Flash memory storage system, and controller and method for anti-falsifying data thereof

A flash memory controller, for protecting at least one security data stored in a flash memory chip, the controller comprising:

• a microprocessor unit;
• at least one non-volatile memory, coupled to the microprocessor unit;
• a data token processing unit, coupled to the microprocessor unit, and is configured for generating at least one data token corresponding to the at least one security data and storing the at least one data token in the at least one non-volatile memory;
• an eigenvalue processing unit, coupled to the microprocessor unit, and is configured for generating at least one eigenvalue corresponding to the at least one security data.
• a message digest processing unit, coupled to the microprocessor unit, and is configured for generating at least one message digest corresponding to the at least one security data and storing the at least one message digest in the flash memory chip, wherein the message digest is generated by using a one-way hash function according to the at least one data token and the at least one eigenvalue;
• and
• a flash memory interface module, coupled to the microprocessor unit.

A method for anti-falsifying data, adapted for protecting at least one security data stored in a flash memory chip of a flash memory storage system, the method for anti-falsifying data comprising:

• providing at least one non-volatile memory in a controller of the flash memory storage system, and storing at least one data token corresponding to the at least one security data in the at least one non-volatile memory;
• generating at least one eigenvalue and at least one message digest corresponding to the security data, respectively, wherein the at least one message digest is generated by using a one-way hash function according to the at least one data token and the at least one eigenvalue;
• changing the at least one data token and the at least one eigenvalue and changing the message digest according to the changed at least one data token and the changed at least one eigenvalue by using the one-way hash function, when updating the at least one security data;
• reading the at least one data token, the at least one eigenvalue, and the at least one message digest, and generating at least one comparison message digest according to the read at least one data token and the read at least one eigenvalue by using the one-way hash function, and determining whether the read at least one message digest is identical with the generated at least one comparison message digest, when processing the at least one security data stored in the flash memory chip;
• and
• outputting a warning message, when it is determined that the read at least one message digest is different from the generated at least one comparison message digest.