Nonvolatile Memory Signature Generation for Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Nonvolatile memory in electronic devices is vulnerable to malicious modifications, which can compromise the device's security and integrity, as evidenced by potential hijacking risks when BIOS or executable code is altered.
Innovation Solution
Implementing a secure signature generation and verification mechanism within nonvolatile memory devices using a controller that generates and stores a unique signature using a secure hash algorithm or checksum, with a private key, and storing one signature in clear memory for quick validation by the processor before executing code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If nonvolatile memory contents are stored without verification, then device operation speed is improved, but security and integrity are worsened due to vulnerability to malicious modifications
Solution Approach 1:
The system generates and stores a signature of the nonvolatile memory contents in advance, before execution. This preliminary action allows the processor to quickly verify integrity by comparing the stored signature with a newly generated one, rather than performing exhaustive verification checks during operation, thus maintaining speed while ensuring security.
2Reliability
If comprehensive verification of nonvolatile memory contents is performed, then security and integrity are improved, but device operation speed is worsened due to time-consuming validation processes
Solution Approach 1:
The verification process extracts only the essential integrity check by using a signature comparison approach. Instead of verifying the entire nonvolatile memory contents, the system extracts and compares compact signature values, which provides sufficient security validation while minimizing the time required for verification operations.
3Reliability
If signature verification is implemented in nonvolatile memory devices, then protection against malicious modifications is improved, but device complexity is worsened due to additional verification mechanisms
Solution Approach 1:
The system creates a copy of the integrity verification capability within the nonvolatile memory device itself. By implementing signature generation and storage directly in the memory device, the system eliminates the need for complex external verification infrastructure, reducing overall system complexity while maintaining strong protection against malicious modifications.
Data Source
AI summary
A nonvolatile memory device generates a signature using a private key and contents within the memory device. The signature is stored in a secure area within the nonvolatile memory device. A processor having the same private key also generates a signature that is stored in the clear. The processor validates the contents of the nonvolatile memory by comparing the signatures.