RPMB Memory Controller Handshake for Replay-Protected Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage devices lack effective mechanisms to protect against replay attacks on sensitive data stored in replay protected memory blocks (RPMBs) and ensure secure, efficient operations.
Innovation Solution
Incorporation of a replay protected memory block (RPMB) with an RPMB engine that uses authentication keys and hash algorithms to secure data access, allowing authenticated operations and providing result data upon request, and optimizing data access through streamlined handshake processes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication operations are performed for every write request to RPMB, then security against replay attacks is improved, but operational speed deteriorates
Solution Approach 1:
The patent implements preliminary authentication by establishing a trusted relationship between the host and storage device before RPMB operations. The authentication key is programmed in advance during manufacturing or initialization, and the host device stores authentication information beforehand. This allows the system to verify legitimacy quickly during operations without performing complex real-time authentication, thus maintaining security while improving operational speed.
2Reliability
If complex authentication mechanisms are implemented in RPMB engine, then protection against replay attacks is improved, but device complexity increases
Solution Approach 1:
The patent extracts the complex authentication logic from the RPMB engine itself and places it in the host device. The RPMB engine retains only essential functions for data storage and basic verification, while the host device performs the heavy lifting of authentication using stored credentials. This separation reduces the complexity burden on the storage device while maintaining robust security through the host's authentication capabilities.
3Reliability
If multiple handshake processes are used for data access, then security is improved, but access time increases
Solution Approach 1:
The patent performs preliminary handshaking and authentication during system initialization or before first use. Once authenticated, the host and storage device maintain an active trusted session that allows subsequent RPMB operations to proceed with reduced verification steps. This preliminary action establishes security credentials in advance, enabling faster access times for legitimate operations while maintaining security through the pre-established trusted relationship.
Data Source
AI summary
Provided herein may be a storage device and a method of operating the same. The method of operating a storage device including a replay protected memory block (RPMB) may include receiving a write request for the RPMB from an external host, selectively storing data in the RPMB based on an authentication operation, receiving a read request from the external host, and providing result data to the external host in response to the read request, wherein the read request includes a message indicating that a read command to be subsequently received from the external host is a command related to the result data.