Secure Memory Management via Dedicated Access Controller
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data processing systems face challenges in securely loading data or applications into volatile memory and isolating concurrent applications due to the complexity and cost of implementing additional security functions within the CPU, making them vulnerable to malicious attacks and malware.
Innovation Solution
A system comprising a memory access controller and a secure memory management module, which acts as a firewall between the processor and memory module, uses access conditions and authentication data to securely load digital information from a storage device into a memory module, ensuring that only authorized access is granted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If additional security functions are implemented within the CPU, then system security is improved, but device complexity and cost increase significantly
Solution Approach 1:
The patent extracts security functions from the CPU by introducing a dedicated Memory Access Controller (MAC) that handles all memory access security decisions. The MAC includes an authentication unit that verifies access rights and a protection unit that enforces access conditions, separating security functionality from the main processor to reduce CPU complexity while maintaining security.
Solution Approach 2:
The Memory Access Controller acts as an intermediary between the CPU and memory. It receives memory access requests from the CPU, authenticates the access rights using authentication data stored in memory, and only allows access if authentication succeeds. This mediator approach protects memory without requiring security functions within the CPU itself.
2Reliability
If additional security functions are implemented within the CPU, then system security is improved, but on-chip real estate and cost increase
Solution Approach 1:
The security functions are extracted from the CPU and implemented as a separate Memory Access Controller that can be integrated with memory rather than requiring additional CPU area. The authentication unit and protection unit are consolidated in the MAC, eliminating the need for extensive on-chip real estate within the CPU while maintaining comprehensive security.
3Reliability
If additional security functions are implemented within the CPU, then system security is improved, but computing overhead increases and operational speed decreases
Solution Approach 1:
The Memory Access Controller serves as an efficient intermediary that handles security checks in parallel with memory operations. The authentication unit verifies access rights using pre-stored authentication data, and the protection unit enforces access conditions without blocking the main CPU pipeline, thereby maintaining high computing speed while providing robust security.
Data Source
AI summary
The present invention describes a system and a method for securely loading digital information from a storage device into a memory module in a data processing system, said data processing system comprising at least one storage device, one memory module and at least one processor, said data processing system further comprising a memory access controller module connected between the processor and the memory module, and a secure memory management module connected to the processor, the memory module, the storage device and the memory access controller. Requests by the processor for data are passed to the secure memory management module, which loads the data from the storage device to the memory module and configures the memory access controller such that the processor will have access to the data.