Memory Device Segmentation for Secure Data Protection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing memory devices lack effective protection against unauthorized access and leakage of secure data, particularly the unique keys used for encryption, which can lead to illegal copying of digital contents.

Innovation Solution

A memory device with a first inaccessible memory area for secure data and a second accessible memory area for encrypted secure data, where the secure data is encrypted and stored during manufacturing, and additional areas for spare keys and decryption keys, ensuring that only encrypted data can be output, thereby preventing unauthorized access and leakage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the unique key is stored in the memory storage device for encrypting digital contents, then the digital contents can be protected from unauthorized access, but the risk of key leakage increases enabling illegal copying

Engineering Contradiction:

Improveprotection of digital contentsVSAvoidrisk of key leakage

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The memory device is divided into two distinct memory areas: a first memory area that stores the unique key in an inaccessible manner, and a second memory area that stores encrypted data. This segmentation isolates the sensitive key from external access while still enabling encryption functionality, thus protecting against key leakage while maintaining content security.

Inventive Principle:

Principle #1Segmentation

2Adaptability or versatility

If the secure data is made accessible for authentication purposes, then the functionality of the memory device is improved, but the security of the secure data is compromised

Engineering Contradiction:

Improveauthentication functionalityVSAvoidsecurity of secure data

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces an encrypted version of the secure data as an intermediary. Instead of directly accessing the plaintext unique key for authentication, the system uses the encrypted data stored in the second memory area. This intermediary enables authentication functionality while maintaining the security of the original secure data in the first memory area.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Ease of operation

If the memory device stores both secure data and encrypted data in accessible areas, then the ease of operation is improved, but the vulnerability to unauthorized access increases

Engineering Contradiction:

Improvedata access便利性VSAvoidvulnerability to unauthorized access

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

Different memory areas are assigned different accessibility properties: the first memory area containing the unique key is configured to be inaccessible to external devices, while the second memory area containing encrypted data is accessible. This local differentiation of access rights enables operational convenience for encrypted data while protecting the sensitive key from unauthorized access.

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS9258111B2Memory device which protects secure data, method of operating the memory device, and method of generating authentication information

Publication Date: 2016.02.09 SAMSUNG ELECTRONICS CO LTD

AI summary

In one embodiment, the memory device includes a first memory area and a second memory area. The first memory area stores secure data. The first memory area is inaccessible by an external device. The second memory area is configured to store encrypted secure data. The second memory area is accessible by the external device, and the encrypted secure data is an encrypted version of the secure data in the first memory area.