Secure Memory Read Restriction Logic for Testing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure data storage systems face challenges in preventing unauthorized access to sensitive information during memory testing without compromising data security or testing quality.
Innovation Solution
Implementing read restriction logic that checks data values against a predefined set of permitted values, responding with dummy values for unauthorized access attempts while allowing legitimate test procedures to access permitted data values, and activating this logic during the bootstrapping process to restrict external access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If memory testing is performed without restrictions, then testing quality is improved, but security of sensitive information deteriorates
Solution Approach 1:
The read restriction logic acts as an intermediary component between the test interface and the memory. It intercepts read requests during memory testing, checks whether the retrieved data values belong to a predefined set of permitted test values, and responds with dummy values when unauthorized access is detected. This mediator enables full memory testing while preventing leakage of sensitive information stored in restricted address ranges.
2Object-affected harmful factors
If read restriction logic is implemented, then data security is improved, but device complexity deteriorates
Solution Approach 1:
The memory address space is segmented into restricted address ranges and non-restricted address ranges. The read restriction logic is configured with specific restricted address ranges and predefined sets of permitted data values for each range. This segmentation allows the system to apply security restrictions only where needed while maintaining simple access patterns for non-restricted areas, thereby limiting the increase in device complexity.
3Object-affected harmful factors
If dummy values are returned for unauthorized access, then security is improved, but testing capability deteriorates
Solution Approach 1:
Different quality of response is provided based on the location and nature of the access request. For read requests targeting restricted address ranges containing unauthorized data values, dummy values are returned to maintain security. However, for read requests to non-restricted ranges or for permitted test values in restricted ranges, the actual data values are returned, enabling full testing capability where appropriate.
Data Source
AI summary
An apparatus includes a memory, an interface and read restriction logic. The read restriction logic is configured to receive via the interface a request to read a data value from a specified address of the memory, to retrieve the data value from the specified address, to check, upon finding that the specified address falls in an address range that is predefined as restricted, whether the retrieved data value belongs to a predefined set of permitted data values, to respond to the request with the retrieved data value when the retrieved data value belongs to the set of permitted data values, and, otherwise, when the retrieved data value does not belong to the set of permitted data values, to respond to the request with a dummy data value.