OTP Key Encryption for Memory Network Packet Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing memory network technologies expose access patterns and degrade read/write performance by requiring encryption and decryption at every node, while only protecting packet data and not the access pattern.

Innovation Solution

A device and method using a pre-generated one-time password (OTP) key for efficiently encrypting and decrypting packets, hiding the target node, and maintaining packet structure integrity in a memory network, including a key storage unit, encryption unit, and decryption unit to manage OTP keys and route information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encryption and decryption are performed at every node using algorithms such as Diffie-Hellman, then packet data is protected, but read and write performance deteriorates

Engineering Contradiction:
Improvepacket data protectionVSAvoidread and write performance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent applies preliminary action by pre-generating one-time password (OTP) keys before actual packet transmission. The OTP keys are generated in advance using a key generation unit that creates secure encryption keys, which are then stored for immediate use during packet encryption/decryption operations. This eliminates the need for time-consuming key generation during packet processing, thereby protecting packet data while maintaining read/write performance.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If all packet fields including target node are encrypted, then packet data protection is improved, but device complexity increases due to decryption requirements at each node

Engineering Contradiction:
Improvepacket data protectionVSAvoidencryption and decryption process complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies segmentation by dividing the packet into different fields with different encryption treatments. The target node field is encrypted using OTP keys to protect access patterns, while other packet fields may use different encryption approaches. This segmented approach protects sensitive information while simplifying the overall decryption process at each node, as nodes only need to decrypt the target node field using pre-shared OTP keys rather than the entire packet.

Inventive Principle:
Principle #1Segmentation

3Productivity

If OTP keys are generated in advance, then performance degradation is minimized, but key management complexity increases

Engineering Contradiction:
Improveread and write performanceVSAvoidOTP key management
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent applies self-service by implementing automated OTP key generation and management within the memory device. The key generation unit automatically creates OTP keys using internal security mechanisms, and the key storage unit automatically manages these keys for subsequent encryption/decryption operations. This self-service approach handles key management internally without requiring complex external key management infrastructure, thereby maintaining high read/write performance while managing key complexity through automation.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10862876B2Device for encrypting and/or decrypting packets and method for routing packets in memory network including the same
Publication Date: 2020.12.08 SK HYNIX INC
  • US10862876B2 patent drawing
  • US10862876B2 patent drawing
  • US10862876B2 patent drawing

AI summary

A device transmits or receives a packet in a memory network including one or more processors and/or one or more memory devices. The device includes a key storage unit configured to store a one-time password (OTP) key that is shared with a target node, an encryption unit configured to encrypt a transmission packet with the OTP key stored in the key storage unit and to transmit the encrypted transmission packet to the target node, and a decryption unit configured to decrypt a receiving packet from the target node with the OTP key stored in the key storage unit. The device is a processor or a memory device in the memory network.