NOR Flash Data Protection via Address-Based Encryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

NOR flash memory devices are vulnerable to data decoding and analysis, posing a threat to information security as they can be easily cracked, compromising the protection of system software and data stored within.

Innovation Solution

A data protection device and method that performs encryption and decryption processing on write and read data using a storage address and characteristic information of a storage component, specifically utilizing encryption and decryption elements with address and data encryption algorithms like AES and DES, along with key generation for secure data management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If NOR flash memory is used for storing system software and data, then storage capability is provided, but data security is compromised due to ease of decoding and analysis

Engineering Contradiction:
Improvedata securityVSAvoiddata cracking vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by performing encryption on data before it is stored in the NOR flash memory. The encryption element encrypts the data to be written, and the decryption element decrypts the data when read, ensuring that data is protected from cracking before any analysis can occur. This preemptive security measure prevents the harmful factor of data cracking while maintaining storage capability.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If encryption processing is performed on data, then data security is improved, but device complexity increases due to additional encryption and decryption elements

Engineering Contradiction:
Improvedata securityVSAvoidencryption system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements self-service by integrating the encryption and decryption functions directly into the storage system components. The encryption element and decryption element are incorporated within the storage device architecture, allowing the system to encrypt and decrypt data automatically during read/write operations without requiring external security hardware or complex manual intervention. This reduces overall system complexity while maintaining strong data security.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11347898B2Data protection device and method and storage controller
Publication Date: 2022.05.31 GREE ELECTRIC APPLIANCE INC OF ZHUHAI
  • US11347898B2 patent drawing
  • US11347898B2 patent drawing
  • US11347898B2 patent drawing

AI summary

A device and method for data protection, and a storage controller, related to the technical field of data protection. The device comprises: an encryption unit (11), used for receiving first data to be written into a storage module and first storage address information (401), and for encrypting the first data on the basis of the first storage address information and of feature information of the storage module (402); and a decryption unit (12), used for reading from the storage module second data corresponding to second storage address information (403), and for decrypting the second data on the basis of the second storage address information and of the feature information (404).