OTP Memory Cryptographic Kill Switch for DRAM Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies fail to effectively prevent unauthorized access to sensitive data stored in dynamic random-access memory (DRAM) in automotive applications, particularly when the DRAM is removed from its circuit board and relocated to a malicious board.
Innovation Solution
The implementation of One-Time Programmable (OTP) memory added to both the memory device and the processing device, which stores encryption keys and uses encrypted messages as a heartbeat to verify the connection between the two devices, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If DRAM is removed from circuit board and relocated to malicious board, then unauthorized access to sensitive data is enabled, but security protection is compromised
Solution Approach 1:
The patent applies preliminary anti-action by implementing authentication mechanisms that detect unauthorized removal attempts before data access can occur. The system preemptively verifies the DRAM's connection status and authorized processing device presence, and triggers data destruction or access blocking when unauthorized removal is detected, thus preventing the security breach before it can happen.
Solution Approach 2:
The patent uses an intermediary authentication mechanism between the DRAM and the processing device. This intermediary layer verifies connection authenticity and device authorization, acting as a mediator that allows legitimate operations while blocking unauthorized access attempts. The authentication system serves as the intermediary that enables safe removability while maintaining security.
2Reliability
If authentication mechanisms are implemented to prevent unauthorized access, then security is improved, but device complexity increases
Solution Approach 1:
The patent applies segmentation by dividing the authentication system into distinct functional modules: connection status detection mechanisms, authentication verification components, and data protection execution units. This segmentation allows each component to perform its specific function independently, simplifying the overall system design and making the complex authentication process more manageable and implementable.
Data Source
AI summary
A one-time programmable (OTP) memory is included in both a memory device and a processing device. The OTP memories store encryption keys and the encryption and decryption of messages between the two devices are used as a heartbeat to determine that the memory device has not been separated from the processing device and, in some instances, connected to a malicious processing device.