Back to results
US 11,030,118 B2Granted
Data-locking memory module
AssigneeRambus Inc.
InventorsAws Shallal, Larry Grant Giddens, Sarvagya Kochak
Life of this patent
Estimating the term…
Abstract
In a memory module, encryption information is received from an external source and stored exclusively within a non-persistent storage element such that the encryption information is expunged from the memory module upon power loss. Write data is received and encrypted using the encryption information stored within the non-persistent storage element to produce encrypted data which is stored, in turn, within a nonvolatile storage of the memory module.
Claims20
A method of operation within a memory module, the method comprising:
- receiving encryption information from a source external to the memory module;
- storing the encryption information exclusively within a non-persistent storage element of the memory module such that the encryption information is expunged from the memory module upon power loss;
- receiving write data via a plurality of data paths and storing the write data within dynamic random access memory (DRAM) components that are (i) coupled respectively to the plurality of data paths such that a respective portion of the write data is stored within each of the DRAM components, and (ii) distinct from the non-persistent storage element;
- and
- after storing the write data within the DRAM components, receiving information indicative of potential security breach with respect to the write data other than a power-loss event, and, in response to receiving the information indicative of potential security breach:
- encrypting the write data using the encryption information stored within the non-persistent storage element to produce encrypted data;
- storing the encrypted data within the memory module in a nonvolatile storage that is distinct from the DRAM components and the non-persistent storage element;
- and
- after storing the encrypted data in the nonvolatile storage, expunging the encryption information from the non-persistent storage element and expunging the write data from the DRAM components.
6 more elements
A memory module comprising:
- a first interface to receive encryption information from a source external to the memory module;
- a non-persistent storage element and circuitry to store the encryption information exclusively within the non-persistent storage element such that the encryption information is expunged from the memory module upon power loss;
- a second interface;
- dynamic random access memory (DRAM) components to receive the write data via respective data paths coupled to the second interface and to store respective portions of the write data such that the write data is collectively stored within the DRAM components;
- encryption circuitry;
- non-volatile storage;
- and
- control circuitry to receive information indicative of potential security breach with respect to the write data, other than a power-loss event, after the write data has been stored within the DRAM components and, in response to receiving the information indicative of potential security breach:
- enable the encryption circuitry to produce encrypted data by encrypting the write data using the encryption information stored within the non-persistent storage element;
- store the encrypted data within the nonvolatile storage;
- and
- after the encrypted data has been stored within the nonvolatile storage, expunge the encryption information from the non-persistent storage element and expunge the write data from the DRAM components.
9 more elements
A memory module comprising:
- a nonvolatile storage;
- a non-persistent storage register;
- means for receiving encryption information from a source external to the memory module;
- means for storing the encryption information exclusively within the non-persistent storage register such that the encryption information is expunged from the memory module upon power loss;
- means for receiving write data via a plurality of data paths and for storing the write data within dynamic random access memory (DRAM) components that are (i) coupled respectively to the plurality of data paths such that a respective portion of the write data is stored within each of the DRAM components, and (ii) distinct from the non-persistent storage register and the nonvolatile storage;
- and
- means for receiving information indicative of potential security breach, other than a power-loss event, with respect to the write data stored within the DRAM components and, in response to receiving the information indicative of potential security breach:
- encrypting the write data using the encryption information stored within the non-persistent storage register to produce encrypted data,
- storing the encrypted data within the nonvolatile storage, and
- after storing the encrypted data in the nonvolatile storage, expunging the encryption information from the non-persistent storage register and expunging the write data from the DRAM components.
7 more elements
Dependencies are inferred from the claim text.