Combined cryptographic key management services for access control and proof of space

A computing system, comprising:

• a security server having a network interface, memory and at least one processor configured to:
• store a plurality of cryptographic keys, including a first cryptographic key representative of an identity of a memory device, a second cryptographic key representative of a privilege to access a memory region in the memory device, and a third cryptographic key representative of a pool of proof of space plots;
• communicate with a memory sub-system containing the memory device to generate a proof of space plot in the pool;
• determine a change of ownership of the memory device from a manufacturer of the memory device to an entity;
• and
• transfer the second cryptographic key and the third cryptographic key to a computer of the entity.

An apparatus, comprising:

• a solid state drive, having:
• a memory device, wherein a unique device secret is configured in the memory device during manufacture of the memory device;
• a host interface configured to receive at least read commands and write commands from a host system;
• a storage medium;
• and
• a processing device configured to control executions of the read commands to retrieve data from the storage medium and executions of the write commands to store data into the storage medium;
• and
• a network interface operable to communicate, over a computer network, with a security server configured to store a plurality of cryptographic keys, including a first cryptographic key representative of an identity of the memory device, a second cryptographic key representative of a privilege to access a memory region in the memory device, and a third cryptographic key representative of a pool of proof of space plots;
• wherein the solid state drive is configured to communicate with the security server to generate, in the storage medium, a proof of space plot in the pool represented by the third cryptographic key.