Memory Block Write Protection via Certificate Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Managing write protection and the clearing or rewriting of write-protected blocks in a normal operating system environment is challenging, as existing methods often require removing the memory module from service to modify write protection settings, lacking security and availability during normal usage.
Innovation Solution
Implementing a security protocol using certificate authentication to manage write protection, allowing authorized entities to securely set and clear protection during normal operation by verifying signatures with public keys corresponding to installed certificate chains.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If write protection is set for memory blocks to protect data, then data security is improved, but the ability to modify or clear protection settings during normal operation deteriorates
Solution Approach 1:
A certificate chain stored in a memory slot acts as an intermediary authentication mechanism. The processing device uses the certificate chain to verify the identity of entities requesting write protection modifications. This intermediary system enables secure authorization during normal operation without requiring module removal, resolving the contradiction between maintaining data security and allowing operational flexibility.
2Stability of the object's composition
If write protection is set to prevent unauthorized modifications, then data integrity is improved, but the flexibility to clear protection without removing the module deteriorates
Solution Approach 1:
The certificate chain serves as an intermediary that enables authorized entities to clear write protection during normal operation. By verifying the entity's identity through the certificate chain, the system maintains data integrity for unauthorized users while providing adaptability for authorized users to clear protection when needed, without requiring module removal.
Solution Approach 2:
The write protection state transitions from static (requiring module removal to clear) to dynamic (clearable during normal operation with proper authorization). The certificate chain verification enables the protection state to change dynamically based on authorized requests, improving both stability and adaptability.
3Reliability
If secure authentication is implemented for write protection management, then security is improved, but the complexity of the authentication process increases
Solution Approach 1:
The certificate chain is pre-stored in the memory slot during manufacturing or initial setup. This preliminary action eliminates the need for complex real-time certificate distribution and verification setup. When write protection modification is needed, the authentication process simply retrieves and verifies the pre-stored certificate chain, maintaining high security while reducing operational complexity.
Data Source
AI summary
An apparatus includes a memory slot including a certificate chain corresponding to an entity and a memory block. The memory block has protection enabled. The apparatus includes a processing device. The processing device is configured to receive a request message to clear protection for the memory block from a computing device of the entity. The request message includes a signature generated based at least in part on a private key of the entity. The processing device is configured to determine a public key corresponding to the entity based at least in part on the certificate chain, determine that the signature is valid based at least in part on the public key, determine that the protection for the memory block corresponds to the certificate chain and clear the protection for the memory block.