attempts to security data before actual unauthorized access can occur. The control logic monitors and counts reads/programmes executed on security data in advance, and when the count reaches a predetermined threshold, it proactively deletes both the security data and scan data to prevent potential security breaches
Solution Approach 2:
The system converts the potentially harmful factor of access attempts into a beneficial security mechanism. By counting and monitoring access patterns to security data, the system transforms normal read/programme operations into detectable events that trigger automatic deletion when abnormal patterns are detected, thereby using access monitoring itself as a security defense mechanism
2Reliability
If scan data is stored to monitor access patterns, then security monitoring is improved, but storage space is consumed
Solution Approach 1:
The system implements discarding and recovering by automatically deleting scan data when it reaches a predetermined count threshold. The control logic counts access patterns to security data and deletes the scan data when the count reaches the threshold, thereby recovering storage space while maintaining security monitoring functionality through the deletion-triggered security mechanism
Solution Approach 2:
The scan data is designed as a disposable, short-living object that serves its monitoring purpose temporarily and is then discarded. The scan data exists only until the access count reaches the predetermined threshold, at which point it is deleted along with the security data, avoiding long-term storage requirements
Data Source
AI summary
A memory device including: a memory area having a first memory block and a second memory block; and a control logic configured to control the first memory block and the second memory block in a first mode and a second mode, wherein in the first mode only a control operation for the first memory block is executable, and in the second mode control operations for the first memory block and the second memory block are executable, wherein the control logic counts the number of accesses made to the second memory block in the first mode, and stores the number of accesses as scan data in the second memory block.