Memory Indirection System for Garbage Data Handling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
When encryption parameters, such as encryption/decryption keys, are changed in storage devices, it can lead to garbage data with cyclic redundancy check (CRC) errors in the logical block address (LBA) space, and disabling data protection to prevent these errors compromises security, failing to meet standards like Opal SSC for secure data storage.
Innovation Solution
A memory device with an indirection system that maps logical block addresses to physical block addresses and includes a flag to indicate the encryption method used, allowing it to return a predefined or custom code when the encryption method changes, thereby preventing the reading of garbage data without disabling security measures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption parameters are changed in storage devices, then data security is improved, but garbage data with CRC errors is generated in LBA space
Solution Approach 1:
The system performs preliminary actions by marking LBA space as invalid before encryption parameter changes occur. The indirection system pre-establishes mappings and validity indicators that allow the system to recognize and handle garbage data scenarios proactively, preventing CRC errors from propagating as valid data reads.
Solution Approach 2:
An indirection system is introduced as an intermediary layer between logical block addresses and physical storage locations. This mediator includes validity indicators and mapping tables that track encryption parameter history, allowing the system to distinguish between valid data and garbage data without requiring direct access to physical storage states.
2Object-generated harmful factors
If data protection is disabled to prevent CRC errors, then garbage data generation is reduced, but data security is compromised
Solution Approach 1:
The LBA space is segmented into valid and invalid regions using validity indicators in the indirection system. This segmentation allows the system to treat garbage data scenarios as a separate category from normal data storage, enabling selective handling where security measures remain active for valid data while garbage data is naturally isolated and ignored.
Solution Approach 2:
The system changes the state management parameters by introducing validity indicators and encryption parameter history tracking. These parameter changes allow the system to maintain security while recognizing when data should be treated as invalid, preventing CRC errors without compromising encryption integrity.
3Reliability
If a flag is associated with memory locations to track encryption method, then garbage data reading is prevented, but device complexity increases
Solution Approach 1:
The indirection system performs multiple functions: it maps logical to physical addresses, tracks encryption parameter history, stores validity indicators, and manages garbage data scenarios. By consolidating these functions into a single system component, the patent reduces overall device complexity compared to having separate mechanisms for each function.
Solution Approach 2:
The validity indicators and encryption parameter tracking are nested within the existing indirection system structure. Rather than adding separate external mechanisms, the patent embeds these tracking capabilities within the address mapping infrastructure, leveraging existing hardware resources to reduce additional complexity.
Data Source
AI summary
A memory device including at least one memory location for storing information representing data written using a first encryption/decryption method, and a read channel using a second encryption/decryption method for reading and decrypting information as written is disclosed. The memory device also includes an apparatus that prevents the reading of the at least one memory location using the second encryption/decryption method, in response to an indication that the at least one memory location was written using the first encryption/decryption method. In another embodiment, a reading of a predefined or custom code is returned in response to an indication of another encryption/decryption method.