Memory Device Key Replacement with Dual-Signature Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Memory devices do not adequately protect against logical errors in cryptographic keys during updates, leading to non-functional devices if an invalid key is written, necessitating inconvenient or impossible physical resets.
Innovation Solution
A dual-signed replace key command process involving a customer-generated signature and a server-generated signature is implemented, ensuring both signatures are validated before overwriting an existing key, using cryptographic algorithms like ECDSA to verify authenticity and authorization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a memory device stores cryptographic keys without validation, then key updates can be performed quickly, but the device becomes vulnerable to logical errors and may become non-functional
Solution Approach 1:
The patent applies preliminary action by validating the new cryptographic key against a hash of the old key before performing the key update. This pre-check ensures the new key is correct and prevents writing invalid keys to the memory device, thereby maintaining reliability without significantly impacting update speed.
Solution Approach 2:
The patent implements feedback by using the old key to generate a hash value that is compared against a hash of the new key. This feedback mechanism allows the system to verify the correctness of the new key before committing the change, ensuring reliability while maintaining efficient key updates.
2Reliability
If physical resetting is required when an invalid key is written, then device functionality can be restored, but the process becomes inconvenient or impossible
Solution Approach 1:
The patent applies preliminary anti-action by implementing validation checks before key writing that prevent invalid keys from being written in the first place. The hash comparison mechanism proactively stops erroneous key updates before they can occur, eliminating the need for physical resetting and maintaining both reliability and ease of operation.
3Reliability
If dual signature validation is implemented, then key authenticity and authorization are ensured, but the update process becomes more complex
Solution Approach 1:
The patent uses an intermediary approach by introducing a hash function as a mediator between the old key and new key. This hash-based verification mechanism simplifies the complexity management by providing a straightforward comparison process that ensures authenticity without requiring complex multi-step validation procedures.
Data Source
AI summary
The disclosed embodiments are directed to preventing the writing of malformed cryptographic keys to a memory device. In one embodiment, a system is disclosed comprising a storage array, the storage array storing a first cryptographic key; and a processor configured to: receive a command from a host processor, the command including a second cryptographic key, a first signature, a second signature, and at least one field, determine that the first signature is valid using the second cryptographic key and the at least one field, determine that the second signature is valid using the first cryptographic key, the first signature and the at least one field, and replace the first cryptographic key with the second cryptographic key after determining that both the first signature and second signature are valid.