Tamper-Protected Memory Key Construction via Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing devices with tamper-protection barriers remain vulnerable to persistent attackers who can access secrets with sufficient time and resources, despite the use of tamper-protection mechanisms.
Innovation Solution
A device and method for securely storing data using a tamper-protection barrier that incorporates a security processor to construct and manage encryption keys, combining random or pseudo-random data from multiple memory devices using logical, mathematical, or string functions, and destroying the keys upon penetration or after use to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a tamper-protection barrier is used to store secrets, then security against unauthorized access is improved, but persistent attackers with sufficient time and resources can still access the secret through physical probing of memory devices
Solution Approach 1:
The encryption key is divided into multiple partial keys stored in separate memory devices within the tamper-protection barrier. Each partial key alone is insufficient to reconstruct the full encryption key, providing security against physical probing attacks.
Solution Approach 2:
The system pre-stores multiple partial keys in memory devices before any access attempt. When needed, these partial keys are combined to reconstruct the encryption key, and the partial keys are subsequently destroyed, preparing the system in advance for secure key management.
Solution Approach 3:
After the partial keys are used to reconstruct the encryption key, the partial keys are destroyed (discarded) to prevent future access. This ensures that even if memory is compromised later, the partial keys cannot be reused to obtain the encryption key.
2Reliability
If multiple memory devices store partial keys for constructing the encryption key, then security against attackers is improved, but the device complexity increases
Solution Approach 1:
Multiple memory devices serve dual purposes: they store both the partial keys needed for encryption key construction and other operational data for the device. This multi-functionality reduces the need for dedicated separate storage for each component.
Solution Approach 2:
The partial keys are integrated into the existing memory structure of the device rather than being stored in separate external storage. The memory devices that already exist for operational purposes are also used to store the partial keys, merging multiple functions into existing components.
Data Source
AI summary
Devices and methods for securely storing data are provided. A device for constructing an encryption key comprising a tamper-protection barrier that encloses one or more memory devices is provided. The memory stores data for constructing the encryption key. The memory may include a single memory device or a plurality of memory devices. The tamper-protection barrier also encloses a security processor configured to combine the data stored in the memory based in part on a function, such as a logical exclusive-or (XOR) function, to construct the encryption key. The stored data in the memory may include partial keys. These partial keys may be created based in part on applying the XOR function to an encryption key.