Secure Memory Access Controller for Hacking Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data stored in memory systems, particularly in external DRAM and mobile devices, is vulnerable to hacking attacks, as existing technologies lack effective mechanisms to securely protect and authenticate sensitive information.
Innovation Solution
A secure memory access unit (SMAU) is introduced, which resides between logical and physical memory, employing encryption, digital signatures, data scrambling, and fault injection to protect secure data. It partitions memory into secure and non-secure regions, uses a crypto block for encryption and authentication, and a scrambler to randomize data distribution, making it difficult for attackers to correlate memory locations and access secure data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Quantity of substance
If data is stored in external DRAM for increased storage capacity, then storage capacity is improved, but security against hacking attacks deteriorates
Solution Approach 1:
The memory system is segmented into secure and non-secure regions. The secure region contains encrypted and authenticated data, while the non-secure region stores other data. This segmentation allows the system to maintain large storage capacity while protecting sensitive data through cryptographic operations and access control mechanisms.
Solution Approach 2:
A secure memory access unit (SMAU) is introduced as an intermediary between the processor and external DRAM. The SMAU performs encryption, authentication, and access control operations, acting as a security barrier that protects stored data from hacking attacks while allowing legitimate access to both secure and non-secure regions.
2Object-affected harmful factors
If memory is partitioned into secure and non-secure regions with encryption and authentication, then security is improved, but device complexity increases
Solution Approach 1:
The secure memory access unit (SMAU) is designed as a multi-functional security module that integrates encryption, authentication, memory management, and access control operations. By consolidating these security functions into a single unit, the system achieves strong protection against hacking while managing complexity through functional integration rather than separate components.
3Object-affected harmful factors
If data is scrambled and distributed across memory locations, then security against correlation attacks is improved, but access time increases
Solution Approach 1:
Data is pre-scrambled and distributed to different memory locations before storage using a deterministic algorithm based on address bits. This preliminary scrambling action ensures that even if an attacker gains physical access to the memory, they cannot correlate memory locations with original data positions. The scrambling is performed once during data preparation, and the same algorithm is used during retrieval to restore the original order, minimizing access time overhead.
Data Source
AI summary
A memory access circuit and a corresponding method are provided. The memory access circuit includes a crypto block in communication with a memory that encrypts data of a data block on a block basis. The memory access circuit also includes a fault injection block configured to inject faults to the data in the data block. The memory access circuit further includes a data scrambler and an address scrambler. The data scrambler is configured to scramble data in the memory by shuffling data bits within the data block in a plurality of rounds and mash the shuffled data bits with random data. The address scrambler is configured to distribute the scrambled data across the memory. A memory system including the memory access circuit is also disclosed to implement the corresponding method.