Secure Device Volatile Memory Segmentation for Power Reduction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Secure devices in financial terminals face significant power consumption issues due to the need to constantly power volatile memory and tamper detection circuits, leading to rapid battery depletion, especially during storage and transportation, where harsh conditions accelerate battery drain and limit battery life to a few years, necessitating a solution to extend battery life.
Innovation Solution
The secure device employs a segmented volatile memory approach, where sensitive data is encrypted and backed up in non-volatile memory, with only a small retained volatile memory area powered by the battery in transport power mode, reducing overall power consumption and extending battery life by decoupling the battery from non-retained volatile memory.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the battery-backed secure memory is constantly powered to preserve cryptographic keys, then data security is maintained, but power consumption increases rapidly depleting the battery
Solution Approach 1:
The volatile memory is divided into two segments: a first portion that remains powered to store cryptographic keys, and a second portion that can be powered down to store sensitive data. This segmentation allows the system to maintain security through key preservation while reducing overall power consumption by disabling the larger data storage portion when not in use.
Solution Approach 2:
Sensitive data is encrypted using the cryptographic keys before being stored in the second portion of volatile memory. This preliminary encryption action ensures that even if the second portion is powered down or compromised, the actual sensitive data remains protected, allowing the system to power down this portion without compromising security.
2Duration of action of moving object
If the battery capacity is increased to extend battery life during storage and transportation, then operational duration is improved, but device size and cost increase
Solution Approach 1:
The power supply configuration is made dynamic rather than static. The first portion of volatile memory remains powered throughout storage and transportation to maintain cryptographic keys, while the second portion is powered down during these periods and only activated during active use. This dynamic approach extends battery life without requiring a larger battery capacity.
3Use of energy by moving object
If the entire volatile memory is powered down to save battery power, then power consumption is reduced, but cryptographic keys are lost requiring device return to manufacturer
Solution Approach 1:
The volatile memory is segmented into a first portion for cryptographic keys and a second portion for sensitive data. This segmentation enables selective power management where the first portion remains powered to preserve keys while the second portion can be powered down, avoiding the need to return the device to the manufacturer for rework.
Data Source
AI summary
The invention relates to a secure device, and more particularly, to systems, devices and methods of reducing power consumption of the secure device by limiting the amount of secure volatile memory that needs to be supplied by a battery. In a transport power mode, a sensitive data originally stored in a volatile memory is backed up in an encrypted format to a non-volatile memory, such that none or only a small area of the secure volatile memory has to be retained and powered by the battery for preserving cryptographic keys that are used to backup and recover the sensitive data. This secure device is applied in high security applications such as secure financial terminals.