Storage device authenticated modification
AssigneeMicron Technology, Inc.
InventorLance W. Dover
Life of this patent
Estimating the term…
Abstract
Devices and techniques for authenticated modification of a storage device are described herein. A data transmission, received at an interface of the storage device, can be decoded to obtain a command, a set of input identifications, and a first signature corresponding to data identified by the input identifications. Members of the set of input identifications can be marshalled to produce an input set. A cryptographic engine of the storage device can be invoked on the input set to produce a second signature from the input set. The first signature is and the second signature are compared to determine a match. In response to the match, the input set can be written to a secure portion of the storage device.
Claims22
A storage device comprising:
- a cryptographic engine;
- an interface to:
- receive a write, the write including data and specifying storage the data into an unsecured portion of the storage device;
- and
- receive a transmission that includes a command, a set of input identifications, and a first signature, the set of input identifications corresponding to the data written into the unsecured portion of the storage device;
- a decoder to parse the command, the set of input identifications, and the first signature from the data transmission received at the interface;
- and
- a controller to:
- collect members of the set of input identifications from the unsecured portion of the storage device to produce an input set;
- instruct the cryptographic engine to produce a second signature from the input set;
- compare the first signature and the second signature to determine a match;
- and
- write the input set from the unsecured portion of the storage device to a secure portion of the storage device in response to the match.
A machine implemented method for authenticated modify in a storage device, the method comprising:
- receiving, at an interface of the storage device, a write of data into an unsecured portion of the storage device;
- decoding a data transmission received at the interface, the data transmission including a command, a set of input identifications for the data written into the unsecured portion of the storage device, and a first signature corresponding to data identified by the input identifications, the command corresponding to a secure portion of the storage device;
- marshalling members of the set of input identifications from the unsecured portion of the storage device to produce an input set;
- invoking a cryptographic engine of the storage device on the input set to produce a second signature from the input set;
- comparing the first signature and the second signature to determine a match;
- and
- writing, in response to the match, the input set from the unsecured portion of the storage device to a secure portion of the storage device.
Dependencies are inferred from the claim text.