Data identity recognition for semiconductor devices

An apparatus, comprising:

• a host, wherein the host includes a host security manager that is configured to issue commands to a memory device, each command including a respective:
• key identification (ID);
• and
• trusted executive environment (TEE) bit;
• the memory device coupled to the host via an interconnect bus, wherein the memory device includes:
• a memory management layer (MML) portion and a cache portion;
• and
• a memory device security manager configured to:
• detect whether a command was received from a trusted domain of the host or a non-trusted domain of the host based on the TEE bit;
• in response to the command being sent from the non-trusted domain, encrypt data associated with the command using a first encryption key indexed by the keyID;
• in response to the command being sent from the trusted domain and in response to the keyID indicating transaction-based encryption is to be used, encrypt the data associated with the command using a second encryption key indexed by the keyID;
• and
• in response to the command being sent from the trusted domain and in response to the keyID indicating address-based encryption is to be used, encrypt the data associated with the command using a third encryption key indexed by a host address associated with the command.

A method, comprising:

• receiving, by a memory device, a command from a host, wherein each command includes a respective:
• key identification (ID);
• and
• trusted execution environment (TEE) bit;
• detecting, by a memory device security manager, whether the command was sent from a trusted domain of the host or a non-trusted domain of the host based on the TEE bit;
• encrypting, by the memory device security manager, data associated with the command using a first encryption key indexed by the keyID in response to the command being sent from the non-trusted domain;
• encrypting, by the memory device security manager, the data associated with the command using a second encryption key indexed by the keyID in response to the command being sent from the trusted domain and in response to the keyID indicating transaction-based encryption is to be used;
• and
• encrypting, by the memory device security manager, the data associated with the command using a third encryption key indexed by a host address associated with the command;
• and
• allowing, by the host security manager, access to memory of the memory device corresponding to an address of the command based on which entity associated with the host sent the command.