Memory PSID Security via Random Number Generation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional memory sub-systems face security risks due to predictable patterns in memory physical presence security identification (PSID) values, which can be derived from serial numbers, allowing unauthorized access and reverting memory devices to their original state.
Innovation Solution
Generating PSID values using a statistically random number generator, storing them in a secured database, and treating them as cryptographic keys for secure validation and encryption, ensuring only authenticated commands can revert memory devices to their original state.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If PSID values are generated using predictable patterns from serial numbers, then ease of generation and retrieval is improved, but security is worsened allowing unauthorized access
Solution Approach 1:
The patent changes the fundamental parameter of PSID generation from deterministic algorithms to statistically random number generation. This transforms the PSID from a predictable value derived from serial numbers to an unpredictable cryptographic value, resolving the security vulnerability while maintaining operational simplicity through automated generation and storage processes
Solution Approach 2:
The patent creates a secure copy mechanism where the PSID is generated and stored in a secured database before being printed on a medium attached to the memory device. This copying process ensures the PSID is preserved in a secure location while being made physically accessible to authorized users, balancing security with ease of retrieval
2Ease of operation
If PSID is stored in plain text in manufacturer's database, then ease of retrieval is improved, but security is worsened enabling unauthorized users to deduce PSID
Solution Approach 1:
The patent fundamentally changes the storage parameter of the PSID from plain text to encrypted form in the secured database. This encryption transforms the PSID into an unreadable format for unauthorized users while maintaining efficient retrieval capabilities through cryptographic key-based access, simultaneously addressing security concerns and preserving ease of authorized retrieval
Solution Approach 2:
The patent implements a disposable security approach where the PSID is printed on a physical medium that can be detached or destroyed. This creates a single-use or limited-use security credential that, once compromised or lost, can be discarded and a new PSID generated, preventing ongoing unauthorized access while maintaining simple retrieval for legitimate users
3Ease of manufacture
If low entropy algorithm is used for PSID generation, then ease of generation is improved, but security is worsened making PSID predictable from serial number
Solution Approach 1:
The patent changes the generation algorithm parameter from low-entropy deterministic functions to high-entropy statistical random number generation. This transformation maintains ease of generation through automated computer-based processes while fundamentally improving security by making the PSID unpredictable and independent of the serial number, eliminating the vulnerability to deduction attacks
Solution Approach 2:
The patent introduces a secured database as an intermediary between the PSID generation process and the final PSID output. This intermediary component securely stores the generated PSID, manages encryption and decryption operations, and controls access to the PSID, thereby maintaining generation simplicity while adding a layer of security that prevents direct prediction from serial numbers
Data Source
AI summary
A system includes a memory component and a processing device, operatively coupled with the memory component, to generate a physical presence security identification (PSID) for the memory component using a statistically random number generator. The processing device, operatively coupled with the memory component, can securely retrieve the PSID and revert the memory component to an original state using the PSID.