Memory Device Control with Server-Signed Commands and Key Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securing cryptographic keys used for access control and privilege transfer in memory devices, as well as protecting memory devices from counterfeit and tampered devices, with a lack of effective security measures to authenticate and manage access.
Innovation Solution
A server system comprising a key management server and an access control server is implemented to secure cryptographic keys and manage access, using cryptographic techniques to authenticate memory devices and control access, with a unique device secret (UDS) registered during manufacturing and used to generate cryptographic keys for authentication and privilege transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic keys are stored in memory devices for access control, then authentication capability is improved, but security against key theft and tampering deteriorates
Solution Approach 1:
The patent extracts the cryptographic key storage function from the memory device itself and relocates it to a dedicated key management server. The memory device only stores a reference or identifier to the key, while the actual cryptographic keys are stored and managed in the secure environment of the key management server, thereby eliminating the security risk of key theft from the memory device.
Solution Approach 2:
The key management server acts as an intermediary between the memory device and the authentication system. Instead of the memory device holding its own keys, the key management server mediates by providing keys to authorized devices through a secure channel, enabling authentication without direct key storage in the memory device.
2Reliability
If memory devices are designed with security features for access control, then protection against unauthorized access is improved, but device complexity increases
Solution Approach 1:
The complex cryptographic key management functionality is extracted from the memory device and relocated to a dedicated key management server. The memory device is simplified to only store basic identifiers and receive keys from the server, while the complex security operations are performed remotely.
Solution Approach 2:
The key management server provides universal access control services to multiple different types of memory devices through a standardized interface. This allows various memory devices to benefit from advanced security features without each device needing to implement its own complex key management system.
3Reliability
If a centralized key management system is implemented, then security management is improved, but vulnerability to Denial of Service attacks increases
Solution Approach 1:
The system segments the authentication process into two independent parts: (1) the key management server that issues keys, and (2) the memory device that uses keys. This segmentation allows the memory device to continue functioning with cached keys even if the server becomes unavailable, reducing the impact of DoS attacks on overall system functionality.
Solution Approach 2:
The system performs preliminary key issuance before the actual authentication operation. The key management server issues cryptographic keys to memory devices in advance, allowing the devices to perform authentication operations locally without needing continuous connection to the server, thereby reducing vulnerability to DoS attacks.
4Ease of operation
If cryptographic keys are managed by the memory device itself, then access control is simplified, but loss of cryptographic keys increases risk
Solution Approach 1:
The cryptographic key management function is extracted from the memory device and placed in a secure, centralized key management server. The memory device only retains a reference to the key and uses it for authentication, eliminating the risk of key loss within the memory device while maintaining simple access control operation.
Data Source
AI summary
A system, method and apparatus to control memory devices over computer networks. For example, a server system establishes a secure authenticated connection with a client computer system. Over the connection, the server receives from the client computer system a request identifying a memory device and determine, based on data stored in the server system, that the client computer system is eligible to control the memory device. In response to a request from the client computer system, the server system generates a digital signature for a command using at least a cryptographic key stored in the server system in association with the memory device. The client computer system receives the digital signature from the server system and submits the command with the digital signature to the memory device. The memory device validates the digital signature prior to execution of the command.