Non-volatile Memory Block-Level Write Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage devices lack selective overwrite protection, often requiring all-or-nothing write protection across entire media or file systems, which is coarse and prone to security risks, and do not allow individual block-level control, especially in scenarios where data needs to be preserved or securely erased.
Innovation Solution
Implementing a write protection scheme using specially configured tag values that are part of the control data written during data block formatting, allowing fine-grained protection down to individual blocks, and enabling selective overwrite control through hardware-managed tag values that indicate encryption key versions, allowing only authorized access for data modification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all-or-nothing write protection is applied across entire media or file systems, then data security is improved, but write flexibility and operational convenience deteriorate
Solution Approach 1:
The patent segments write protection control from media-level or file-system-level to individual block-level. Each data block is assigned a unique tag value that can be independently set to indicate write protection status, allowing selective protection of specific blocks while permitting writes to other blocks. This segmentation enables fine-grained control where only protected blocks reject write commands, while unprotected blocks accept writes normally.
2Ease of manufacture
If coarse-grained write protection is used at media or file system level, then implementation simplicity is improved, but security precision and control granularity worsen
Solution Approach 1:
The patent divides the storage media into independently controllable blocks, each with its own tag value. This segmentation allows protection granularity to be reduced from media-level to block-level while maintaining implementation simplicity through standardized tag value management. The controller reads tag values for individual blocks to determine write permission, enabling precise control without complex implementation.
Solution Approach 2:
The patent applies different write protection qualities to different local regions (blocks) of the storage media. Each block can have its tag value independently configured to indicate whether it is protected or unprotected, allowing local quality differentiation. This enables specific blocks to have enhanced security properties while other blocks maintain normal write accessibility.
3Reliability
If traditional write protection schemes are implemented, then data integrity protection is improved, but the ability to selectively erase or modify specific data blocks deteriorates
Solution Approach 1:
The patent segments write protection control to the individual block level using unique tag values. This enables selective data control where specific blocks can be protected from unauthorized modification while other blocks remain modifiable. The segmentation allows versatile operations such as selective erasure of individual blocks, selective protection of sensitive data, and flexible updates to non-sensitive data within the same storage media.
Data Source
AI summary
Apparatus and method for selective overwrite protection of data stored in a non-volatile memory (NVM) with fine precision. In some embodiments, a write command is received from a host device to write one or more blocks of data having associated logical addresses to the NVM. A read operation is performed in response to the write command to read a tag value associated with each block. The write command is disallowed in response to the tag value indicating a protected version of the block having the associated logical address is already stored at the selected location. The tag value may be a key version value indicative of a version of an encryption key used to encrypt user data in the data block and whether the block is write-protected.