Semiconductor Memory with PUF-Keyed ECC/MAC Authentication

Solution Overview

Problem

Semiconductor memory devices face security threats from hacking methods like row-hammering, RAM-Bleed, and cold boot attacks, compromising data integrity and reliability.

Innovation Solution

A semiconductor memory device incorporating a physical unclonable function (PUF) to generate a message authentication code (MAC) using an error correction code (ECC) circuit, which switches between ECC and MAC modes to ensure data integrity by generating a security key and authenticating data validity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional memory operations are used without additional security circuits, then device complexity is low and manufacturing is easy, but security against hacking attacks is insufficient

Engineering Contradiction:

Improvedata securityVSAvoidcircuit complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The ECC circuit is designed to perform dual functions: traditional error correction and message authentication code generation. By configuring the ECC circuit to operate in different modes (error correction mode and MAC generation mode), the patent eliminates the need for a separate dedicated security circuit, thereby enhancing data security while minimizing additional device complexity

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent combines the security function (MAC generation) with the existing ECC circuit. The ECC circuit, which already processes data in the memory system, is merged with security operations by using the same hardware resources to generate both error correction codes and authentication codes, reducing overall system complexity

Inventive Principle:

Principle #5Merging (Combining)

2Reliability

If separate security circuits are added for MAC generation, then data authentication capability is improved, but device complexity and manufacturing difficulty increase

Engineering Contradiction:

Improvedata authenticationVSAvoidmanufacturing ease

Core Design Contradiction:

ReliabilityVSEase of manufacture

Solution Approach 1:

The ECC circuit is designed to perform dual functions: traditional error correction and message authentication code generation. By configuring the ECC circuit to operate in different modes (error correction mode and MAC generation mode), the patent eliminates the need for a separate dedicated security circuit, thereby enhancing data security while minimizing additional device complexity

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent combines the security function (MAC generation) with the existing ECC circuit. The ECC circuit, which already processes data in the memory system, is merged with security operations by using the same hardware resources to generate both error correction codes and authentication codes, reducing overall system complexity

Inventive Principle:

Principle #5Merging (Combining)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Enhances data reliability by detecting and preventing tampering, ensuring data integrity through real-time authentication and enabling recovery from security attacks.

Implementation Method 1

generating a physical unclonable function (PUF) source signal

Methodology Applied

Scientific EffectPhysical unclonable function:

Implementation Method 2

an error correction code (ECC) circuit configured to generate parity of data written to the memory core

Methodology Applied

Scientific EffectError correction code:

Data Source

PatentUS12462021B2Semiconductor memory device and method for generating message authentication code thereof

Publication Date: 2025.11.04 SAMSUNG ELECTRONICS CO LTD

AI summary

Disclosed is a semiconductor memory device comprising a memory core including a plurality of random-access memory cells, an error correction code (ECC) circuit configured to generate parity of data written to the memory core, and a message authentication code (MAC) control circuit configured to generate a security key based on a physical unclonable function (PUF) source signal in response to a message authentication code generation command or detection of a hacking or security attack, and configured to control the ECC circuit to generate a MAC on target data using the security key, wherein the ECC circuit operates in one of an ECC mode for generating an ECC parity and a MAC mode for generating the MAC under the control of the MAC control circuit.