Granted Patent B2

US 10,521,617 · App. 15/676,708 · Granted Dec 31, 2019

Abstract

Claims (61)

1. An apparatus, comprising:

non-volatile memory;

a host interface; and

a control circuit in communication with the non-volatile memory and the host interface, the control circuit configured to:

access data stored in the non-volatile memory in response to a request on the host interface for data for a logical address;

access a stored list of expected digests for data associated with logical addresses, wherein the list contains an expected digest for data associated with each logical address on the list;

compute a digest of the accessed data for the logical address; and

provide the accessed data on the host interface only if the computed digest matches the expected digest for data associated with the logical address.

2. The apparatus of claim 1 , wherein the control circuit is further configured to:

verify integrity of the accessed data based on whether the computed digest matches the expected digest; and

provide the accessed data on the host interface only if the integrity of the accessed data is verified.

3. The apparatus of claim 2 , wherein the control circuit is further configured to:

verify authenticity of the accessed data based on whether the computed digest matches the expected digest; and

provide the accessed data on the host interface only if the authenticity of the accessed data is verified.

4. The apparatus of claim 1 , wherein the control circuit is further configured to:

verify authenticity of the accessed data based on whether the computed digest matches the expected digest; and

provide the accessed data on the host interface only if the authenticity of the accessed data is verified.

5. The apparatus of claim 1 , wherein:

the non-volatile memory and the control circuit reside within a memory device; and the host interface is connected to a host connection to the memory device.

6. The apparatus of claim 5 , wherein:

the list is stored on the memory device.

7. The apparatus of claim 5 , wherein:

the expected digest for data for the logical address is provided to the memory device from a host via the host connection; and

the control circuit is configured to verify the expected digest based on a shared secret between the memory device and a trusted entity.

8. The apparatus of claim 5 , further comprising a host controller connected to the host connection and configured to request the data over the host connection.

9. The apparatus of claim 8 , wherein the host controller is configured to request the data over the host connection responsive to a host boot up sequence.

10. A method comprising:

receiving a request from a host on a host interface of a non-volatile memory device to read data for a host logical address;

accessing the data for the host logical address from the non-volatile memory device;

computing a digest for the accessed data for the host logical address;

accessing a list that is stored on the non-volatile memory device, the list contains host logical addresses and an expected digest for each host logical address on the list;

determining whether the computed digest matches the expected digest for the host logical address; and

providing the data for the host logical address on the host interface to the host only upon a condition that the computed digest for the host logical address matches the expected digest for the host logical address.

11. The method of claim 10 , further comprising:

storing, on the non-volatile memory device, the list of host logical addresses with the expected digest for data associated with each host logical address.

12. The method of claim 11 , further comprising:

receiving, at the non-volatile memory device, a signed token comprising the list; and

verifying the signed token as a condition to use the list to determine whether data stored at the host logical addresses on the list is trusted by the host.

13. The method of claim 11 , further comprising:

receiving the list over a secure channel between the non-volatile memory device and a trusted entity, wherein the list is received from the host over the host interface.

14. The method of claim 11 , further comprising:

receiving, at the host, the list from a server;

receiving the list at the non-volatile memory device from the host over the host interface; and

verifying the list, by the non-volatile memory device, based on a shared secret between the server and the non-volatile memory device that is not shared with the host.

15. The method of claim 11 , further comprising:

receiving the list at the non-volatile memory device from a secure environment (SE) on the host over the host interface; and

verifying the list, by the non-volatile memory device, based on a shared secret between the SE on the host and the non-volatile memory device.

16. The method of claim 10 , further comprising:

initiating, by the host, the request for the data for the host logical address in response to a host boot up sequence to load a program into the host.

17. A non-volatile memory device, comprising:

non-volatile memory;

host interface means for communicating with a host that is external to the non-volatile memory device, the host interface means further for receiving a request from the host to read data that is stored in the non-volatile memory for a host logical address;

memory interface means for accessing the data for the host logical address from the non-volatile memory;

digest computation means for computing a digest of the data for the host logical address;

digest matching means for determining whether the computed digest of the data for the host logical address matches an expected digest of the data for the host logical address, wherein the non-volatile memory device stores the expected digest of data for each host logical address on a list;

data integrity and authenticity verification means for determining integrity and authenticity of the accessed data based on whether the computed digest matches the expected digest for the host logical address; and

data transfer control means for transferring the accessed data to the host only upon verifying integrity and authenticity of the accessed data.

18. The non-volatile memory device of claim 17 , further comprising:

host boot means for initiating a host boot up sequence; and

boot data request means for requesting that host boot data be transferred to the host responsive to the host boot up sequence being initiated;

wherein the data integrity and authenticity verification means is further for providing trusted boot data.

Assignments (10)