Memory Write Access Control via Host Uncloneable Value
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current memory systems lack effective access control mechanisms that prevent unauthorized access, particularly from malicious actors who may gain root permissions, compromising the security of stored data.
Innovation Solution
Implementing a system that uses public/private key pairs and physically unclonable functions (PUFs) to grant access control to the owner of the storage device, enabling secure write access while preventing access by others, including root users, by signing commands with a private key and verifying them using a corresponding public key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional access control mechanisms are used in memory systems, then ease of operation is improved, but security against malicious actors with root permissions deteriorates
Solution Approach 1:
The patent introduces a cryptographic intermediary layer between the host system and memory device. A host uncloneable value (HUV) is generated and stored in the memory device, which serves as a mediator for authentication. The host system generates a host key pair and uses the HUV to create a memory key pair. This intermediary cryptographic mechanism prevents direct access even with root permissions, as the actual authentication depends on the stored HUV rather than host-level credentials.
2Reliability
If public/private key pairs and PUFs are implemented for secure access control, then security is improved, but device complexity increases
Solution Approach 1:
The patent implements preliminary action by generating and storing the host uncloneable value (HUV) in the memory device during manufacturing or initialization, before any host system connects. This pre-established cryptographic foundation allows subsequent authentication operations to be simpler, as the complex PUF-based key generation has already been performed. The host key pair is generated based on this pre-existing HUV, reducing the complexity of runtime authentication.
Solution Approach 2:
The memory device performs self-service by autonomously generating the host uncloneable value and participating in the generation of the memory key pair using its stored HUV and the host's public key. This self-service capability reduces the burden on the host system and simplifies the overall access control mechanism, as the memory device independently manages its cryptographic credentials without requiring external key management infrastructure.
Data Source
AI summary
Methods, systems, and devices for memory write access control are described. In some examples, memory systems may include storage that is access-protected (e.g., write access protected). To enable access to the protected storage, a server node may communicate a command to the memory system that is signed with a private key that is inaccessible to the memory system. They memory system may verify the command using a public key and may enable access to the protected storage. Access commands associated with the protected storage may be processed until access to the protected storage is disabled.