Self-Encrypting Storage Link Control for Host-Independent Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing nonvolatile memory devices lack the ability to operate independently of host devices that do not support self-encrypting drive (SED) functionality, leading to security vulnerabilities and limited compatibility with various host systems.
Innovation Solution
A nonvolatile memory system with a memory controller that includes a link controller to temporarily deactivate the data line while supplying power, a user verification circuit to authenticate users, and a relink trigger circuit to manage reconnection, enabling secure and independent operation with host devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the storage device operates as a passive device according to host commands, then compatibility with existing host devices is maintained, but the storage device cannot operate independently and security functions are compromised when host does not support SED
Solution Approach 1:
The storage device performs self-encryption and self-decryption operations independently without requiring host device support for SED functionality. The memory controller autonomously manages encryption keys and data protection, enabling the device to operate independently while maintaining security functions across diverse host environments
Solution Approach 2:
The storage device is designed to function universally with various host devices whether or not they support SED. The memory controller implements universal interfaces and protocols that work with both SED-capable and non-SED host devices, providing adaptability while maintaining independent operation capability
2Productivity
If the data line remains continuously active, then data transmission is uninterrupted, but security protection is weakened as the device cannot independently verify user authentication
Solution Approach 1:
The link controller temporarily deactivates the data line in periodic intervals to enable user verification. This periodic disactivation allows the memory controller to authenticate users and manage security states without permanently interrupting data transmission, balancing continuous productivity with security requirements
Solution Approach 2:
The system implements feedback mechanisms where the memory controller monitors authentication states and controls data line activation accordingly. The relink trigger circuit provides feedback about verification results to control data line reactivation, ensuring security is maintained while allowing continuous operation when authenticated
3Reliability
If the data line is temporarily deactivated for user verification, then security authentication is enabled, but data transmission is interrupted during verification
Solution Approach 1:
The system performs preliminary authentication actions before requiring data line deactivation. User verification is initiated in advance through the memory controller, and authentication decisions are made before the data line needs to be deactivated for actual data transmission, minimizing the interruption time
Solution Approach 2:
The memory controller maintains continuous monitoring and authentication readiness even when the data line is deactivated. Authentication processes continue in the background, and the data line is reactivated as soon as verification is complete, ensuring minimal loss of useful data transmission time
Data Source
Figure 1A
Figure 1B
Figure 2
AI summary
A nonvolatile memory system is disclosed. The nonvolatile memory system includes a host device and a storage device connected to the host device through a physical cable including a power line and a data line. The storage device includes: a nonvolatile memory; a link controller configured to temporarily deactivate the data line while supplying power from the host device through the power line; and a memory controller including a user verification circuit configured to authenticate a user of the storage device and change a state of the memory controller according to a verification result, a relink trigger circuit configured to control the link controller based on the state change of the memory controller, and a data processing circuit configured to encrypt and decrypt data.