Memory Encryption Verification Using Physical Access Measurements
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to reliably verify whether transparent memory encryption in processors is active, leading to potential security vulnerabilities due to incorrect configurations or bugs, and lack of universal support for verifying memory encryption status.
Innovation Solution
A method involving memory access measurements to determine physical quantities such as access duration, latency, power consumption, temperature, and electromagnetic radiation, comparing these with target values to confirm active encryption, and using test data to verify encryption effectiveness.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If transparent memory encryption is implemented in processors, then data security is improved, but the ability to verify encryption status deteriorates
Solution Approach 1:
The patent introduces an intermediary verification mechanism that measures physical quantities (power consumption, electromagnetic radiation, temperature) as indirect indicators of encryption status. These physical measurements serve as mediators between the encrypted memory operations and the verification system, allowing status confirmation without exposing sensitive data or breaking encryption transparency.
Solution Approach 2:
The patent replaces direct software-based verification methods with physical measurement-based verification. Instead of relying on software queries that may be unreliable or unsupported, the system uses physical quantity measurements (power, electromagnetic radiation, temperature) to detect encryption activity, substituting a mechanical/physical verification system for a software-based one.
2Ease of operation
If memory encryption configuration is made transparent to users, then ease of operation is improved, but the ability to detect configuration errors deteriorates
Solution Approach 1:
The patent implements a feedback mechanism that continuously monitors physical quantities during memory operations and compares them against expected values for encrypted vs. unencrypted operations. This feedback loop automatically detects configuration errors by identifying discrepancies between expected and actual physical measurements, providing verification without requiring user intervention or complexity.
Solution Approach 2:
The verification system operates autonomously by automatically measuring physical quantities, comparing them to target values, and determining encryption status without user involvement. The system self-verifys the encryption configuration by leveraging inherent physical characteristics of encrypted memory operations, making error detection as transparent and automatic as the encryption itself.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
Ensures reliable detection of active memory encryption, preventing unprotected storage of sensitive data and maintaining data confidentiality and integrity by detecting inactive encryption configurations.
Implementation Method 1
measurement of at least one physical quantity, wherein the physical quantity depends on the at least one access
Implementation Method 2
measurement of at least one physical quantity, wherein the physical quantity depends on the at least one access
Data Source
Figure 1
Figure 2
AI summary
The invention discloses a method for determining the activity of an encryption of a memory (3) of a processor (2) or a virtual machine. The method comprises the steps: - at least one access (S1) to at least one memory area of the memory (3), - measuring (S2) at least one physical quantity, wherein the physical quantity depends on the at least one access, - comparing (S4) the at least one physical quantity with at least one target value, and - determining (S5) the activity of the encryption of the memory (3) by comparing the results of the comparison of the at least one physical quantity with the at least one target value. The invention further comprises an associated device (1) comprising a processor (2), a computer program product, and a computer-readable medium.