Memory Module Authentication Using Logic-Chip Entropy Pooling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional memory devices lack sufficient capabilities for authenticating with hosts and modules, particularly in ensuring sensitive features like ECC pass-through are only enabled when connected to authorized devices, and they have limited entropy for encryption, making them vulnerable to unauthorized access.
Innovation Solution
Intra-module authentication using a module logic chip and memory devices that leverage asymmetric and symmetric cryptography, where the module logic chip generates more entropy than the memory devices, allowing secure authentication through shared random numbers and session keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional memory devices are used without intra-module authentication, then device complexity and ease of operation are maintained at basic levels, but security and reliability are insufficient to prevent unauthorized access to sensitive features
Solution Approach 1:
The authentication system is segmented into distinct components: a module logic chip and multiple memory devices, each with separate authentication logic circuits. This segmentation allows complex authentication functionality to be distributed across multiple devices rather than concentrated in a single device, managing complexity through division of labor while achieving high security through multi-device verification
Solution Approach 2:
The module logic chip serves as an intermediary that coordinates authentication between the host and individual memory devices. It generates challenges, collects responses from multiple memory devices, and makes the final authentication decision. This intermediary role allows memory devices to maintain relatively simple authentication logic while the system achieves sophisticated security through the coordinating module logic chip
2Reliability
If memory devices have limited entropy for encryption, then device complexity and manufacturing cost are reduced, but security is weakened making devices vulnerable to unauthorized access
Solution Approach 1:
The system merges the entropy contributions from multiple memory devices with the entropy generated by the module logic chip to create a combined entropy pool for authentication. By combining entropy from multiple sources (multiple devices × multiple channels), the system achieves high-entropy cryptographic operations without requiring any single device to have large entropy capacity, thus maintaining security while managing individual device resource constraints
3Reliability
If sensitive features like ECC pass-through are always enabled, then ease of operation is improved, but security is compromised allowing unauthorized access to reveal sensitive information
Solution Approach 1:
The system performs authentication as a preliminary action before enabling sensitive features like ECC pass-through. The module logic chip and memory devices authenticate each other and verify host authorization before allowing access to sensitive operations. This preliminary authentication ensures that security checks are completed in advance, preventing unauthorized access while allowing legitimate users convenient access to features after authentication succeeds
Data Source
AI summary
A memory module includes one or more memory devices and a module logic chip. The module is coupled to a host which operates the memory devices. Certain features of the module may only be accessible once the module has authenticated with the host. For example, the module logic chip may perform asymmetric authentication with the host and the feature may be enabled only after successful authentication. In some embodiments, the module logic may additionally authenticate the memory devices. For example, the module logic chip may perform symmetric authentication on the memory devices after authentication with the host.