US 12,619,791 B2 · Encrypted key management

Abstract

Examples of systems and methods described herein provide for erasing an encrypted key used for data access to a non-volatile memory device. A memory controller may generate an encrypted key for data access to non-volatile memory devices; and, to provide security of data stored on the non-volatile memory devices, the memory controller may store the encrypted key in a local cache of the memory controller. The encrypted key may be erased responsive to losing power or powering down of memory controller. Advantageously, the data stored at the non-volatile memory device may not be accessed when the memory controller (or a computing device implementing the memory controller) loses power. Accordingly, if a malicious actor were to physically remove (or steal) a computing device implementing the memory controller (e.g., a laptop computer), in an attempt to acquire the data, the data stored on the non-volatile memory devices could not be accessed.

Claims25

Dependent claims

A method comprising:

writing, to a cache coupled to a volatile memory device and a memory controller, an encrypted key to provide authenticated access to encrypted data stored at a plurality of non-volatile memory devices coupled to the volatile memory device and the memory controller, wherein the encrypted data is accessible at a host coupled to the plurality of non-volatile memory devices using the memory controller, wherein the encrypted key is specific to data associated with a memory address of a memory access request, and wherein the memory address of the memory access request corresponds to a memory address of at least one of the plurality of non-volatile memory devices;
detecting, by the memory controller a loss of power by comparing a received voltage to a threshold operating voltage;
determining, by the memory controller and using a timing circuit, that a duration of the loss of power exceeds a threshold amount of time;
and
responsive to the determination that the duration of the loss of power exceeds the threshold amount of time, erasing the stored encrypted key for the plurality of non-volatile memory devices.

2 more elements

A method comprising:

receiving, from a host computing device coupled to a plurality of non-volatile memory devices, a memory access request for a non-volatile memory device of the plurality of non-volatile memory devices;
responsive to the memory access request, encrypting, at encryption logic comprising an advanced encryption standard (AES) cipher, a key for data associated with the memory access request, wherein the key is to provide authenticated access, by the host computing device, to encrypted data stored at the plurality of non-volatile memory devices, wherein the encrypted key is specific to data associated with a memory address of the memory access request, and wherein the memory address of the memory access request corresponds to a memory address of at least one of the plurality of non-volatile memory devices;
writing, to a cache of a memory controller, the key for the plurality of non-volatile memory devices;
providing, to at least one non-volatile memory device, the key for accessing, by the host computing device, data associated with the memory access request;
detecting, by the memory controller, a loss of power by comparing a received voltage to a threshold operating voltage;
determining, by the memory controller and using a timing circuit, that a duration of the loss of power exceeds a threshold amount of time;
and
erasing, by the memory controller, the key when the duration of the loss of power exceeds the threshold amount of time.

5 more elements

Dependencies are inferred from the claim text.

Encrypted key management

Life of this patent

Encrypted key management

Life of this patent

Abstract

Claims25