Voltage Regulator Memory Security via Encryption Key Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Computer memory subsystems are vulnerable to unauthorized access, posing a risk to sensitive information stored in memory devices such as DRAM, which can lead to data breaches and security issues as systems become increasingly complex and perform faster.

Innovation Solution

A memory system with a voltage regulator that has two states, one allowing read and write operations and another preventing read operations, using an encryption key stored in read-only memory to secure data access. The voltage regulator transitions to a low voltage state if the encryption key is not periodically validated, rendering data inaccessible, and reverts to the operational state upon receiving a matching key.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If memory subsystems operate at high speed to meet performance demands, then processing efficiency is improved, but vulnerability to unauthorized access increases

Engineering Contradiction:
Improveprocessing efficiencyVSAvoidunauthorized access vulnerability
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by implementing encryption key verification and voltage state control mechanisms before unauthorized access can occur. The voltage regulator is configured to require valid encryption keys before transitioning to operational voltage states that enable memory access, thereby preventing unauthorized reading or copying of data during high-speed operations

Inventive Principle:
Principle #10Preliminary action

2Speed

If voltage regulator remains in operational state for fast access, then data retrieval speed is improved, but data security is worsened

Engineering Contradiction:
Improvedata retrieval speedVSAvoiddata security
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The patent applies dynamics by making the voltage regulator's operational state conditional and dynamic rather than static. The regulator continuously monitors encryption key validity and automatically transitions between operational and secure states based on authentication status, ensuring that fast data retrieval is only possible when authorized while maintaining security when unauthorized access is detected

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent implements feedback mechanisms where the voltage regulator receives continuous status information about encryption key validity and adjusts its voltage output accordingly. When invalid keys or unauthorized access attempts are detected, the feedback loop triggers a state transition to secure mode, creating a closed-loop control system that balances speed and security based on real-time authentication status

Inventive Principle:
Principle #23Feedback

3Reliability

If encryption key verification is implemented, then data security is improved, but system complexity increases

Engineering Contradiction:
Improvedata securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies universality by designing the voltage regulator to perform multiple functions: traditional voltage regulation plus encryption key verification plus access authorization. By integrating these functions into a single component rather than adding separate security hardware, the system achieves enhanced security while minimizing the increase in overall system complexity

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS11687468B2Method and apparatus for securing memory modules
Publication Date: 2023.06.27 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11687468B2 patent drawing
  • US11687468B2 patent drawing
  • US11687468B2 patent drawing

AI summary

A memory system for storing data that includes providing a memory module having one or more memory devices and a voltage regulator for controlling voltage levels supplied to the one or more memory devices, wherein the voltage regulator has a first state that permits write and read operations with the one or more memory devices, and a second state where the voltage regulator prevents at least read operations with the one or more memory devices the system configured to store an encryption key in ROM on the voltage regulator; copy the encryption key value from the ROM to a voltage regulator register; set a voltage regulator encryption timer for a period of time; and transition the voltage regulator to the second state in response to the voltage regulator encryption timer expiring.