# US 2021/0278979 A1 · Computing system and operating method thereof

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0278979 A1
- Document ID: US20210278979A1
- Status: Published application
- Kind: A1
- Application number: 17/157,316
- Filed: 2021-01-25
- Published: 2021-09-09
- Earliest claimed: 2020-03-09
- Assignees: SK hynix Inc.
- Applicants: SK hynix Inc.
- Inventors: Gun Wook LEE
- Web page: https://patentgrep.com/patent/US20210278979A1

## CPC

- G06F 3/0622: {in relation to access}
- G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules
- G06F 3/061: {Improving I/O performance}
- G06F 3/0655: {Vertical data movement, i.e. input-output transfer; data movement between one or more hosts and one or more storage devices}
- G06F 3/0659: {Command handling arrangements, e.g. command buffers, queues, command scheduling}
- G06F 3/0679: {Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]}
- G06F 21/44: Program or device authentication
- G06F 21/445: {by mutual authentication, e.g. between devices or programs}
- H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC}
- H04L 63/126: {the source of the received data}
- H04L 63/1466: {Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks}
- G06F 2221/2103: Challenge-response
- H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)}
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

An electronic device is provided. A computing system includes a storage device and a host. The storage device includes a memory device including a write protection area. The host performs an operation of providing, to the storage device, a first request regarding security write and write data in parallel with an operation of generating a host authentication code based on the write data and a key shared with the storage device.

## Claims

### Claim 1

A computing system comprising:
a storage device that includes a memory device including a write protection area; and
a host configured to perform an operation of providing, to the storage device, a first request regarding security write and write data in parallel with an operation of generating a host authentication code based on the write data and a key shared with the storage device.

### Claim 2 (depends on 1)

The computing system of claim 1, wherein the storage device is configured to:
receive the first request and the write data from the host;
generate a device authentication code based on the write data and the key;
receive a second request and the host authentication code from the host;
determine whether the write data has integrity based on a comparison between the host authentication code with the device authentication code; and
control the memory device to program the write data with integrity in the write protection area.

### Claim 3 (depends on 2)

The computing system of claim 2, wherein the storage device is configured to:
receive a third request from the host;
provide a third response including a result of a program operation on the write data to the host.

### Claim 4 (depends on 1)

The computing system of claim 1, wherein the write protection area includes a replay protected memory block.

### Claim 5

A storage device comprising:
a memory device including a write protection area; and
a memory controller configured to:
receive a first request and read information regarding a security read from a host;
control the memory device to perform a read operation on the write protection area based on the first request and the read information;
generate a device authentication code based on a key shared with the host and read data associated with the read operation, in parallel with transmitting a first response including the read data to the host and;
receive a second request from the host; and
provide, to the host, the device authentication code in response to the second request.

### Claim 6 (depends on 5)

The storage device of claim 5, the read information includes a nonce value generated by the host for security of the first and second requests, a start address value of a target area to be read within the write protection area, and a block count value which is a number of blocks in the target area.

### Claim 7 (depends on 5)

The storage device of claim 5, wherein the write protection area includes a replay protected memory block.