Solid-State Storage Restricted Memory Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional solid-state storage subsystems rely on user identity and access credentials for access control, which can be compromised, allowing unauthorized use and access to sensitive information.
Innovation Solution
Implementing a restricted memory area accessible only via non-standard commands, storing unique identifiers that control access to the main memory area, and using host software to verify these identifiers for secure access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional access control methods using identification information and passwords are used, then access to the memory subsystem can be restricted to authorized users, but authorized users can still use the software in unauthorized ways and access codes can be compromised
Solution Approach 1:
The memory subsystem is divided into a main memory area accessible via standard commands and a restricted memory area accessible only via non-standard commands. This segmentation isolates the access control logic and identification data in the restricted area, preventing unauthorized access even if the main memory is compromised.
Solution Approach 2:
A host software component acts as an intermediary between the user and the memory subsystem. This component retrieves identification information from the restricted memory area using non-standard commands and enforces access control policies, adding a layer of security that prevents direct access to the subsystem's authentication mechanisms.
2Reliability
If a restricted memory area with non-standard commands is implemented, then access control reliability is improved, but device complexity increases
Solution Approach 1:
The restricted memory area uses the same physical memory structure as the main memory area, but accesses are controlled through command differentiation. The subsystem maintains universal compatibility with standard memory commands while adding restricted access capabilities through non-standard commands, avoiding the need for separate physical security modules.
3Object-affected harmful factors
If unique identifiers are stored in the restricted memory area to control access, then unauthorized access is prevented, but the system requires special configuration and verification processes
Solution Approach 1:
The host software component is pre-configured with the expected identification information or verification criteria. Before accessing the memory subsystem, the host software automatically retrieves the identification data from the restricted memory area and performs verification, eliminating the need for manual configuration or user intervention during operation.
Data Source
AI summary
A solid-state storage subsystem, such as a non-volatile memory card or drive, includes a main memory area that is accessible via standard memory access commands (such as ATA commands), and a restricted memory area that is accessible only via one or more non-standard commands. The restricted memory area stores information used to control access to, and/or use of, information stored in the main memory area. As one example, the restricted area may store one or more identifiers, such as a unique subsystem identifier, needed to decrypt an executable or data file stored in the main memory area. A host software component is configured to retrieve the information from the subsystem's restricted memory area, and to use the information to control access to and/or use of the information in the main memory area.