Securely modifying access to a debug port
AssigneeMicron Technology, Inc.
InventorZhan Liu
Life of this patent
Estimating the term…
Abstract
In some aspects, the techniques described herein relate to a device including: a debug port; a trusted execution environment (TEE), the TEE storing a public key; and a controller, the controller configured to: receive a command to access the debug port, the command including a signature generated using a private key corresponding to the public key; provide the command to the TEE, wherein the TEE validates the command by validating the signature using the public key to obtain a validation result; and modify access to the debug port based on the validation result.
Claims20
A memory device comprising:
- a debug register controlling access to a debug port of the memory device;
- and
- a controller configured to:
- receive a signed command to modify access to the debug port;
- validate the command using a server public key;
- and
- update the debug register based on the command.
A method comprising:
- receiving, by a controller of a device, a digital certificate including a new public key, the digital certificate signed using a private key corresponding to a current public key stored in a trusted execution environment (TEE) of the device;
- validating, via the TEE, the digital certificate;
- and
- reverting to the current public key upon expiration of a validity period.
A non-transitory computer-readable storage medium storing computer program instructions capable of being executed by a computer processor, the computer program instructions defining steps of:
- receiving an authenticated request from a user device to generate a debug command for a memory device, the request including a unique identifier of the memory device;
- retrieving, using the unique identifier, a private key associated with the memory device;
- generating a debug command including configuration parameters for a debug port of the memory device;
- and
- signing the debug command using the retrieved private key.
Dependencies are inferred from the claim text.