Non-persistent Unlock for Secure Memory Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current memory devices lack effective mechanisms to prevent unauthorized access, especially in secure memory regions, as they rely solely on host-provided security measures, which may not be sufficient to mitigate unauthorized memory access attempts.

Innovation Solution

Implementing a non-persistent unlock state for secure memory by verifying access commands with credentials stored in the memory device, ensuring each access attempt is authenticated, and automatically re-locking protected regions after access, thereby preventing persistent unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If memory devices rely solely on host-provided security measures, then device complexity is reduced, but security reliability is insufficient

Engineering Contradiction:
Improvesecurity reliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The memory device performs self-authentication by verifying credentials stored within its own registers against access commands received from the host. This self-service security mechanism allows the device to independently authenticate access requests without relying entirely on external host security measures, thereby improving security reliability while maintaining reasonable device complexity

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

Credentials are pre-stored in registers within the memory device before any access operations occur. This preliminary preparation of authentication data enables rapid verification of access commands without adding complex real-time security infrastructure, resolving the contradiction between enhanced security and device complexity

Inventive Principle:
Principle #10Preliminary action

2Speed

If persistent unlock state is used for accessed memory regions, then access speed is improved, but security vulnerability increases

Engineering Contradiction:
Improveaccess speedVSAvoidsecurity vulnerability
Core Design Contradiction:
SpeedVSObject-affected harmful factors

Solution Approach 1:

The security state of memory regions is made dynamic rather than static. The system transitions between locked and unlocked states based on real-time authentication results and access patterns. This dynamic approach allows the memory device to maintain high-speed access during authenticated operations while automatically re-locking regions when authentication fails or access completes, thereby resolving the contradiction between access speed and security vulnerability

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system implements feedback mechanisms where access commands are verified against stored credentials, and the security state is adjusted based on verification results. This feedback loop ensures that memory regions are unlocked only when necessary for authenticated access and re-locked afterward, preventing persistent security vulnerabilities while maintaining access performance

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS10768831B2Non-persistent unlock for secure memory
Publication Date: 2020.09.08 MICRON TECHNOLOGY INC
  • US10768831B2 patent drawing
  • US10768831B2 patent drawing
  • US10768831B2 patent drawing

AI summary

Apparatuses and methods related to implementing a non-persistent unlock state for secure memory. Implementing the non-persistent unlock state can include verifying whether an access command is authorized to access a protected region of a memory array. The authorization can be verified utilizing a key and a memory address corresponding to the access command. If an access command is authorized to access a protected region, then a row of the memory array corresponding to the access command can be activated following the placement of the protected region in a non-persistent unlocked mode. If the row of the memory array corresponding to the access command is activated, then the protected region can be placed on a locked mode.