Secure Memory Verification for Counterfeit Host Device Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Counterfeiting of host devices, such as mobile phones and IoT devices, is difficult to detect and prevent, leading to inferior products being sold as authentic, which harms manufacturers and consumers.
Innovation Solution
Incorporating a secure memory system that injects unique and secret data during fabrication, generating trace data used for verification through a key management server and subscription service, ensuring only authentic devices can access subscription services.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional memory systems are used without secure verification mechanisms, then device complexity and manufacturing cost are reduced, but security against counterfeiting is insufficient
Solution Approach 1:
The patent applies preliminary action by injecting unique secret data into the memory system during the fabrication process, before the device reaches the consumer. This pre-established secret data serves as an inherent authentication mechanism that cannot be replicated by counterfeiters, thereby providing security without requiring complex verification systems to be added later.
Solution Approach 2:
The patent introduces a key management server as an intermediary that facilitates authentication between the host device and subscription services. The server stores and verifies trace data without requiring complex verification logic to be embedded in the memory system itself, thus maintaining low device complexity while achieving high reliability through the intermediary verification process.
2Difficulty of detecting and measuring
If secure memory system programming is implemented for host device verification, then counterfeiting detection capability is improved, but manufacturing process complexity increases
Solution Approach 1:
The memory system performs self-service by automatically generating and storing unique secret data during fabrication without requiring external intervention or complex manual processes. The system uses its own internal resources to create the authentication credentials, simplifying the manufacturing process while enabling sophisticated counterfeiting detection.
Solution Approach 2:
The patent changes the parameter of data injection timing from post-manufacturing to during fabrication. By injecting secret data at the fabrication stage rather than later, the process becomes integrated into existing manufacturing workflows, reducing overall complexity while enabling robust authentication capabilities.
3Reliability
If unique secret data is injected during fabrication, then authentication security is enhanced, but data management complexity increases
Solution Approach 1:
The patent extracts the data management complexity from the host device and memory system by storing trace data externally in a key management server. The memory system only retains minimal secret data for local verification, while the server handles the complex tasks of data storage, management, and verification, thus enhancing security without burdening the device with complex data management infrastructure.
Data Source
AI summary
Various examples are directed to a system for configuring a host device. The host device may comprise a memory system and may be programmed to receive subscriber software for interfacing the host device to a subscription service. The host device may also be programmed to receive from a first assembler secure appliance, first trace data based at least in part on the subscriber software and generate trace-derived data using the first trace data and the memory system identification key. The host device may also be programmed to send a subscription request to a subscription server associated with the subscription service. The subscription request may comprise the trace-derived data. The host device may also be programmed to receive, from the subscription server, subscription data for accessing the subscription service.