Memory System Dynamic Authentication for Crack-Resistant Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory systems face security vulnerabilities due to weak authentication mechanisms that can be easily cracked, posing a risk of unauthorized access and malicious data breaches.
Innovation Solution
Implement a dynamic authentication process involving the generation of first and second authentication information based on dynamic information and keys, with reauthentication using updated dynamic information to enhance security, making it difficult for unauthorized users to unlock the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a traditional authentication mechanism is used in memory systems, then the operation is simple and fast, but the security is weak and can be easily cracked
Solution Approach 1:
The patent implements dynamic authentication by generating different authentication information (first authentication information in the memory system, second authentication information in the host) based on dynamic information that changes over time or between operations. This dynamic approach prevents static authentication credentials from being cracked or reused, significantly enhancing security while maintaining a manageable process through automated key generation and verification
Solution Approach 2:
The patent changes the authentication parameters by using dynamic information (such as timestamps, random numbers, or operation-specific data) to generate authentication credentials. Instead of using fixed passwords or keys, the system generates unique authentication information for each authentication event, making it computationally infeasible to crack through traditional methods while keeping the process structured and controllable
2Reliability
If authentication information is stored in the memory system, then the authentication can be performed, but the system is vulnerable to unauthorized access if the authentication mechanism is weak
Solution Approach 1:
The patent performs preliminary authentication before allowing any data access operations. The memory system and host exchange authentication information and verify credentials before establishing a data access session. This preliminary security check prevents unauthorized access attempts from reaching the data storage layer, blocking malicious breaches before they can occur
Solution Approach 2:
The patent introduces authentication information as an intermediary layer between the host and the stored data. Instead of direct access, all data operations must pass through the authentication verification process. This intermediary mechanism ensures that even if the memory system is physically accessed, unauthorized data breaches are prevented without the correct authentication credentials
3Reliability
If reauthentication with updated dynamic information is implemented, then the security against cracking is significantly improved, but the authentication process becomes more complex
Solution Approach 1:
The patent implements self-service authentication where the memory system and host automatically generate, exchange, and verify authentication information without requiring manual intervention. The dynamic information is automatically updated and reauthenticated as needed, providing high crack resistance while maintaining operational simplicity through automated processes that hide the complexity from the user
Data Source
AI summary
The present disclosure provide an example memory system, including: a memory configured to store key information; and a memory controller coupled with the memory and configured to: generate first authentication information according to first dynamic information and a first key determined from the key information; receive second authentication information from a host, wherein the second authentication information is generated according to the first dynamic information and a second key in the host; determine whether the first authentication information matches the second authentication information; in response to a mismatch of the first authentication information and the second authentication information, generate second dynamic information; update the first authentication information according to the second dynamic information and the first key; and receive updated second authentication information from the host, wherein the updated second authentication information is generated according to the second dynamic information and an updated second key in the host.


