Secure Region Recovery in Electronic Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer systems often cannot directly back up high-secure level data during hibernation, leading to inconsistencies in system state recovery upon waking from hibernation.
Innovation Solution
An electronic device with a temporary memory and non-volatile memory, where a processor initializes and recovers a secure region using a higher-level secure program or decrypts encrypted data to restore the secure region, utilizing data tags or pre-encryption for backup and recovery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Use of energy by moving object
If the computer system stops operations of some modules in hibernation state to save energy, then energy consumption is reduced, but the system cannot directly back up high-secure level data causing recovery inconsistency
Solution Approach 1:
The system performs preliminary actions by creating data tags and encrypting high-secure level data before entering hibernation state. The data tags store metadata about the secure region contents, and encryption preserves data confidentiality while enabling recovery. These preliminary preparations ensure that when the system wakes from hibernation, it can reconstruct the secure region state using the stored tags and encrypted data, thus maintaining recovery consistency while keeping modules dormant during hibernation.
Solution Approach 2:
The system creates a copy of the secure region state information through data tags that store metadata about the contents and structure of the secure region. Instead of directly backing up the entire secure region, the system copies essential information (tags) that can be used to reconstruct or verify the secure region state upon recovery, enabling consistent system state restoration without requiring continuous power to maintain the original secure region.
2Reliability
If the computer system directly backs up high-secure level data, then system state recovery consistency is improved, but the system cannot maintain security and power saving benefits
Solution Approach 1:
The system segments the data backup process into two distinct parts: data tags and encrypted data. The data tags contain metadata about the secure region (such as data structure information, location pointers, and verification information), while the actual high-secure level data is stored in encrypted form. This segmentation allows the system to maintain recovery consistency through the tags while preserving security through encryption, and reduces complexity by separating the recovery mechanism from the sensitive data storage.
Solution Approach 2:
The system introduces data tags as an intermediary element that mediates between the secure region and the backup storage. Instead of directly backing up high-secure level data, the system uses tags as an intermediate representation that captures the essential state information. These tags can be stored and processed without compromising security, while still enabling complete system state recovery through the higher-level secure program that uses the tags to reconstruct the secure region.
3Reliability
If the computer system maintains secure region data in temporary memory during hibernation, then recovery consistency is improved, but energy consumption increases
Solution Approach 1:
The system performs preliminary actions by creating data tags and encrypting secure region data before hibernation. Instead of maintaining the actual secure region data in temporary memory during hibernation, the system prepares recovery information (tags) in advance. When hibernation is entered, the temporary memory can be powered down or placed in low-power state, yet the system can still recover consistently by using the pre-created tags and encrypted data stored in non-volatile memory after wake-up.
Solution Approach 2:
The system creates a copy of the secure region state information in the form of data tags that can be stored in non-volatile memory. Instead of maintaining the original secure region data in temporary memory during hibernation, the system uses these tag copies to represent and enable recovery of the secure region state. This copying approach allows the temporary memory to be powered down during hibernation while preserving recovery capability through the stored tags.
Data Source
AI summary
An electronic device includes a temporary memory, a non-volatile memory and a processor. The temporary memory includes at least one secure region. The non-volatile memory is configured to store at least one higher-level secure program and a plurality of commands. The processor is connected to the temporary memory and the non-volatile memory for executing the plurality of commands to: when receiving a wake-up command, initialize the at least one secure region; and through the at least one higher-level secure program, recover the at least one secure region, or decrypt encrypted data stored in the non-volatile memory to recover the at least one secure region. In addition, a hibernation recovery method is also disclosed herein.