Memory Subsystem Data Segmentation for Secure Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional memory sub-systems struggle to securely encrypt data blocks larger than a threshold size, as they are constrained by encryption operations that can only handle data blocks of specific sizes, leading to incomplete encryption of larger data blocks.
Innovation Solution
The memory sub-system divides large data blocks into segments of sizes compliant with the encryption operation's constraints, either by adjusting segment sizes or adding padding data to ensure each segment meets the encryption requirements, allowing for secure encryption and storage of data across various host systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the encryption operation is applied to data blocks larger than the threshold size, then data security is compromised due to incomplete encryption, but reducing data block size to meet encryption constraints limits the system's ability to handle large data efficiently
Solution Approach 1:
The patent divides large data blocks into multiple smaller segments that meet the encryption operation's threshold size requirements. Each segment is encrypted separately using the encryption operation, ensuring complete and secure encryption of the entire data block while maintaining the ability to handle large data efficiently through systematic processing of divided segments
2Reliability
If the memory sub-system strictly enforces encryption operation size constraints, then encryption security is maintained, but the system loses flexibility in handling data blocks of various sizes from different host systems
Solution Approach 1:
The memory sub-system segments large data blocks into smaller units that satisfy encryption size constraints, enabling secure encryption while accepting data blocks of any size from various host systems
Solution Approach 2:
The system dynamically adjusts data block parameters by dividing them into segments with sizes that match encryption operation requirements, allowing the system to maintain encryption security while adapting to different data block sizes from various host systems
Data Source
AI summary
A processing device of a memory sub-system is configured to receive, from a host system, host data to be stored at a memory sub-system in an encrypted form; determine that the host data exceeds a threshold size associated with an encryption operation; separate the host data into a plurality of segments based on the threshold size associated with the encryption operation; determine that a particular segment of the plurality of segments does not satisfy a size requirement of data associated with the encryption operation; modify the particular segment to satisfy the size requirement of data associated with the encryption operation; encrypt each of the plurality of segments based on the encryption operation; and store the encrypted plurality of segments at the memory sub-system.