Storage Controller Signed Access Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Managed storage modules, such as managed NAND storage modules, face security vulnerabilities as they store sensitive data like OS code and firmware, which can be compromised by malware if not properly protected against unauthorized access or modification.

Innovation Solution

Implementing a memory device with a storage controller that enables signed access to specific regions of the storage, using configurable settings and signature mechanisms to authenticate and protect data, ensuring that only trusted entities can modify or access sensitive information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If signed access is implemented for authenticated reads, then data integrity and security are improved, but device complexity increases

Engineering Contradiction:

Improvedata integrityVSAvoidauthentication mechanism complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

A signature mechanism acts as an intermediary between the storage controller and host, providing authenticated data transfer without requiring complex authentication protocols at the host level. The signature mechanism generates cryptographic signatures for data blocks, enabling verification of data integrity and authenticity while maintaining a relatively simple interface for the host system.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

Data is signed in advance during the write operation or when stored in the storage device, so that authentication is already performed before data retrieval. This preliminary signing eliminates the need for complex real-time authentication during read operations, reducing device complexity while maintaining security and integrity.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If configurable settings enable signed access, then security against unauthorized modification is improved, but ease of operation deteriorates

Engineering Contradiction:

Improveprotection against unauthorized accessVSAvoidconfiguration complexity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The storage device autonomously manages the signed access configuration through self-service mechanisms. The device automatically generates and manages cryptographic keys, signs data blocks, and verifies signatures without requiring manual configuration or intervention from the host system. This automation maintains strong security while simplifying operation for the user.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The signature mechanism serves as an intermediary that automatically handles authentication and authorization, eliminating the need for complex configuration settings. The system transparently manages security protocols, key pairs, and signature verification, providing protection against unauthorized access while maintaining ease of operation through automated processes.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS10372629B2Control for authenticated accesses to a memory device

Publication Date: 2019.08.06 MEMORY TECHNOLOGIES LLC

AI summary

The embodiments of the invention describe settings, commands, command signals, flags, attributes, parameters or the like for signed access prior to allowing data to be written to (e.g., a write access), read from (e.g., a read access) or erased from (e.g., an erase access) protected areas of a memory device (e.g., a region, logical unit, or a portion of memory in the storage module).