NFC Memory Module Security via Segmented Architecture
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security systems, particularly those utilizing NFC RF technology, are vulnerable to attacks, leading to unauthorized interception, corruption, or publication of sensitive data, causing system failures and disruptions.
Innovation Solution
A memory module with integrated NFC RF capabilities, including non-volatile memory for security software and a security processor that performs security functions, tightly couples NFC wireless protocol capabilities with security functionalities within a secure execution environment, ensuring secure data storage and retrieval.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If NFC RF technology is used for wireless communication, then connectivity and data transfer capability are improved, but security vulnerability increases making the system susceptible to unauthorized interception and attacks
Solution Approach 1:
The system is segmented into distinct functional modules: NFC RF component for wireless communication, security processor for security operations, and non-volatile memory for secure data storage. This segmentation isolates security-critical functions from the communication interface, reducing the attack surface while maintaining NFC connectivity capabilities.
Solution Approach 2:
A security processor acts as an intermediary between the NFC RF component and the external environment. This intermediary validates and secures all communications, preventing unauthorized interception while allowing legitimate NFC data transfer. The security processor mediates between the vulnerable wireless interface and the protected data storage.
2Reliability
If security functionality is integrated into NFC system, then data protection is improved, but system complexity increases
Solution Approach 1:
Multiple critical functions are merged into a single integrated memory module: NFC RF component, security processor, and non-volatile memory are combined in one package. This merging reduces overall system complexity by eliminating the need for separate security modules and simplifying interconnections, while maintaining robust security functionality.
Solution Approach 2:
The integrated memory module serves multiple functions simultaneously: it provides NFC wireless communication, executes security protocols, and stores sensitive data. This multi-functionality eliminates the need for separate dedicated components for each function, reducing system complexity while ensuring security is embedded in all operations.
3Reliability
If secure execution environment is established, then unauthorized access is prevented, but access speed for authorized users may be reduced
Solution Approach 1:
Security credentials and access permissions are pre-configured in the non-volatile memory during manufacturing. The security processor performs preliminary authentication of authorized users before data access requests are processed. This preliminary setup enables faster access for authenticated users since security verification is already in place, minimizing the perceived speed reduction while maintaining data integrity.
Data Source
AI summary
An architecture is presented that facilitates maintaining a log of near field transactions in a memory module that includes security functionalities and near field communication (NFC) capabilities. The memory module comprises non-volatile memory that stores security software and a security processor that accesses the security software from the nonvolatile memory and performs security functions based on the security software stored. The non-volatile memory is divided into partitions by the security processor. NFC radio frequency (RF) communication capabilities are integrated into the memory module such that the memory module directly interfaces to an external NFC antenna. This facilitates NFC communications within the secure environment of the memory module. Further, the memory module stores data related to near field transactions so that this data can be subsequently reviewed and exported in an appropriate format.