Nonvolatile memory data security
Keys are generated at a memory device with a period of time elapsing between generation of each key. A request is received from a memory controller for the most recently generated key. The memory device communicates the first key to the memory controller. Access to nonvolatile memory on the memory device is locked. An unlock command with a second key is received from the memory controller. The memory device determines that the second key matches the first key and unlocks access to the nonvolatile memory in response.
1. A memory device comprising:
nonvolatile memory; and
one or more circuits configured to perform a method comprising:
generating a plurality of keys, a period of time elapsing between generation of each key;
receiving, at the memory device while access to the nonvolatile memory is unlocked, a request from a memory controller for a first key, the first key is a most recently generated key from the plurality of keys;
communicating, by the memory device and in response to receiving the request while access to the nonvolatile memory is unlocked, the first key to the memory controller;
locking, after the communicating the first key to the memory controller, access to the nonvolatile memory;
receiving an unlock command with a second key from the memory controller;
determining the second key matches the first key; and
unlocking access to the nonvolatile memory in response to the determining the second key matches the first key.
2. The memory device of claim 1 , wherein the locking access to the nonvolatile memory occurs in response to the memory device being powered on from a powered off state.
3. The memory device of claim 1 , wherein the method further comprises:
requesting revalidation of the memory controller;
locking access to the nonvolatile memory in response to the requesting revalidation;
receiving a third key from the memory controller in response to the requesting revalidation of the memory controller;
determining the third key matches the first key; and
unlocking access to the nonvolatile memory in response to the determining the third key matches the first key.
4. The memory device of claim 1 , wherein the keys are generated using a pseudo-random binary sequence polynomial.
5. The memory device of claim 1 , wherein the method further comprises:
initiating a timer, wherein the timer triggers the generating the plurality of keys.
6. The memory device of claim 5 , wherein the method further comprises:
receiving a key update enable command, wherein the initiating the timer occurs in response to the receiving the key update enable command.
7. The memory device of claim 1 , wherein the method further comprises:
generating, after the unlocking access to the nonvolatile memory in response to the determining the second key matches the first key, a second plurality of keys at the memory device, a third key is a most recent generated key from the second plurality of keys;
storing the first key in an old key storage;
locking access to the nonvolatile memory after the generating the second plurality of keys;
receiving a second unlock command with the second key;
determining the second key does not match the third key;
determining the second key matches the first key in the old key storage; and
unlocking access to the nonvolatile memory in response to the determining the second key matches the first key in the old key storage.
8. The memory device of claim 7 , wherein the method further comprises:
communicating an alert, the alert indicating the nonvolatile memory was unlocked using an old key.
9. The memory device of claim 1 , wherein the method further comprises:
generating, after the unlocking access to the nonvolatile memory in response to the determining the second key matches the first key, a second plurality of keys at the memory device, a third key is a most recent generated key from the second plurality of keys;
storing the first key in an old key storage;
locking access to the nonvolatile memory after the generating the second plurality of keys;
receiving a second unlock command with a fourth key;
determining the fourth key does not match the third key;
increasing a fail counter in response to the determining the fourth key does not match the third key;
determining the fail counter has reached a threshold value; and
permanently locking access to the nonvolatile memory in response to the determining the fail counter has reached a threshold value.
10. The memory device of claim 1 , wherein the second key is not encrypted when received from the memory controller.
11. The memory device of claim 1 , wherein locking access to the nonvolatile memory comprises configuring a gate to block read and write commands from being communicated to the nonvolatile memory.
12. The memory device of claim 6 , wherein the method further comprises:
receiving a key update disable command from the memory controller; and
stopping the generation of new keys in response to receiving the key update disable command.