Time-Limited Memory Access for Secure Partial Storage Areas
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory systems with self-encrypting functions face risks of data leakage and tampering due to incorrect or forgotten commands disabling access authorities, particularly when users' access rights need to be revoked.
Innovation Solution
Implementing a memory system with a controller that enables first access authority to a storage area for a user ID with a time limit, automatically disabling the access when the time exceeds the set limit, thereby reducing the need for manual command operations to revoke access rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual commands are used to disable access authority, then access control can be revoked, but data leakage and tampering risks remain due to incorrect or forgotten commands
Solution Approach 1:
The system automatically disables access authority based on pre-set time limits without requiring manual intervention. The controller monitors elapsed time and autonomously revokes access rights when the time limit is reached, eliminating the need for users to manually execute disable commands and preventing security risks from human error or forgetfulness.
Solution Approach 2:
The system pre-configures time limits for access authority before the access period begins. By establishing the disable timing in advance and automatically executing the revocation at the predetermined time point, the system ensures security measures are implemented proactively rather than relying on reactive manual commands.
2Ease of operation
If access authority is permanently enabled, then users can access storage areas freely, but security risks increase when access revocation is needed
Solution Approach 1:
The system transforms static access authority into a dynamic, time-bound permission. Access rights are automatically adjusted based on elapsed time, transitioning from enabled to disabled state without manual intervention. This dynamic approach maintains user convenience during the authorized period while ensuring automatic security revocation when the period expires.
Solution Approach 2:
The system changes the time parameter of access authority from unlimited to time-limited. By setting a specific time limit duration and automatically monitoring time progression, the system modifies the access control parameters to balance convenience and security, enabling free access during the valid period while automatically restricting access after expiration.
3Reliability
If automatic time limit monitoring is implemented, then security is enhanced by preventing unintended access, but system complexity increases
Solution Approach 1:
The controller integrates multiple functions including time limit monitoring, automatic access authority management, and encryption/decryption operations into a single device. By consolidating these functions, the system enhances security through automatic time-based control without proportionally increasing overall system complexity, as the controller already performs multiple essential storage management tasks.
Data Source
AI summary
According to one embodiment, a memory system includes a nonvolatile memory and a controller. The controller enables a first access authority to a first storage area which is at least a partial storage area of the nonvolatile memory and sets a first time limit at which the first access authority becomes disabled. The first access authority is assigned to first user identification information. The controller disables the first access authority in a case where current time exceeds the first time limit.