Memory Device PUF Identity Theft Protection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing memory devices lack secure identity verification mechanisms, making them vulnerable to identity theft, particularly in scenarios where password requirements are not necessary.

Innovation Solution

A memory device operates as a personal identifier device (PID) that generates a public/private key pair using a physical unclonable function (PUF), securing the private key and utilizing a digital certificate for secure authentication, eliminating the need for password storage and enhancing cryptographic security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If password-based authentication is used, then ease of operation is improved, but security against identity theft deteriorates

Engineering Contradiction:

Improveauthentication convenienceVSAvoididentity theft protection

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent replaces the mechanical/password-based authentication system with a cryptographic system using public/private key pairs. The memory device generates and stores a private key while providing the public key for authentication, substituting the password verification mechanism with cryptographic signature verification that is resistant to identity theft while maintaining ease of use.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces a digital certificate as an intermediary between the memory device and external systems. The certificate, issued by a trusted authority, mediates the authentication process by binding the public key to the device identity, enabling secure verification without exposing the private key and preventing identity theft.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If private key is stored in memory device, then cryptographic security is improved, but device complexity increases

Engineering Contradiction:

Improvecryptographic securityVSAvoidmemory device structure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments the authentication functionality by separating the private key storage within the memory device from the public key distribution to external systems. This segmentation allows the memory device to maintain simple structure while securely holding only the private key, with the complex cryptographic verification performed externally using the public key and digital certificate.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS20220385485A1Identity theft protection with no password access

Publication Date: 2022.12.01 MICRON TECHNOLOGY INC

AI summary

The disclosed embodiments relate to using a memory device as a personal identification device. In one embodiment, a method is disclosed comprising receiving a message from a host processor; loading a private key, the private key generated based on a unique value generated by a physically unclonable function (PUF); signing the message using the private key to generate a signed message, and returning the signed message to the host processor.