Memory Partition Authentication via Trusted Driving Module
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Memory devices lack the ability to differentiate between legitimate and illegitimate access requests, making them vulnerable to unauthorized data access and modification, especially since they cannot discern the sensitivity of the data stored.
Innovation Solution
A system comprising a memory allocator and a trusted driving module that manages physical memory partitions through authentication and protection rules, using encryption keys to secure specific memory regions and monitor unauthorized access attempts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If memory devices are designed to be universally accessible for efficient data exchange, then productivity and ease of operation are improved, but security and reliability deteriorate because the memory cannot differentiate between legitimate and illegitimate access requests
Solution Approach 1:
The memory is divided into multiple partitions, with at least one partition designated as a secure partition. This segmentation allows the system to maintain both general accessibility for efficient data exchange and restricted access for security-critical data, resolving the contradiction between productivity and reliability.
Solution Approach 2:
A memory management unit (MMU) is introduced as an intermediary between access requests and the memory partitions. The MMU receives access requests, verifies authentication information, and determines whether to grant access based on the requestor's credentials and the partition's security requirements. This intermediary enables secure access control without compromising the overall efficiency of data exchange.
2Reliability
If authentication mechanisms are implemented to enhance memory security, then reliability is improved, but device complexity increases due to the need for additional modules and authentication processes
Solution Approach 1:
The memory management unit (MMU) is designed to perform multiple functions: it manages memory allocation, handles authentication verification, controls access to secure partitions, and monitors access patterns. By consolidating these diverse functions into a single multi-functional component, the system achieves enhanced security without proportionally increasing device complexity.
Solution Approach 2:
The system incorporates automatic authentication verification and access control enforcement within the MMU, which autonomously evaluates access requests against stored authentication information and security policies. This self-service capability reduces the need for additional external security modules and simplifies the overall system architecture while maintaining high security standards.
Data Source
AI summary
A system and a method for managing a memory, and an electronic device are provided. The system comprises a memory allocator and a trusted driving module. The memory allocator receives a first memory access request for a target partition of the memory and obtains authentication information to generate an authentication request. The memory allocator manages one or more physical memory partitions of the memory, and the target partition is one of the physical memory partitions. The trusted driving module is configured to receive the authentication request, generate an authentication result, and return the authentication result to the memory allocator. The memory allocator is further configured to execute the first memory access request when the authentication result indicates that the authentication succeeds, and reject the first memory access request when the authentication result indicates that the authentication fails. The system of the present disclosure enhances the security of memory operating.