Memory Device Fuse Array Secure Keys Against Unauthorized Programming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory devices lack effective security measures to prevent unauthorized access to nonvolatile memory elements, such as fuse arrays, which can lead to permanent damage or degradation due to irreversible programming characteristics, compromising the performance and functionality of the device.
Innovation Solution
Implementing secure access keys, including user-defined and manufacturer-defined access keys, to control access to fuse arrays and other secure features, using authentication components to compare and validate access commands, and ensuring that unauthorized access is prohibited.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If access to fuse arrays is made unrestricted for ease of operation, then programming and configuration becomes simpler, but unauthorized access can cause permanent damage or degradation
Solution Approach 1:
An authentication component is introduced as an intermediary between the access command interface and the fuse array. This component validates access commands against stored authentication credentials (such as access keys or passwords) before permitting access to the fuse array, thereby preventing unauthorized modifications while maintaining ease of operation for authorized users.
Solution Approach 2:
Authentication credentials are pre-stored in the fuse array during manufacturing or initial setup. Before any access command is executed, the authentication component performs a preliminary verification of the command against these pre-stored credentials, ensuring that only authenticated operations can modify the fuse array and preventing unauthorized access that could cause permanent damage.
2Reliability
If authentication mechanisms are implemented to prevent unauthorized access, then device security and reliability improve, but device complexity increases
Solution Approach 1:
The authentication component is merged with the existing memory device structure, integrating the authentication logic and credential storage within the device itself rather than requiring external authentication systems. This consolidation provides robust security while minimizing the increase in device complexity by reusing existing hardware resources.
Solution Approach 2:
The memory device performs self-authentication by storing authentication credentials within its own fuse array and incorporating an authentication component that automatically validates access commands. This self-service approach eliminates the need for external authentication hardware or complex external verification systems, providing enhanced security with minimal added complexity.
3Object-affected harmful factors
If multiple authentication levels are implemented to protect different memory elements, then security against harmful factors improves, but ease of operation deteriorates
Solution Approach 1:
The fuse array is segmented into different access zones with varying authentication requirements. Critical memory elements that are susceptible to harmful unauthorized modifications are protected by mandatory authentication, while less sensitive elements can be accessed without authentication. This segmentation provides targeted security against harmful factors while maintaining ease of operation for non-critical access.
Data Source
AI summary
Memory devices, systems including memory devices, and methods of operating memory devices are described, in which security measures may be implemented to control access to a fuse array (or other secure features) of the memory devices based on a secure access key. In some cases, a customer may define and store a user-defined access key in the fuse array. In other cases, a manufacturer of the memory device may define a manufacturer-defined access key (e.g., an access key based on fuse identification (FID), a secret access key), where a host device coupled with the memory device may obtain the manufacturer-defined access key according to certain protocols. The memory device may compare an access key included in a command directed to the memory device with either the user-defined access key or the manufacturer-defined access key to determine whether to permit or prohibit execution of the command based on the comparison.