Authenticated operations and event counters
View Patent ↗Apparatus and methods protect a memory device from a security attack. A security attack may lead to an unusually high number of security events, such as power cycling of a device hosting the computing system and/or memory device. Power cycling events of the memory device can be counted. A count value can be maintained of power cycling events occurring within a particular period of time. The count value can be compared to a threshold number. Normal operation is permitted if the count value does not exceed the threshold number. A security action is invoked when the count value exceeds the threshold number.
1. A method of protecting a memory device, the method comprising:
counting within a memory device, power cycling events of the memory device;
maintaining a count value of the power cycling events occurring within a particular period of time;
comparing the count value to a threshold number;
increasing the threshold number in response to the threshold number not being exceeded within the particular period of time;
invoking a security action including at least one of an audible alarm, a visible alarm, or powering down when the count value exceeds the threshold number; and
providing the count value of the power cycling events to a processor external to the memory device in response to an authenticated read request.
2. The method of claim 1 , wherein the threshold number is 100 power cycles and the particular period of time is one month.
3. The method of claim 1 , wherein the threshold number is initially set to 100 power cycles and the particular period of time is one month, further comprising increasing the threshold number from 100 power cycles to 200 power cycles in response to the threshold number not being exceeded within the particular period of time.
4. The method of claim 1 , wherein the security action further comprises sending a message to a user to indicate a potential presence of a security attack.
5. The method of claim 1 , wherein the security action further comprises forbidding reading of contents stored in the memory device for a particular span of time.
6. A memory device comprising:
a memory cell array; and
a controller configured to:
count within said memory cell array, power cycling events of the memory cell array;
store a count value of the power cycling events occurring within a particular period of time;
compare the count value to a threshold number;
increase the threshold number in response to the threshold number not being exceeded within the particular period of time;
invoke a security action when the count value exceeds the threshold number; and
provide the count value of the power cycling events to a processor external to the memory device in response to an authenticated read request.
7. The memory device of claim 6 , wherein the threshold number is 100 power cycles and the particular period of time is one month.
8. The memory device of claim 6 , wherein the controller is further configured to increase the threshold number in response to the threshold number not being exceeded within the particular period of time.
9. The memory device of claim 6 , wherein the threshold number is initially set to 100 power cycles and the particular period of time is one month, wherein the controller is further configured to increase the threshold number from 100 power cycles to 200 power cycles in response to the threshold number not being exceeded within the particular period of time.
10. The memory device of claim 6 , wherein the security action comprises an alarm that is at least one of audible or visible to a user of a device incorporating the memory device.
11. The memory device of claim 6 , wherein for the security action, the controller is further configured to power down the memory device.
12. The memory device of claim 6 , wherein for the security action, the controller is further configured to forbid reading of contents stored in the memory device for a particular span of time.
13. The memory device of claim 6 , wherein for the security action, the controller is further configured to send a message to a user to indicate a potential presence of a security attack.
14. A system comprising:
a memory device comprising:
a memory controller,
a memory cell array; and
a controller configured to:
count within said memory cell array, power cycling events of the memory device;
store a count value of the power cycling events occurring within a particular period of time;
compare the count value to a threshold number;
increase the threshold number in response to the threshold number not being exceeded within the particular period of time;
invoke a security action when the count value exceeds the threshold number; and
provide the count value of the power cycling events to a processor external to the memory device in response to an authenticated read request; and
a system processor to host one or more applications and to initiate commands to said memory controller to provide access to said memory cell array.
15. The system of claim 14 , wherein the threshold number is 100 power cycles and the particular period of time is one month.
16. The system of claim 14 , wherein the controller is further configured to increase the threshold number in response to the threshold number not being exceeded within the particular period of time.
17. The system of claim 14 , wherein the threshold number is initially set to 100 power cycles and the particular period of time is one month, wherein the controller is further configured to increase the threshold number from 100 power cycles to 200 power cycles in response to the threshold number not being exceeded within the particular period of time.
18. The system of claim 14 , wherein the security action comprises an alarm that is at least one of audible or visible to a user of a device incorporating the memory device.
19. The system of claim 14 , wherein for the security action, the controller is further configured to power down the memory device.
20. The system of claim 14 , wherein for the security action, the controller is further configured to forbid reading of contents stored in the memory device for a particular span of time.
21. The system of claim 14 , wherein for the security action, the controller is further configured to send a message to a user to indicate a potential presence of a security attack.