Key encryption handling
AssigneeMicron Technology, Inc.
InventorsNathan A. Eckel, Steven D. Check
Life of this patent
Estimating the term…
Abstract
An apparatus comprises an encryption key generator to generate a media encryption key to encrypt data in number of memory components, where the encryption key generator is configured to wrap the media encryption key to generate an encrypted media encryption key. The encrypted media encryption key is stored in a non-volatile memory. The apparatus comprises firmware having instructions to transition the apparatus to and from a secure state using the encrypted media encryption key.
Claims20
An apparatus comprising:
- a plurality of memory components;
- an encryption key generator to generate a media encryption key to encrypt data in the plurality of memory components, the encryption key generator configured to wrap the media encryption key to generate an encrypted media encryption key;
- a non-volatile memory to store the encrypted media encryption key;
- and
- firmware having instructions to transition the apparatus to and from a secure state using the encrypted media encryption key.
A non-volatile dual in-line memory module comprising:
- a plurality of volatile memory components;
- a first non-volatile memory in which to dump contents of the volatile memory components upon detection of a power failure;
- a non-volatile controller to control the plurality of volatile memory components and the non-volatile memory;
- an encryption key generator to generate a media encryption key to encrypt data in the plurality of memory components, the encryption key generator configured to wrap the media encryption key to generate an encrypted media encryption key;
- a second non-volatile memory to store the encrypted media encryption key;
- and
- firmware having instructions to transition the non-volatile controller to and from a secure state using the encrypted media encryption key.
A system comprising:
- a non-volatile dual in-line memory module configured to operatively couple to a host device, the non-volatile dual in-line memory module including:
- dynamic random-access memory components;
- a NAND flash memory in which to dump contents of the dynamic random-access memory components upon detection of a power failure;
- a non-volatile controller to control the dynamic random-access memory components and the NAND flash memory;
- an encryption key generator to generate a media encryption key to encrypt data in the dynamic random-access memory components, the encryption key generator configured to wrap the media encryption key to generate an encrypted media encryption key;
- a NOR flash memory to store the encrypted media encryption key;
- and
- firmware having instructions to transition the non-volatile controller to and from a secure state using the encrypted media encryption key.
A method comprising
- generating a media encryption key to encrypt data in a plurality of memory components of an apparatus;
- wrapping the media encryption key to generate an encrypted media encryption key;
- storing the encrypted media encryption key in a non-volatile memory of the apparatus;
- and
- transitioning the apparatus to and from a secure state using the encrypted media encryption key.
Dependencies are inferred from the claim text.