RAM Data Encryption via Dynamic Key Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data stored in RAM remains accessible for a period after power is removed, posing a security risk due to potential unauthorized access, and existing encryption methods either compromise access performance or require significant storage resources.
Innovation Solution
A data encryption method that updates encryption information based on write requests, generating different encryption values for the same input data at different time points, minimizing access performance degradation and enhancing security without needing large storage resources.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted and written to RAM, then security of stored data is improved, but access performance deteriorates
Solution Approach 1:
The patent divides data storage into multiple memory blocks and applies different encryption keys to different blocks. This segmentation allows the system to encrypt data for security while maintaining access performance by enabling parallel processing and selective decryption of only the required blocks rather than the entire memory space.
Solution Approach 2:
The patent implements location-dependent encryption where the encryption key is determined by the memory address or block location. This local quality approach ensures that each memory location has its own encryption characteristics, providing security while allowing the system to optimize access performance by pre-loading or caching decryption keys for frequently accessed locations.
2Reliability
If encryption is applied to protect data in RAM, then security against unauthorized access is improved, but device complexity increases
Solution Approach 1:
The patent employs self-service encryption where the memory system automatically manages encryption and decryption operations without requiring external intervention. The encryption keys are derived from memory addresses or block locations, allowing the system to autonomously encrypt data when written and decrypt it when read, thereby improving security while minimizing the increase in device complexity through automated rather than manual management.
3Reliability
If data is encrypted in RAM, then security level is improved, but access speed deteriorates
Solution Approach 1:
The patent implements preliminary action by pre-computing and caching decryption keys in association with memory blocks before data access occurs. When data needs to be accessed, the system can quickly retrieve the pre-computed decryption key corresponding to the memory location, thereby maintaining high security through encryption while minimizing the impact on access speed by avoiding time-consuming key generation during the access operation.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
An electronic apparatus that writes encrypted data includes a first memory; a second memory configured to update encryption information including address information indicating a write location on the first memory and a parameter for use in encryption when data is encrypted and written to the first memory, and store the updated encryption information; an encryption and decryption unit configured to encrypt the data, based on the encryption information; and a processor configured to control the encrypted data to be written to the first memory, thereby increasing a safety level.