Memory Startup Verification for Sensitive Data Erasure
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for writing data into memories lack security, particularly in ensuring the completion of write operations and effective erasure of sensitive data, and are vulnerable to power-off attacks.
Innovation Solution
A method is introduced where the last group of data written into the memory consists of non-sensitive data, with verification steps to ensure the absence of sensitive data, followed by erasure if necessary, and optionally writing non-sensitive reference data to secure the memory state.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sensitive data is written into memory, then data storage functionality is improved, but security against power-off attacks deteriorates
Solution Approach 1:
The patent applies preliminary action by writing non-sensitive data before sensitive data into the memory. This preparatory step ensures that if a power-off attack occurs, the sensitive data remains protected because the memory contains only non-sensitive data at the time of the attack. The preliminary writing of placeholder data creates a security buffer that prevents direct exposure of sensitive information.
Solution Approach 2:
The patent implements preliminary anti-action by pre-writing non-sensitive data into the memory to counteract the potential harmful effect of power-off attacks. This anticipatory measure neutralizes the security vulnerability by ensuring that even if the system is attacked during data writing, the sensitive data remains protected because the memory state at the time of attack contains only non-sensitive placeholder data.
2Reliability
If verification steps are added to check the last written data, then security is improved, but device complexity increases
Solution Approach 1:
The patent applies self-service by making the memory system verify its own state during the starting phase. The system automatically checks whether the last written data was sensitive or non-sensitive and autonomously decides whether to erase the memory or proceed with normal operation. This self-verification mechanism eliminates the need for external complex verification systems while maintaining high security standards.
3Reliability
If erasure operation is implemented when sensitive data is detected, then security is improved, but loss of time occurs
Solution Approach 1:
The patent applies preliminary action by pre-writing non-sensitive data before sensitive data, which prevents the need for time-consuming erasure operations. Since the memory is pre-filled with non-sensitive placeholder data, the system can simply overwrite this with sensitive data without needing to erase the previous content, thus avoiding time loss while maintaining security.
Solution Approach 2:
The patent converts the potential harm of having data in memory into a benefit by using non-sensitive placeholder data. Instead of leaving sensitive data vulnerable or requiring time-consuming erasure, the system uses innocuous placeholder data that can be safely present in memory during attacks, turning the potential security risk into a protective measure that eliminates the need for time-consuming erasure operations.
Data Source
AI summary
A method of verifying writing of data into a memory includes a step of verifying whether a last group of data written into the memory includes at least one sensitive data item. When the last group of data includes at least one sensitive data item, a first group of data is erased from the memory. At least one address of that first group of data is indicated in at least one first metadata item of a data item of said last group of data.