Systems and methods for access violation management of secured memory
View Patent ↗Systems and methods that facilitate processing data and securing data written to or read from memory. A processor can include a host memory interface that monitors all bus traffic between a host processor and memory. The host memory interface can analyze commands generated by the host processor and determine the validity of the commands. Valid commands can proceed for further analysis; invalid commands can be aborted, for example, with the host memory interface and memory each set to an idle state. The host memory interface can analyze authentication information obtained via an authentication component, and information regarding memory partition rights, to determine whether a command partition violation exists as to the command. If a violation exists, the host memory interface can prevent the improper command from executing in the memory, and can cause a different operation to occur thereby allowing the memory to be placed in a known state.
1. A system that secures information in a memory, comprising:
a host processor that generates at least one command, the at least one command is at least one of a read, a write, a program, or an erase command; and
at least one other processor associated with the host processor that receives and analyzes the at least one command, and determines if the at least one command is valid and if the at least one command has access rights to a partition in the memory, the at least one other processor comprises an authentication component that solicits authentication data from an entity and determines access rights to the memory based in part on the authentication data received from the entity, and the at least one other processor controls access to the memory based in part on a level of authentication associated with the authentication data;
the at least one other processor further comprises a host memory interface that monitors information communicated via a bus situated between the host processor and the memory, the host memory interface analyzes the information and determines if the at least one command is valid and if the at least one command has access rights to a partition in the memory, the bus positioned in part in the at least one other processor,
the host memory interface aborts the at least one command if it is invalid, and
the host memory interface prevents the at least one command from executing an operation in the memory if the at least one command does not have access rights to the partition regardless of the validity of the at least one command.
2. The system of claim 1 , the host memory interface executes an operation associated with an alternative command that places the memory in a known state with regard to the system when the at least one command does not have access rights to the partition but the at least one command is valid.
3. The system of claim 2 , the known state is at least one of an idle state or a state where the information stored in a memory location associated with the alternative command is not changed after the operation associated with the alternative command is executed.
4. The system of claim 1 , the at least one other processor allows the at least one command to execute an operation in the memory if the at least one command is valid and access rights to the partition have been granted.
5. The system of claim 1 , the memory is at least one of volatile memory or non-volatile memory.
6. The system of claim 5 , the non-volatile memory is at least one of flash memory, read only memory, or programmable ROM.
7. The system of claim 1 , the at least one other processor is implemented as a state machine and the memory is implemented as a state machine and the respective state machines are synchronized.
8. A system that secures information in a memory, comprising:
a host processor that generates at least one command, the at least one command is at least one of a read, a write, a program, or an erase command; and
at least one other processor associated with the host processor that receives and analyzes the at least one command, and determines if the at least one command is valid and if the at least one command has access rights to a partition in the memory, the at least one other processor is implemented as a state machine and the memory is implemented as a state machine and the respective state machines are synchronized;
the at least one other processor comprises a host memory interface that monitors information communicated via a bus situated between the host processor and the memory, the host memory interface analyzes the information and determines if the at least one command is valid and if the at least one command has access rights to a partition in the memory, the bus positioned in part in the at least one other processor,
the host memory interface aborts the at least one command if it is invalid,
the host memory interface prevents the at least one command from executing an operation in the memory if the at least one command does not have access rights to the partition regardless of the validity of the at least one command, and
the host memory interface executes an operation associated with an alternative command that places the memory in a known state with regard to the system when the at least one command does not have access rights to the partition but the at least one command is valid.
9. The system of claim 8 , the known state is at least one of an idle state or a state where the information stored in a memory location associated with the alternative command is not changed after the operation associated with the alternative command is executed.
10. The system of claim 8 , the at least one other processor allows the at least one command to execute an operation in the memory if the at least one command is valid and access rights to the partition have been granted.
11. The system of claim 8 , the memory is at least one of volatile memory or non-volatile memory.
12. A system that secures information in a memory, comprising:
a host processor that generates at least one command, the at least one command is at least one of a read, a write, a program, or an erase command; and
at least one other processor associated with the host processor that receives and analyzes the at least one command, and determines if the at least one command is valid and if the at least one command has access rights to a partition in the memory,
the at least one other processor comprises a host memory interface that monitors information communicated via a bus situated between the host processor and the memory, the host memory interface analyzes the information and determines if the at least one command is valid and if the at least one command has access rights to a partition in the memory, the bus positioned in part in the at least one other processor,
the host memory interface aborts the at least one command if it is invalid,
the host memory interface prevents the at least one command from executing an operation in the memory if the at least one command does not have access rights to the partition regardless of the validity of the at least one command, and
the host memory interface executes an operation associated with an alternative command that places the memory in a known state with regard to the system when the at least one command does not have access rights to the partition but the at least one command is valid.
13. The system of claim 12 , the known state is at least one of an idle state or a state where the information stored in a memory location associated with the alternative command is not changed after the operation associated with the alternative command is executed.
14. The system of claim 12 , the memory is at least one of volatile memory or non-volatile memory.