Memory Replay Attack Countermeasure via Timestamp Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current memory systems face challenges in preventing replay attacks, which involve reusing previous communication data, compromising security and requiring effective countermeasures to ensure data integrity and system reliability.
Innovation Solution
A method and system that utilize a host device to write security data and timestamps to separate memory areas, with a secure nonvolatile memory device updating a timestamp and generating a notification signal to confirm successful updates, ensuring that the writing operation is only completed when the timestamp is successfully updated, thereby preventing replay attacks and enhancing security and reliability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If timestamps are stored in the same memory area as security data, then device complexity is reduced, but security reliability deteriorates due to potential replay attacks
Solution Approach 1:
The patent divides the memory storage into two separate areas: a first memory area for storing security data and a second memory area for storing timestamps. This segmentation prevents replay attacks by ensuring that even if an attacker accesses the security data, they cannot retrieve valid timestamps from the same memory location, thereby improving security reliability without requiring complex additional hardware components.
2Reliability
If timestamp updating is performed without confirmation, then operation speed is improved, but security reliability deteriorates due to potential incomplete updates
Solution Approach 1:
The patent implements a feedback mechanism where the host device receives a notification signal from the nonvolatile memory device after the timestamp update operation. The host device waits for this confirmation before completing the security data writing operation. This feedback loop ensures that the timestamp is successfully updated in the second memory area, preventing security issues while the waiting time is minimal and does not significantly impact overall system performance.
3Reliability
If separate memory areas are used for security data and timestamps, then security reliability is improved, but device complexity increases
Solution Approach 1:
The patent segments the memory storage into distinct first and second memory areas, with the first area storing security data and the second area storing timestamps. This simple segmentation approach effectively prevents replay attacks by isolating the timestamp validation function from the security data storage, achieving high security reliability through a straightforward structural division rather than complex security protocols.
Data Source
AI summary
In a method of operating a memory system, first security data and a first timestamp for preventing a replay attack are written by a host device to a first memory area which is an external memory area. A second timestamp is updated by the host device based on the first timestamp. The second timestamp corresponding to the first timestamp is stored in a second memory area distinguished from the first memory area. A first notification signal representing a result of updating the second timestamp is received by the host device. A writing operation for the first security data is completed when it is determined, by the host device, based on the first notification signal that the second timestamp is successfully updated.