Security protection for memory content of processor main memory
View Patent ↗Subject matter disclosed herein relates to memory devices and security of same.
1. A method comprising:
receiving a write command by a main memory accessible by a processor, said main memory comprising persistent memory and said write command received via a first memory controller;
maintaining a cryptographic key within said main memory, wherein said cryptographic key is not known by said processor;
determining authentication of said write command based, at least in part, on said cryptographic key, said determining performed by a second controller located within said main memory, and said determining comprising:
storing in said persistent main memory a cryptographic signature generated based, at least in part, on said cryptographic key; and
subsequently authenticating said write command based, at least in part, on said stored cryptographic signature; and
determining whether to modify contents of said main memory based, at least in part, on said determined authentication of said write command.
2. The method of claim 1 , wherein said main memory comprises dynamic random access memory (DRAM).
3. The method of claim 1 , further comprising maintaining particular hash values for corresponding memory objects stored in said main memory during a power loss event.
4. The method of claim 1 , wherein said main memory comprises phase change memory (PCM).
5. A memory device comprising:
a memory cell array, wherein said memory cell array comprises persistent memory; and
a first controller located within said memory device to:
receive a write command from a second memory controller, said write command to access said memory cell array;
generate a cryptographic key maintained within said memory device, wherein said cryptographic key is not known by said second memory controller;
determine authentication of said write command based, at least in part, on said cryptographic key, said determining performed by said first controller located within said main memory device, and said determining comprising:
storing in said persistent memory a cryptographic signature generated based, at least in part, on said cryptographic key; and
subsequently authenticating said write command based, at least in part, on said stored cryptographic signature; and
determine whether to modify contents of said memory cell array based, at least in part, on said determined authentication of said write command.
6. The memory device of claim 5 , further comprising a security block comprising electronic components to perform a secure hash algorithm (SHA).
7. The memory device of claim 6 , further comprising a particular memory location to store said cryptographic key to be used in said secure hash algorithm.
8. The memory device of claim 5 , further comprising a particular memory location to store information describing one or more locations of said memory cell array that are to be secure.
9. The memory device of claim 5 , wherein said memory cell array comprises dynamic random access memory (DRAM).
10. The memory device of claim 5 , wherein said memory cell array comprises phase change memory (PCM).
11. A system comprising:
a memory device comprising:
a memory cell array, wherein said memory cell array comprises persistent memory; and
a first controller located within said memory device;
a processor to host one or more applications and to issue write commands to access said memory cell array; and
a second memory controller to receive said write commands, wherein said second memory controller is disposed within said processor or between said processor and said memory device, and wherein said first controller is capable of
receiving said write commands to access said memory cell array,
generating one or more cryptographic keys maintained within said memory device, wherein said one or more cryptographic keys are not known by said processor,
determining authentication of said write commands based, at least in part, on said one or more cryptographic keys, said determining performed by said first controller and comprising:
storing in said persistent memory a cryptographic signature generated based, at least in part, on said cryptographic key; and
subsequently authenticating said write command based, at least in part, on said stored cryptographic signature, and
determining whether to modify contents of said memory cell array based, at least in part, on said determined authentication of said write command.
12. The system of claim 11 , wherein said memory device further comprises a security block comprising electronic components to perform a secure hash algorithm (SHA).
13. The system of claim 12 , wherein said memory device further comprises a particular memory location to store said one or more cryptographic keys to be used in said secure hash algorithm.
14. The system of claim 11 , wherein said memory cell array comprises dynamic random access memory (DRAM).
15. The system of claim 11 , wherein said memory cell array comprises phase change memory (PCM).
16. The system of claim 11 , wherein said memory cell array comprises a particular memory location to store information describing one or more other locations of said memory cell array that are to be secure.
17. The system of claim 11 , further comprising a hypervisor to provide a virtual environment.