Memory Module Authentication for Protected Error-Correction Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need to ensure that only authorized hosts can access sensitive features of memory devices, such as error correction information, to prevent unauthorized access and maintain data integrity.
Innovation Solution
Implementing authentication logic circuits in memory modules and hosts using asymmetric cryptography for inter-module authentication and symmetric cryptography for intra-module authentication to verify authorized connections, enabling or disabling sensitive features based on successful authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication logic circuits are implemented in memory modules and hosts, then security against unauthorized access is improved, but device complexity increases
Solution Approach 1:
The authentication system is segmented into multiple independent components: authentication logic circuits in hosts, authentication logic circuits in memory modules, and authentication logic circuits in memory devices. This segmentation allows the security function to be distributed across the system, improving reliability while managing complexity through modular design.
Solution Approach 2:
Authentication logic circuits act as intermediaries between hosts and memory devices, establishing trusted connections before enabling access to sensitive features. These intermediary components verify authorization without requiring direct trust between hosts and memory devices, enhancing security while maintaining clear system boundaries.
2Reliability
If asymmetric cryptography is used for inter-module authentication, then security against unauthorized access is improved, but use of energy increases
Solution Approach 1:
The system dynamically selects between asymmetric cryptography for inter-module authentication (where high security is critical) and symmetric cryptography for intra-module authentication (where lower energy consumption is prioritized). This dynamic approach optimizes the balance between security requirements and energy consumption based on the specific authentication context.
Solution Approach 2:
Different cryptographic methods are applied locally to different authentication scenarios: asymmetric cryptography is used specifically for inter-module authentication where external security threats are most concerning, while symmetric cryptography is used for intra-module authentication where energy efficiency is more important. This localized application of cryptographic methods optimizes both security and energy usage.
3Reliability
If sensitive features are protected by authentication, then data integrity is improved, but ease of operation decreases
Solution Approach 1:
Authentication is performed as a preliminary action before enabling access to sensitive memory features. The authentication logic circuits verify authorization in advance, establishing a trusted connection before allowing hosts to access protected features such as error correction information. This preliminary authentication ensures data integrity while automating the security check so that authorized operations proceed without interruption.
Data Source
AI summary
A memory module includes one or more memory devices and a module logic chip. The module is coupled to a host which operates the memory devices. Certain features of the module may only be accessible once the module has authenticated with the host. For example, the module logic chip may perform asymmetric authentication with the host and the feature may be enabled only after successful authentication. In some embodiments, the module logic may additionally authenticate the memory devices. For example, the module logic chip may perform symmetric authentication on the memory devices after authentication with the host.