Storage Device Parallel Booting Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing storage devices face a trade-off between operating speed and security, as implementing security measures often hinders booting speed.
Innovation Solution
A storage device with a nonvolatile memory device and a memory controller having multiple cores, where the first core performs authentication and generates certificates, and the second core loads booting data, enabling parallel execution of security processes and booting operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security measures (authentication, measurement, attestation) are implemented in the storage device, then security is improved, but operating speed is hindered
Solution Approach 1:
The memory controller is divided into multiple cores: a first core dedicated to security functions (authentication, measurement, attestation) and a second core dedicated to booting operations. This segmentation allows security processes and booting operations to execute in parallel, resolving the contradiction between security and operating speed by eliminating sequential execution bottlenecks.
Solution Approach 2:
The patent transitions from single-threaded sequential execution to multi-threaded parallel execution by introducing multiple cores. This dimensional change in processing architecture enables security measures and booting operations to occur simultaneously in different processing threads, thereby improving operating speed without compromising security.
2Reliability
If authentication and certificate generation are performed sequentially before booting, then security is ensured, but booting speed decreases
Solution Approach 1:
The booting process is segmented into independent parallel tasks: the first core handles authentication and certificate generation while the second core simultaneously performs booting operations. This segmentation eliminates the sequential dependency that previously caused booting time delays, while maintaining security through proper authentication procedures.
Solution Approach 2:
The first core performs authentication and generates certificates in advance during the initialization phase, before the second core begins booting operations. This preliminary action ensures security requirements are met beforehand, allowing the booting process to proceed without waiting for security checks, thereby reducing overall booting time.
Data Source
AI summary
Disclosed is a storage device which includes a nonvolatile memory device that stores booting data and user data, and a memory controller that includes a first core, a second core, and third cores. In an initialization operation, the first core performs first authentication on at least a first part of the booting data. In response to that the first authentication succeeds, the first core generates a device identifier, and the second core loads the first part of the booting data and performs first booting. The first core performs second authentication on at least a second part of the booting data. In response to that the second authentication succeeds, the first core generates a first certificate and a second certificate, and the second core loads the second part of the booting data and performs second booting.