Memory Partition Binding Registers Secure Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multi-processor systems, the memory controller, which is often in a non-trusted domain, has access to sensitive data during transactions, posing a risk of data compromise, and there is a need for secure domain separation and dynamic permission management to restrict access to sensitive data as the system's security state changes.
Innovation Solution
Implementing a system-on-a-chip (SoC) architecture with a memory hardware module that allocates memory partitions and uses binding registers to encrypt and decrypt data, ensuring only trusted entities access sensitive information, and dynamically adjusts access permissions based on domain configurations and roles, using a cipher/binding function to secure data transactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the memory controller maintains access to chip resources during data transactions, then resource allocation and management is simplified, but the risk of sensitive data compromise increases
Solution Approach 1:
The patent segments the memory access system into trusted and non-trusted domains. The memory controller is separated from direct access to sensitive data by introducing domain-specific memory interfaces and access control mechanisms. This segmentation allows the memory controller to manage resources while preventing unauthorized access to sensitive data in trusted domains.
Solution Approach 2:
The patent introduces intermediary components including domain-specific memory interfaces, access control logic, and permission verification mechanisms that mediate between the memory controller and trusted domain entities. These intermediaries enable resource management while filtering and controlling access to sensitive data based on domain permissions.
2Reliability
If data is stored with restrictive permissions in less secure environments, then security is improved, but data accessibility and usability deteriorates
Solution Approach 1:
The patent implements dynamic permission management where access permissions are not fixed but can be adjusted based on the operational context, security state, and domain configuration. The system can transition between different security states, allowing data to be accessible during secure operations (e.g., manufacturing) and restricted during less secure operations (e.g., end-user operation).
Solution Approach 2:
The patent changes the parameter of access permissions dynamically based on system state. During manufacturing provisioning, data may be stored with less restrictive permissions for ease of access and modification. After provisioning, the system transitions to a more secure state where permissions are tightened, allowing the same data to serve different functional requirements under different security parameters.
Data Source
AI summary
Embodiments include systems and methods for securely accessing data in the context of a data transaction. A system may include a memory block, within which a memory partition may be allocated to the data transaction. The memory partition includes a data storage block and at least one binding register. The system also includes platform entities and an access control block, which determines whether a particular platform entity may access data within the data storage block, and whether a particular platform entity may write binding information into a binding register. Access also may be granted or denied based on the current state of a state machine associated with the data transaction. The system also includes a cipher/binding function adapted to encrypt the data, using the binding information, for storage on an unsecured memory device, and to decrypting encrypted data, using the binding information, which is retrieved from the unsecured memory device.