Memory Payload Validation via Device Identifier Signatures

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Memory systems face challenges in authenticating information payloads to prevent adverse behavior, such as replay attacks, where malicious payloads can cause unintended operations in receiving devices.

Innovation Solution

Implementing a payload validation system that uses signatures generated based on a device identifier to authenticate payload transmitters and information payloads, ensuring that only authenticated payloads are processed, and invalid or malicious payloads are ignored or blocked.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a memory device receives information payloads from multiple devices without validation, then the device can operate with simple reception protocols, but the system becomes vulnerable to replay attacks and adverse behavior from malicious payloads

Engineering Contradiction:
Improvesecurity against replay attacksVSAvoidpayload validation mechanism
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary authentication by generating a signature based on the payload data and device identifier before processing the payload. This advance validation ensures that only authenticated payloads are processed, preventing replay attacks without requiring complex runtime verification mechanisms.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces a signature as an intermediary element that mediates between the payload transmitter and receiver. The signature, generated from the payload and device identifier, serves as a trust intermediary that validates the payload's authenticity without requiring direct complex verification between devices.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the memory device processes all received payloads without authentication, then the device can maintain high processing speed, but malicious payloads can cause unintended operations and adverse behavior

Engineering Contradiction:
Improveauthentication of payload transmitterVSAvoidpayload processing speed
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The authentication process is performed preliminarily by generating a signature from the payload and device identifier before full processing. This allows the system to quickly verify authenticity using the signature mechanism, enabling high-speed processing of authenticated payloads while maintaining security.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If the device implements no payload validation, then the system operates with minimal overhead and simple protocols, but the device cannot distinguish between intended and malicious payloads

Engineering Contradiction:
Improvediscrimination between valid and malicious payloadsVSAvoidsignature generation and verification
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The signature acts as an intermediary that enables the device to distinguish between valid and malicious payloads. By generating the signature from the payload data and device identifier, the system creates a verifiable trust mechanism without requiring complex validation infrastructure.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the parameter of payload verification by using a cryptographic signature approach. Instead of complex validation protocols, the system transforms the verification problem into comparing signatures, which can be done with simpler operations while maintaining high discrimination capability.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentUS11997212B2Payload validation for a memory system
Publication Date: 2024.05.28 MICRON TECHNOLOGY INC
  • US11997212B2 patent drawing
  • US11997212B2 patent drawing
  • US11997212B2 patent drawing

AI summary

Methods, systems, and devices for payload validation for a memory system are described. A payload receiver may be a device that includes an array of memory cells configured to store data, and a payload transmitter may be a host of a payload receiver (e.g., a host device) or another device that is in communication with the payload receiver. A payload receiver may be configured to receive an information payload and a signature associated with the information payload. The received signature may be based on the information payload and an identifier of the payload receiver previously provided to the payload transmitter. The payload receiver may generate a signature based on the information payload and the identifier of the payload receiver (e.g., as stored or cached at the payload receiver), and authenticate the information payload based on the received signature and the generated signature.