Assuring integrity and secure erasure of critical security parameters
AssigneeMicron Technology, Inc.
InventorWalter Andrew Hubis
Life of this patent
Estimating the term…
Abstract
A processing device sets a first flag that indicates whether a first critical security parameter (CSP) file exists. The first CSP file includes a first set of CSPs for a memory device. The processing device sets a second flag that indicates whether the first CSP file is valid. The processing device sets a third flag that indicates whether a second CSP file exists. The second CSP file includes a second set of CSPs for the memory device. The processing device sets a fourth flag that indicates whether the second critical security parameter file is valid. The processing device selects one of the first or second CSP file as an active CSP file based on an evaluation of the first, second, third, and fourth flags.
Claims20
A system comprising:
- a memory device;
- and
- a processing device coupled to the memory device, the processing device configured to perform operations comprising:
- preparing a buffer with critical security parameter update data for updating one of more critical security parameters of the memory device, the one or more critical security parameters comprising at least one cryptographic key or at least one access credential, the critical security parameter update data comprising the one or more critical security parameters, a sequence number, and a security version, the preparing of the buffer comprising writing the one or more critical security parameters to the buffer;
- computing a hash based on the one or more security parameters, the sequence number, and the security version;
- writing the hash to the buffer;
- writing the buffer to an inactive critical security parameter file;
- and
- erasing an active critical security parameter file based on the buffer being successfully written to the inactive critical security parameter file.
A method comprising:
- preparing, by a processing device, a buffer with critical security parameter update data for updating one of more critical security parameters of a memory device, the one or more critical security parameters comprising at least one cryptographic key or at least one access credential, the critical security parameter update data comprising the one or more critical security parameters, a sequence number, and a security version, the preparing of the buffer comprising writing the one or more critical security parameters to the buffer;
- computing, by the processing device, a hash based on the one or more security parameters, the sequence number, and the security version;
- writing, by the processing device, the hash to the buffer;
- writing, by the processing device, the buffer to an inactive critical security parameter file;
- and
- erasing, by the processing device, an active critical security parameter file based on the buffer being successfully written to the inactive critical security parameter file.
A non-transitory computer-readable storage medium comprising instructions that, when executed by a processing device, configure the processing device to perform operations comprising:
- preparing a buffer with critical security parameter update data for updating one of more critical security parameters of a memory device, the one or more critical security parameters comprising at least one cryptographic key or at least one access credential, the critical security parameter update data comprising the one or more critical security parameters, a sequence number, and a security version, the preparing of the buffer comprising writing the one or more security parameters to the buffer;
- computing a hash based on the one or more security parameters, the sequence number, and the security version;
- writing the hash to the buffer;
- writing the buffer to an inactive critical security parameter file;
- and
- erasing an active critical security parameter file based on the buffer being successfully written to the inactive critical security parameter file.
Dependencies are inferred from the claim text.