Memory system

1. A memory system communicable with a plurality of hosts, the memory system comprising:

a nonvolatile memory; and

a controller electrically connected to the nonvolatile memory and configured to:

encrypt data to be written into the nonvolatile memory;

decrypt data read from the nonvolatile memory;

receive an authentication request command from a first host;

transmit a first authentication code to the first host upon authentication of the first host being successful; and

receive an access command, which includes a second authentication code, for accessing the nonvolatile memory from a second host,

wherein the controller is configured to:

compare the received second authentication code with the transmitted first authentication code; and

in a case where the second authentication code matches the first authentication code, permit an access to the nonvolatile memory in accordance with the access command; and

in a case where the second authentication code is different from the first authentication code, prohibit an access to the nonvolatile memory in accordance with the access command.

2. The memory system of claim 1 , wherein

the access command is a read command that requests to read first data from the nonvolatile memory, and

in a case where the second authentication code in the read command matches the first authentication code, the controller reads the first data from the nonvolatile memory, decrypts the first data, and transmit the decrypted first data to the second host, and

in a case where the second authentication code is different from the first authentication code, the controller does not read the first data from the nonvolatile memory.

3. The memory system of claim 2 , wherein

the authentication request command includes authentication information, and

in a case where the authentication of the first host using the authentication information is successful, the controller generates an encryption key corresponding to the authentication information, and

in a case where the second authentication code matches the first authentication code, the controller decrypts the first data with the encryption key.

4. The memory system of claim 1 , wherein

the access command is a write command that requests to write second data into the nonvolatile memory, and

in a case where the second authentication code in the write command matches the first authentication code, the controller encrypts the second data and writes the encrypted second data into the nonvolatile memory, and

in a case where the second authentication code is different from the first authentication code, the controller does not write the second data into the nonvolatile memory.

5. The memory system of claim 4 , wherein

the authentication request command includes authentication information, and

in a case where the authentication of the first host using the authentication information is successful, the controller generates an encryption key corresponding to the authentication information, and

in a case where the second authentication code matches the first authentication code, the controller encrypts the second data with the encryption key.

6. The memory system of claim 1 , wherein

the first authentication code includes a random number.

7. The memory system of claim 1 , wherein

the first authentication code includes a random number and an identifier of the first host.

8. The memory system of claim 1 , wherein

in a case where the authentication of the first host is unsuccessful, the controller does not transmit the first authentication code to the first host.

9. The memory system of claim 1 , wherein

the authentication request command includes encrypted authentication information, and

the controller is configured to decrypt the encrypted authentication information, and transmit the first authentication code to the first host upon the authentication of the first host using the decrypted authentication information being successful.

10. The memory system of claim 9 , wherein

the controller is configured to transmit the first authentication code that is encrypted to the first host upon the authentication of the first host being successful.

11. The memory system of claim 1 , wherein

the second authentication code included in the access command is encrypted, and

the controller is configured to:

decrypt the encrypted second authentication code;

in a case where the decrypted second authentication code matches the first authentication code, permit the access to the nonvolatile memory; and

in a case where the decrypted second authentication code is different from the first authentication code, prohibit the access to the nonvolatile memory.

12. The memory system of claim 1 , wherein

the memory system conforms to a Trusted Computing Group (TCG) standard.

13. A method of controlling a memory system, the memory system including a nonvolatile memory, the method comprising:

encrypting data to be written into the nonvolatile memory;

receiving an authentication request command from a first host;

transmitting a first authentication code to the first host upon authentication of the first host being successful;

receiving an access command, which includes a second authentication code, for accessing the nonvolatile memory from a second host;

comparing the received second authentication code with the transmitted first authentication code; and

in a case where the second authentication code matches the first authentication code, permitting an access to the nonvolatile memory in accordance with the access command; and

in a case where the second authentication code is different from the first authentication code, prohibiting an access to the nonvolatile memory in accordance with the access command.

14. The method of claim 13 , wherein

the access command is a read command that requests to read first data from the nonvolatile memory, and

the method further comprises:

in a case where the second authentication code in the read command matches the first authentication code, reading the first data from the nonvolatile memory, decrypting the first data, and transmitting the decrypted first data to the second host; and

in a case where the second authentication code is different from the first authentication code, not reading the first data from the nonvolatile memory.

15. The method of claim 14 , wherein

the authentication request command includes authentication information, and

the method further comprises:

in a case where the authentication of the first host using the authentication information is successful, generating an encryption key corresponding to the authentication information; and

in a case where the second authentication code matches the first authentication code, decrypting the first data with the encryption key.

16. The method of claim 13 , wherein

the access command is a write command that requests to write second data into the nonvolatile memory, and

the method further comprises:

in a case where the second authentication code in the write command matches the first authentication code, encrypting the second data and writing the encrypted second data into the non volatile memory; and

in a case where the second authentication code is different from the first authentication code, not writing the second data into the nonvolatile memory.

17. The method of claim 16 , wherein

the authentication request command includes authentication information, and

the method further comprises:

in a case where the authentication of the first host sing the authentication information is successful, generating an encryption key corresponding to the authentication information; and

in a case where the second authentication code matches the first authentication code, encrypting the second data with the encryption key.

18. The method of claim 13 , wherein

the authentication request command includes encrypted authentication information, and

the method further comprises decrypting the encrypted authentication information, and transmitting the first authentication code to the first host upon the authentication of the first host using the decrypted authentication information being successful.

19. The method of claim 18 , further comprising

transmitting the first authentication code that is encrypted to the first host upon the authentication of the first host being successful.

20. The method of claim 13 , wherein

the second authentication code included in the access command is encrypted, and

the method further comprises:

decrypting the encrypted second authentication code;

in a case where the decrypted second authentication code matches the first authentication code, permitting the access to the nonvolatile memory; and

in a case where the decrypted second authentication code is different from the first authentication code, prohibiting the access to the nonvolatile memory.