Memory Device Host Verification for Secure Low-Power Wake-Up
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Memory devices are susceptible to unauthorized access and attacks during transitions from low power modes, posing security and safety risks, particularly in systems like vehicle safety and autonomous vehicles.
Innovation Solution
Implementing access control techniques involving secret key sharing and encrypted value verification, as well as anti-replay techniques using synchronized randomization processes to validate authorized users and prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Use of energy by moving object
If the memory device operates in low power mode to conserve energy, then power consumption is reduced, but security vulnerability increases during mode transitions
Solution Approach 1:
The patent applies preliminary action by performing host verification through encrypted value comparison before the memory device exits low power mode. The host and memory device establish an encrypted value during a previous authenticated session, and this encrypted value is verified before transitioning to high power mode, ensuring security is established in advance of the vulnerable transition period.
Solution Approach 2:
The patent uses an encrypted value as an intermediary mechanism to mediate the authentication between host and memory device. This encrypted value serves as a secure token that verifies the host's authorization without requiring direct credential exchange during the power mode transition, thus maintaining security while enabling low power operation.
2Ease of operation
If the memory device enables full functionality without verification, then ease of operation is improved, but unauthorized access risk increases
Solution Approach 1:
The patent implements self-service by having the memory device autonomously verify the host's authorization by comparing the received encrypted value against its own stored encrypted value. This self-verification process eliminates the need for additional authentication infrastructure or manual verification steps, maintaining ease of operation while preventing unauthorized access.
Solution Approach 2:
The patent applies feedback by having the memory device compare the host-provided encrypted value against its stored encrypted value and respond accordingly. If the encrypted values match, the host is authorized and full functionality is enabled; if they don't match, access is denied. This feedback mechanism ensures security without complicating the user experience for authorized hosts.
Data Source
AI summary
Methods, systems, and devices for host verification for a memory device are described. A memory device may receive a first value from a host device that is associated with an identification of the host device after an event. The memory device may transmit a second value to the host device that is based on the first value and comprises a random set of bits. The memory device may receive from the host device data or a command that comprises an encrypted third value that is based at least in part on the second value and a secret shared between the host device and the memory device. The memory device may also enable a functionality of the memory device based on the encrypted third value.