NAND Flash Memory Authentication via Asymmetric Key Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current authentication methods in information security, particularly in devices like SD cards and NAND flash memories, face challenges in preventing unlawful use of secret information when the host device's tamper-resistance is low, and there is a need for efficient countermeasures against card-falsifying software and false SD cards, especially in environments where hardware implementation of public key cryptosystems is difficult due to circuit scale restrictions.
Innovation Solution
A memory system configuration where the NAND flash memory has a high tamper-resistance with first key information hidden, generating second key information using a constant and a random number, while the host device only holds the second key information, ensuring asymmetric secret levels and shared session keys for authentication, without requiring large circuit scales for public key cryptosystems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key cryptosystems are implemented for authentication, then security is improved, but circuit scale increases making hardware implementation difficult
Solution Approach 1:
The authentication system is segmented into two distinct components: secret information stored in the information processing device and verification information stored in the external storage device. This segmentation allows the complex cryptographic functions to be distributed, with the information processing device performing only lightweight operations on secret information while the external device handles verification, thereby reducing the circuit scale requirements for hardware implementation.
Solution Approach 2:
The external storage device acts as an intermediary that holds verification information and assists in the authentication process. Instead of requiring the information processing device to contain all cryptographic verification capabilities, the system uses the external storage device as a mediator that provides verification data, enabling secure authentication with reduced hardware complexity.
2Reliability
If secret information is stored in the host device, then authentication functionality is improved, but tamper-resistance decreases making the system vulnerable to card-falsifying software
Solution Approach 1:
The authentication credentials are segmented and distributed: secret information is stored in the information processing device while verification information is stored in the external storage device with higher tamper-resistance. This segmentation ensures that even if the host device is compromised, the authentication system remains secure because the verification information resides in a more protected environment.
Solution Approach 2:
The system prepares for potential tampering by pre-storing verification information in an external storage device that provides higher tamper-resistance. This prior cushioning measure ensures that even if the host device's secret information is exposed through tampering or card-falsifying software, the authentication can still be performed securely using the protected verification information from the external device.
Data Source
AI summary
According to one embodiment, an authentication method includes generating, by the memory, first authentication information by calculating secret identification information with a memory session key in one-way function operation, transmitting encrypted secret identification information, a family key block, and the first authentication information to a host, and generating, by the host, second authentication information by calculating the secret identification information generated by decrypting the encrypted secret identification information with the host session key in one-way function operation. The method further includes comparing, by the host, the first authentication information with the second authentication information.