Memory Protection Region Authentication for Secure Data Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory device protection schemes are vulnerable to malicious access and lack flexible, secure data protection mechanisms, such as asymmetric key usage and dynamic adjustment of protection region attributes.
Innovation Solution
A host system and memory system exchange symmetric or asymmetric keys to access protection regions, with periodic updates, and the memory system verifies the host's authorization before programming data, allowing dynamic adjustment of protection region size and address ranges.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing memory device protection schemes are used, then basic data storage is enabled, but security against malicious access is insufficient
Solution Approach 1:
The memory system is divided into multiple protection regions, each with independent security attributes and access controls. This segmentation allows different security policies to be applied to different data areas, enhancing overall security while maintaining basic storage functionality.
Solution Approach 2:
The patent combines multiple cryptographic mechanisms (symmetric keys, asymmetric keys, digital signatures) with traditional memory protection schemes to create a composite security framework. This layered approach provides robust protection against malicious access while preserving data storage capabilities.
2Adaptability or versatility
If traditional protection mechanisms are implemented, then data storage is achieved, but flexible adjustment of protection region attributes is not possible
Solution Approach 1:
The protection region attributes (size, address ranges, security levels) are made dynamically adjustable through authenticated commands. The system allows runtime modification of these parameters while maintaining security through cryptographic verification, enabling flexible adaptation without excessive complexity.
Solution Approach 2:
The patent enables dynamic changing of protection region parameters (address ranges, sizes, access permissions) through authenticated host commands. This allows the system to adapt to different security requirements while maintaining a manageable level of complexity through standardized interfaces.
3Reliability
If periodic key updates are implemented, then security is enhanced, but system operation complexity increases
Solution Approach 1:
The system implements periodic key updates at predetermined intervals or after specific numbers of operations. This periodic refresh of cryptographic keys enhances security by limiting the window for potential key compromise while maintaining manageable complexity through automated scheduling.
Solution Approach 2:
The system incorporates feedback mechanisms that track usage patterns and security events, automatically triggering key updates when thresholds are reached. This feedback-driven approach optimizes the balance between security enhancement and operational complexity by updating keys based on actual risk levels.
Data Source
AI summary
Methods, systems, and devices for authenticated modification of memory system data are described. A host system may transmit a command to program data to a protection region of a memory system, and the host system may sign the command using a key associated with the protection region. In some examples, the host system may transmit the data associated with the command, or the command may include instructions to move the data from another region of the memory system. Upon receiving the command, the memory system may verify the signature to determine whether the host is authorized to modify the protection region, and may program the data as requested by the host system. In some cases, the protection regions of the memory system may be updated, for example by adjusting the size or address range of the protection regions, in response to a command from the host system.