RPMB Command PIU Authentication for Replay-Protected Storage Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage devices lack effective security measures to prevent unauthorized access and replay attacks, particularly in nonvolatile memory devices.
Innovation Solution
Incorporation of a replay protected memory block (RPMB) with authentication protocols, including a memory controller and host device components to manage secure access, using command protocol information units (PIUs) with additional header segments for enhanced security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a replay protected memory block (RPMB) with authentication protocols is incorporated, then security against unauthorized access and replay attacks is improved, but device complexity increases
Solution Approach 1:
The storage device is segmented into different memory blocks with distinct security characteristics. The RPMB is separated from regular memory blocks, allowing authentication-based access control. This segmentation enables the system to provide enhanced security for sensitive data while maintaining simpler access for other data, thus managing the complexity through structured organization.
Solution Approach 2:
An authentication mechanism acts as an intermediary between the host device and the RPMB. The memory controller verifies authentication information from the host before allowing access to the RPMB. This intermediary layer manages the security complexity by centralizing the authentication logic in the memory controller rather than requiring complex security hardware in the host.
2Reliability
If authentication protocols and command PIUs with extra header segments are implemented, then data integrity is improved, but ease of operation deteriorates
Solution Approach 1:
The authentication information and command protocol information are merged into a single integrated command structure. The extra header segment in the command PIU combines authentication data with command parameters, allowing the host to perform authentication and data access operations through a unified interface. This merging simplifies the operational workflow compared to separate authentication and data access steps.
Solution Approach 2:
The command PIU structure serves multiple functions: it carries both authentication information and command protocol data. The extra header segment can be configured for different authentication scenarios, making the same command structure universally applicable for both authentication and data access operations. This multi-functionality reduces the operational burden by eliminating the need for separate authentication commands.
Data Source
AI summary
Storage devices, host devices and electronic devices are disclosed. In an embodiment of the disclosed technology, an electronic device providing an improved security function may include a storage device including a replay protected memory block (RPMB), and a host device configured to provide a command protocol information unit (PIU) instructing the storage device to access the RPMB. The command PIU may include a basic header segment including a total extra header segment length field having a value other than 0 and an extra header segment including a host RPMB message.