Memory Device Key Verification for Unauthorized Access Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory systems lack effective mechanisms for unauthorized access prevention, relying solely on host-based security measures which can be inadequate.
Innovation Solution
Implementing memory devices with internal key management to verify access commands and credentials, allowing them to independently authenticate and authorize access to protected memory regions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If host-based security measures are used to prevent unauthorized memory access, then implementation simplicity is maintained, but security reliability is insufficient
Solution Approach 1:
The memory device performs self-service by autonomously verifying access credentials and enforcing access control policies without requiring external host intervention. The device independently manages security operations including credential verification, access decision making, and unauthorized access mitigation, thereby improving security reliability while maintaining implementation simplicity.
Solution Approach 2:
The security function is segmented from the host system and embedded directly into the memory device. This segmentation allows the memory device to independently handle security verification and access control, improving security reliability by removing the single point of failure at the host level while keeping the overall system architecture simple through integrated security operations.
2Reliability
If memory devices implement internal key management and credential verification, then security reliability is improved, but device complexity increases
Solution Approach 1:
The credential verification function is merged with the existing memory access control logic within the memory device. By combining security verification with standard read/write operations at the device level, the patent improves memory security without requiring separate complex security subsystems, thereby limiting the increase in device complexity.
Solution Approach 2:
The memory device autonomously performs credential verification and access control decisions without requiring external security management infrastructure. This self-service approach improves security reliability by enabling independent verification while limiting complexity increases by eliminating the need for separate host-based security management systems.
3Reliability
If dual-layer protection combining host and device-level security is implemented, then unauthorized access prevention is enhanced, but system complexity increases
Solution Approach 1:
The security system is segmented into two independent layers: host-level security policies and device-level verification operations. This segmentation enables dual-layer protection by allowing each layer to operate independently with distinct responsibilities, enhancing unauthorized access prevention while managing system complexity through clear functional separation.
Solution Approach 2:
The memory device acts as an intermediary between the host system and the stored data, performing credential verification as a mediating function. This intermediary role enhances security by adding a verification layer without requiring direct host-device security coordination, thereby improving unauthorized access prevention while limiting the increase in overall system complexity.
Data Source
AI summary
Apparatuses and methods related to mitigating unauthorized memory access are described. Mitigating unauthorized memory access can include verifying whether an access command is authorized to access a protected region of a memory array. The authorization can be verified utilizing a key and a memory address corresponding to the access command. If an access command is authorized to access a protected region, then a row of the memory array corresponding to the access command can be activated. If an access command is not authorized to access the protected region, then a row of the memory array corresponding to the access command may not be activated.