Security Device Indirect NVM Access via Host Driver
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing systems lack efficient methods for secure access to external Non-Volatile Memory (NVM) devices, particularly for cryptographic co-processors acting as slaves in computing systems, which limits their ability to execute security commands effectively.
Innovation Solution
A security device and dedicated device driver configuration that mediates between the security device and external NVM, allowing indirect access through a host interface, enabling the security device to execute security commands by requesting operations from the device driver, which handles the communication with the NVM, even when the security device is a slave in the interface hierarchy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the security device directly accesses external NVM devices, then access speed and efficiency are improved, but interface complexity and cost increase
Solution Approach 1:
The patent introduces a device driver as an intermediary layer between the security device and external NVM devices. The device driver runs on the host system and mediates all communication and access requests, allowing the security device to access NVM indirectly through standardized interfaces without requiring complex direct access hardware or protocols.
2Device complexity
If the security device is configured as a slave in the interface hierarchy, then interface simplicity is improved, but direct access capability to NVM deteriorates
Solution Approach 1:
The patent enables the security device to request NVM access operations through the device driver, which then executes these requests on behalf of the security device. This self-service mechanism allows the slave-configured security device to effectively access NVM resources without requiring master interface capabilities, maintaining interface simplicity while preserving access functionality.
3Ease of manufacture
If existing NVM devices are utilized for secure storage, then cost is reduced, but security requirements may not be fully met
Solution Approach 1:
The device driver acts as a security mediator between the application program and the external NVM device. It implements security protocols, authentication mechanisms, and access control policies that ensure existing NVM devices meet required security standards. The driver can encrypt data before storage, manage cryptographic keys, and enforce access policies, thereby making conventional NVM devices suitable for secure applications without requiring specialized hardware.
Data Source
AI summary
A method in a security device that provides a security service to a host includes receiving a security command from an application program running on the host. The security command is executed by accessing a Non-Volatile Memory (NVM) device external to the security device transparently to the application program via a dedicated device driver, which runs on the host and mediates between the NVM device and the security device.