Memory Device Encryption Using PUF-Generated Volatile Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory devices face challenges in securing input/output operations, as keys used for encryption can be vulnerable to physical attacks and unauthorized access, leading to potential data breaches.
Innovation Solution
Implementing a physically unclonable function (PUF) within the memory device to generate a unique cryptographic key, which is stored in volatile memory and erased upon power-off, ensuring the key is not retrievable during physical attacks, and using firmware to encrypt and decrypt data within the device itself.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a key is stored in non-volatile memory for persistent encryption, then data can be securely encrypted across power cycles, but the key becomes vulnerable to physical attacks and unauthorized retrieval
Solution Approach 1:
The patent extracts the key from persistent storage by using volatile memory instead of non-volatile memory. The key is generated dynamically and exists only in volatile memory during operation, being automatically erased when power is removed, thus eliminating the physical attack vector while maintaining encryption capability during powered operation
Solution Approach 2:
The patent applies dynamics by making the key transient rather than static. The key is continuously regenerated from a seed value stored in non-volatile memory, and exists in volatile memory only temporarily during operation. This dynamic approach ensures the key changes with each power cycle and cannot be retrieved from persistent storage
2Object-affected harmful factors
If a key is stored in volatile memory to prevent physical retrieval, then the key is inaccessible during power loss, but the key must be regenerated upon each power-on which may compromise security consistency
Solution Approach 1:
The patent applies preliminary action by pre-storing a seed value in non-volatile memory before power loss. This seed value is used to deterministically regenerate the same key upon power-on, ensuring key consistency and security stability without requiring the key to persist in volatile memory across power cycles
3Device complexity
If encryption is performed by the host system, then the memory device structure is simpler, but the memory device itself lacks security against physical attacks on stored data
Solution Approach 1:
The patent merges the encryption function into the memory device by integrating a secure key generation mechanism using volatile memory and a seed value stored in non-volatile memory. This allows the memory device to perform encryption/decryption operations internally, combining storage and security functions in a single device without requiring external host system intervention
Data Source
AI summary
The disclosed embodiments relate to securing operations accessing a non-volatile storage area of a memory device. In one embodiment, a method is disclosed comprising generating, by firmware of a memory device, a cryptographic key using a value of a physically unclonable function (PUF); writing, by the firmware, the cryptographic key to a volatile storage area; receiving, by the firmware, a command accessing a non-volatile storage area from a host processor; and processing, by the firmware, the command using the cryptographic key.