NVM Authentication via Challenge-Response and ECC Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current device authentication methods for Non-Volatile Memory (NVM) devices, such as those using Public Key Infrastructure (PKI) or cryptographic technologies, are vulnerable to cloning and do not provide a direct authentication mechanism, leading to increased production costs due to the reliance on separate error correction code (ECC) components.
Innovation Solution
A method and apparatus where a host device transmits challenge information to an NVM device, receives authentication information generated using a secret key, and authenticates the NVM device without additional ECC components, allowing for reliable authentication without increasing production costs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate controller with ECC function is used for NVM device, then error correction capability is improved, but device complexity and production cost increase
Solution Approach 1:
The patent merges the authentication function and ECC function into a single integrated module within the NVM device, eliminating the need for separate controller components. This integration maintains robust error correction capability while reducing device complexity and production costs by consolidating functionality.
Solution Approach 2:
The integrated module performs multiple functions including authentication verification and error correction coding/decoding. This multi-functionality allows a single component to replace what would traditionally require separate ECC controller and authentication module, thereby reducing overall device complexity while maintaining reliability.
2Reliability
If authentication mechanism is added to NVM device, then security is improved, but production cost increases
Solution Approach 1:
The authentication function is merged with the ECC module into a single integrated component. This consolidation allows the authentication security mechanism to be implemented without requiring additional separate hardware components, thereby avoiding increased production costs while maintaining enhanced security.
3Reliability
If conventional authentication methods using PKI or cryptographic technologies are used, then device authentication capability is improved, but vulnerability to cloning attacks increases
Solution Approach 1:
The patent extracts the secret key information from vulnerable external storage and stores it directly within the NVM device in a protected manner. This extraction and internalization of critical authentication data prevents cloning attacks by ensuring that authentication credentials cannot be easily copied or extracted from the device.
Solution Approach 2:
The system performs preliminary authentication verification before allowing any data operations. The host device verifies authentication information generated by the NVM device using stored secret keys, preventing unauthorized access or cloning attempts before they can compromise the system.
Data Source
AI summary
An apparatus and method for authenticating a Non-Volatile Memory (NVM) device are provided. A host device that authenticates the NVM device transmits challenge information for authentication to the NVM device, receives pieces of authentication information in response to the challenge information from the NVM device, and authenticates the NVM device using the pieces of authentication information by the host device. The pieces of authentication information are generated based on the challenge information and secret key information stored in the NVM device.