Memory Subsystem Security Manager for Critical Parameter Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory sub-systems face challenges in ensuring the integrity and secure erasure of critical security parameters (CSPs), particularly in maintaining data security during power loss situations and ensuring the complete removal of CSPs during cryptographic erasure processes.
Innovation Solution
The implementation of a security manager within the memory sub-system that utilizes duplicate files for storing CSPs, ensuring redundancy and fault protection, and employs a cryptographic erasure process that securely removes CSPs by performing a block erase function on memory blocks, with confirmation of successful erasure before indicating completion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic erasure is performed on CSPs, then security is improved, but risk of data loss during power failure increases
Solution Approach 1:
The patent implements a file system with journaling capabilities that records erasure operations before they are executed. This allows the system to recover from power failures by replaying or rolling back journal entries, preventing data loss while maintaining security through successful erasure operations.
Solution Approach 2:
The patent performs preliminary checks and preparations before executing cryptographic erasure, including validating the erasure command, ensuring proper formatting of target blocks, and setting up recovery mechanisms. This preliminary action prevents incomplete erasure operations that could lead to data loss during power failures.
2Reliability
If duplicate files are used for storing CSPs, then fault protection is improved, but device complexity increases
Solution Approach 1:
The patent creates duplicate copies of critical security parameter files and stores them in different locations within the memory device. This copying strategy ensures that if one copy is corrupted or lost, another copy remains available for recovery, providing fault protection without requiring complex external redundancy systems.
Solution Approach 2:
The patent integrates the duplicate file storage and recovery mechanisms into the existing file system structure, combining redundancy with the primary storage system rather than using separate independent systems. This merging approach provides fault protection while minimizing additional complexity by reusing existing file system components.
3Reliability
If block erase function is performed, then secure removal of CSPs is improved, but time required for erasure increases
Solution Approach 1:
The patent divides the erasure operation into segments, processing different blocks or regions of the memory device separately. This segmentation allows the system to perform secure erasure on smaller units independently, reducing the overall time required while maintaining security through complete erasure of each segment.
Solution Approach 2:
The patent implements a two-phase erasure approach where commonly accessed or less sensitive areas are erased first with standard procedures, while only the most critical security parameters receive the full cryptographic erasure treatment. This partial action strategy reduces total erasure time while maintaining secure removal of essential CSPs.
Data Source
AI summary
A processing device sets a first flag that indicates whether a first critical security parameter (CSP) file exists. The first CSP file includes a first set of CSPs for a memory device. The processing device sets a second flag that indicates whether the first CSP file is valid. The processing device sets a third flag that indicates whether a second CSP file exists. The second CSP file includes a second set of CSPs for the memory device. The processing device sets a fourth flag that indicates whether the second critical security parameter file is valid. The processing device selects one of the first or second CSP file as an active CSP file based on an evaluation of the first, second, third, and fourth flags.