Multi-Core Storage Boot Authentication for Faster Secure Startup
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage devices face a trade-off between security and operating speed, with security measures often hindering booting speed.
Innovation Solution
A storage device with a memory controller featuring multiple cores, including a security core and two core groups, performs parallel authentication and booting processes to enhance security while maintaining speed, using a device identifier and certificates to verify booting data integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security means are mounted in the storage device to protect data, then security is improved, but operating speed is hindered
Solution Approach 1:
The memory controller is divided into multiple cores: a first core dedicated to authentication operations and second cores dedicated to booting operations. This segmentation allows security functions to be isolated from performance-critical booting functions, enabling parallel execution without interference.
Solution Approach 2:
The first core performs authentication operations on booting data in advance before the second cores load and execute the booting data. By completing security verification beforehand, the system ensures security requirements are met without delaying the subsequent booting process.
2Reliability
If authentication operations are performed sequentially before booting, then security verification is thorough, but booting speed decreases
Solution Approach 1:
The system separates authentication operations (first core) from booting operations (second cores), allowing them to execute independently and in parallel. This eliminates the sequential bottleneck while maintaining thorough security verification.
Solution Approach 2:
Authentication is performed as a preliminary action by the first core before the booting process begins on second cores. This timing strategy ensures security verification is complete without blocking the booting pipeline.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed is a storage device which includes a nonvolatile memory device that stores booting data and user data, and a memory controller that includes a first core, a second core, and third cores. In an initialization operation, the first core performs first authentication on at least a first part of the booting data. In response to that the first authentication succeeds, the first core generates a device identifier, and the second core loads the first part of the booting data and performs first booting. The first core performs second authentication on at least a second part of the booting data. In response to that the second authentication succeeds, the first core generates a first certificate and a second certificate, and the second core loads the second part of the booting data and performs second booting.