NVRAM Pass Gate Security Access Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in providing secure access to non-volatile random access memory (NVRAM) due to power efficiency concerns and susceptibility to unauthorized reading/writing, with existing solutions introducing latency through encryption and incomplete power-down issues.
Innovation Solution
A system and method that involves sending an unlock password to NVRAM via a trusted boot program on a System on Chip (SoC), where the NVRAM compares this password to a pass gate value; if matching, the pass gate is unlocked, enabling access to the non-volatile cell array, and if not, it remains locked, with a self-destruct mechanism to prevent brute-force attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is used to secure NVRAM contents, then security is improved, but latency is introduced reducing performance
Solution Approach 1:
The patent applies preliminary action by pre-provisioning pass gate values in the NVRAM fuse during manufacturing, before the device is deployed. This eliminates the need for real-time encryption/decryption operations during runtime, as the security verification is already prepared in advance through the pass gate comparison mechanism.
2Reliability
If NVRAM contents are overwritten/erased upon power-down, then security is improved, but power efficiency is reduced and performance is degraded
Solution Approach 1:
The patent uses preliminary action by pre-configuring the pass gate values in the NVRAM fuse during manufacturing. This preliminary security setup allows the NVRAM to maintain its contents across power cycles without requiring periodic overwriting or erasing, thus preserving both security and power efficiency.
Solution Approach 2:
The NVRAM device performs self-service security verification through the pass gate mechanism embedded in its fuse. The device automatically compares unlock passwords against the pre-provisioned pass gate values without requiring external intervention or power-consuming operations, enabling secure content retention across power cycles.
3Reliability
If a pass gate mechanism with self-destruct is implemented, then security against brute-force attacks is improved, but device complexity increases
Solution Approach 1:
The patent introduces an intermediary element - the pass gate value stored in the NVRAM fuse - that mediates between the unlock password and the NVRAM cell array access. This intermediary provides a simple comparison mechanism that enables secure access control without requiring complex cryptographic operations or additional hardware components.
Data Source
AI summary
Systems and methods are disclosed for providing secure access to a non-volatile random access memory. One such method comprises sending an unlock password to a non-volatile random access memory (NVRAM) in response to a trusted boot program executing on a system on chip (SoC). The NVRAM compares the unlock password to a pass gate value provisioned in the NVRAM. If the unlock password matches the pass gate value, a pass gate is unlocked to enable the SoC to access a non-volatile cell array in the NVRAM.