Storage Encryption Partitioning for Low-PPA Data Confidentiality

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing encryption technologies in computing systems require separate encryption modules, which affect the power-performance-area (PPA) of the system, and do not adequately protect data confidentiality outside the link layer.

Innovation Solution

A storage system that encrypts and decrypts data without a separate encryption module by separating and encrypting different parts of a message, storing one part in an encrypted state, and managing encryption information on the transmission side to prevent leakage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a separate encryption module is introduced to protect data confidentiality, then data security is improved, but power-performance-area (PPA) is worsened

Engineering Contradiction:

Improvedata confidentialityVSAvoidpower consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent merges the encryption function into the existing IDE engine that is already present for link-layer protection. The IDE engine is enhanced to perform both link-layer message authentication and upper-layer data encryption, eliminating the need for a separate encryption module and reducing PPA overhead while maintaining data confidentiality

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The IDE engine is designed to serve multiple purposes: it provides link-layer integrity verification and simultaneously performs upper-layer data encryption. This multi-functional approach allows a single component to address both link security and data confidentiality requirements, avoiding the PPA penalty of adding dedicated encryption hardware

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If a separate encryption module is introduced to protect data confidentiality, then data security is improved, but system area is worsened

Engineering Contradiction:

Improvedata confidentialityVSAvoidchip area

Core Design Contradiction:

ReliabilityVSArea of stationary object

Solution Approach 1:

The encryption functionality is combined with the existing IDE engine structure, reusing its logic units and control mechanisms. This integration avoids duplicating encryption infrastructure and minimizes the additional area required while achieving robust data confidentiality protection

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The IDE engine is extended to handle both link-layer authentication and upper-layer encryption tasks. By making the IDE engine universal, the patent eliminates the need for separate encryption circuitry, thereby reducing the overall chip area while maintaining comprehensive security

Inventive Principle:

Principle #6Universality (Multi-functionality)

3Reliability

If a separate encryption module is introduced to protect data confidentiality, then data security is improved, but system power consumption is worsened

Engineering Contradiction:

Improvedata confidentialityVSAvoidsystem power consumption

Core Design Contradiction:

ReliabilityVSUse of energy by stationary object

Solution Approach 1:

The encryption operations are merged into the existing IDE engine workflow, sharing computational resources and control logic. This consolidation reduces redundant processing and lowers the overall power consumption compared to having a separate encryption module operating independently

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The IDE engine performs multiple security functions including link authentication and data encryption using the same hardware resources. This multi-functional design eliminates the need for parallel encryption operations, thereby reducing system power consumption while maintaining data confidentiality

Inventive Principle:

Principle #6Universality (Multi-functionality)

4Reliability

If encryption is applied to all data including data slots, then data confidentiality is improved, but processing complexity is worsened

Engineering Contradiction:

Improvedata confidentialityVSAvoidprocessing complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The message structure is segmented into different parts (header, data slots, payload), and encryption is selectively applied based on the sensitivity and requirements of each segment. This selective encryption approach reduces processing complexity compared to encrypting all data uniformly while still providing necessary confidentiality protection

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS12524167B2Storage system improving encryption integrity of data and operating method thereof

Publication Date: 2026.01.13 SK HYNIX INC

AI summary

A storage system may include a first device including a transmission circuit configured to generate encrypted first information by encrypting first information of a transmission target message, to generate encrypted second information by encrypting second information of the transmission target message, and to transmit the encrypted first information and the encrypted second information, and a second device including a reception circuit configured to decrypt the encrypted first information by receiving the encrypted first information and the encrypted second information from the first device and to store the first information that has been decrypted and the encrypted second information in a memory device.