Secure Memory Key Alteration Against Physical Removal
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure memory systems are vulnerable to unauthorized access when a malicious actor physically removes the memory module, as they can be easily plugged into another computer, and previous solutions fail to prevent access even if cryptographic hardware is stolen or mode control is compromised.
Innovation Solution
A secure memory apparatus that permanently alters a security key when the signal between the host memory interface hardware and the host memory controller hardware is interrupted, using a hardware interrupt detector to monitor pins and generate a new security key dynamically, ensuring that data remains encrypted and inaccessible to unauthorized actors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is saved on volatile memory modules for rapid access, then productivity is improved, but security deteriorates because data remains unencrypted and can be accessed by physically removing the memory module
Solution Approach 1:
The system performs preliminary encryption of data before it is written to the volatile memory module. The encryption key is generated and applied in advance, so that when data is stored in volatile memory for rapid access, it is already protected. This resolves the contradiction by maintaining fast access speeds while ensuring security through pre-encryption.
Solution Approach 2:
An intermediary encryption layer is introduced between the data and the volatile memory module. The encryption key acts as a mediator that protects the data without interfering with the rapid access capabilities of volatile memory. This allows the system to maintain high productivity while achieving reliable security through the intermediary encryption mechanism.
2Reliability
If cryptographic hardware accelerator is added to control access to secure partition, then security is improved, but device complexity increases
Solution Approach 1:
The encryption functionality is extracted from complex cryptographic hardware and integrated directly into the memory controller or memory module logic. This eliminates the need for separate cryptographic hardware accelerators while maintaining security. The extraction principle resolves the contradiction by removing the additional hardware complexity while preserving the essential encryption capability.
Solution Approach 2:
The encryption functions are merged with the existing memory control logic rather than being implemented as separate cryptographic hardware components. By combining the encryption capability with the memory controller, the system achieves secure access control without increasing overall device complexity. This merging approach maintains security while simplifying the system architecture.
3Reliability
If security key is permanently altered upon interruption detection, then security is improved, but loss of information occurs when legitimate access is interrupted
Solution Approach 1:
The system implements feedback mechanisms that monitor the operational context before permanently altering the security key. By continuously monitoring signals and detecting the nature of interruptions, the system can distinguish between malicious removal and legitimate shutdown scenarios. This feedback approach resolves the contradiction by maintaining security against theft while preserving data accessibility during normal operations.
Solution Approach 2:
The security key alteration mechanism is made dynamic rather than static. The system dynamically evaluates the interruption context and only permanently alters the key when malicious activity is detected. This dynamic approach allows the system to maintain security while avoiding unnecessary data loss during legitimate access interruptions, resolving the contradiction between security and information preservation.
Data Source
AI summary
A secure memory that couples to a host memory controller via a host memory interface remains secure by permanently altering a security key when a hardware interrupt detector detects that a signal between the host memory interface hardware and the host memory controller hardware is interrupted. Such an interruption could be, for example, a blackout, a brownout, or a person decoupling any portion of the host memory interface, even pins that are normally unused by a standard memory module, such as a DRAM, MRAM, or SSD module.