Secure Memory Sub-System Data Communication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

High-density non-volatile memory technologies pose security challenges as they persistently store data, making them vulnerable to attacks, and traditional encryption methods like AES are computationally expensive, impacting performance.

Innovation Solution

Implementing secure data communication using asymmetric public and private keys with a continuously changing symmetric key to encrypt data between a host system and a memory sub-system, preventing unauthorized access and maintaining performance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional encryption methods like AES are used to encrypt data in high-density non-volatile memory, then data security is improved, but computational expense increases and performance deteriorates

Engineering Contradiction:

Improvedata securityVSAvoidperformance

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The encryption system is segmented into two distinct parts: asymmetric encryption (using public/private key pairs) for secure key exchange and authentication, and symmetric encryption (using AES with changing keys) for actual data encryption. This segmentation allows each part to optimize for its specific function, reducing overall computational overhead while maintaining security

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Asymmetric encryption is performed in advance during the key exchange phase to establish secure communication channels and authenticate devices. This preliminary action sets up the symmetric encryption keys before bulk data transfer occurs, avoiding the need to use computationally expensive asymmetric encryption for every data operation

Inventive Principle:

Principle #10Preliminary action

2Quantity of substance

If data is persistently stored in high-density non-volatile memory, then storage capacity is improved, but vulnerability to hardware-based attacks increases

Engineering Contradiction:

Improvestorage capacityVSAvoidvulnerability to attacks

Core Design Contradiction:

Quantity of substanceVSObject-affected harmful factors

Solution Approach 1:

The system applies preliminary anti-action by implementing asymmetric encryption and device authentication before data is written to persistent storage. Public keys are exchanged and verified in advance, and symmetric encryption keys are established through secure protocols, creating defensive barriers against potential hardware attacks before they can occur

Inventive Principle:

Principle #9Preliminary anti-action

Solution Approach 2:

Symmetric encryption keys act as intermediaries between the asymmetric encryption system and the actual data stored in memory. These keys are frequently changed and used only for temporary data encryption, creating a protective layer that prevents direct access to persistent storage even if the memory is compromised

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11748273B2Secure data communication with memory sub-system

Publication Date: 2023.09.05 MICRON TECHNOLOGY INC

AI summary

Various embodiments described herein provide for secure data communication between a host system and a memory sub-system. For example, some embodiments use a salt value, symmetric encryption, and asymmetric encryption to facilitate secure data communication between the host system and the memory sub-system.