Storage device including replay protected memory block (RPMB) host device accessing the RPMB, electronic device including storage device and host device, and method of operating the same
Storage devices, host devices and electronic devices are disclosed. In an embodiment of the disclosed technology, an electronic device providing an improved security function may include a storage device including a replay protected memory block (RPMB), and a host device configured to provide a command protocol information unit (PIU) instructing the storage device to access the RPMB. The command PIU may include a basic header segment including a total extra header segment length field having a value other than 0 and an extra header segment including a host RPMB message.
1 . A host device configured to control operations of a storage device that includes a replay protected memory block (RPMB), the host device comprising:
a host message authentication code (MAC) calculator configured to calculate a host MAC using host metadata; and
a host PIU generator configured to: provide the storage device with a command protocol information unit (PIU) instructing the storage device to access the RPMB; and, after providing the command PIU, provide the storage device with a PIU including data to be stored in the RPMB,
wherein the command PIU comprises a basic header segment and an extra header segment,
wherein the basic header segment includes information indicating a type of a PIU and an initiator ID that identifies the host that generated the command PIU,
wherein the extra header segment includes the host MAC and the host metadata, and
wherein the basic header segment of the command PIU includes a total extra header segment length field indicating the command PIU includes the extra header segment including the host MAC and the host metadata.
2 . The host device of claim 1 , further comprising:
an authentication key storage configured to store an authentication key used for generating the host MAC.
3 . The host device of claim 2 , wherein the host MAC calculator calculates the host MAC using the host metadata and the authentication key.
4 . The host device of claim 1 , wherein the command PIU further comprises a transaction specific field configured to identify the type of the PIU transferred between the host device and the storage device.
5 . The host device of claim 1 , wherein the total extra header segment length field has a value other than 0.
6 . The host device of claim 1 , wherein the host PIU generator receives a response PIU from the storage device, and
the response PIU comprises a basic header segment including a total extra header segment length field having a value other than 0 and an extra header segment including a device RPMB message.
7 . The host device of claim 6 , wherein the response PIU further comprises a transaction specific field identifying the type of the PIU transferred between the host device and the storage device.
8 . The host device of claim 6 , wherein the device RPMB message includes a device MAC and device metadata.
9 . The host device of claim 8 , wherein the device MAC is generated by the storage device using the device metadata.
10 . The host device of claim 8 , wherein the device metadata includes a result code indicating a result of accessing the RPMB by the command PIU.
11 . The host device of claim 8 , wherein the device metadata includes a write count value indicating the number of write operations performed on the RPMB.
12 . An electronic device comprising:
a storage device comprising a replay protected memory block (RPMB); and
a host device configured to provide the storage device with a command protocol information unit (PIU) instructing the storage device to: access the RPMB; and, after providing the command PIU, provide the storage device with a PIU including data to be stored in the RPMB,
wherein the command PIU comprises a basic header segment and an extra header segment,
wherein the basic header segment includes information indicating a type of a PIU and an initiator ID that identifies the host that generated the command PIU,
wherein the extra header segment includes a host RPMB message, and
wherein the basic header segment of the command PIU includes a total extra header segment length field indicating the command PIU includes the extra header segment including the host MAC and the host metadata.
13 . The electronic device of claim 12 , wherein the RPMB comprises:
an authentication key storage configured to store a device authentication key used for authentication for the RPMB;
a write counter configured to store a write count value indicating the number of times an authenticated data write operation of storing data in the RPMB is successfully performed;
a result register configured to store a performance result of an operation on the RPMB; and
an RPMB data area storing write data received from the host device.
14 . The electronic device of claim 13 , wherein the storage device comprises:
an authentication manager configured to perform the authentication and output a result of the authentication; and
an access controller configured to control the RPMB based on the result of the authentication, and
the host RPMB message includes a host message authentication code (MAC) and host metadata.
15 . The electronic device of claim 14 , wherein the authentication manager comprises:
a device MAC calculator configured to generate a device MAC using the host metadata and the device authentication key; and
a MAC comparator configured to generate the result of the authentication according to whether the host MAC and the device MAC match.
16 . The electronic device of claim 15 , wherein the device MAC calculator generates the device MAC using a secure hash algorithm-256 (SHA-256) based on the host metadata and the device authentication key.
17 . The electronic device of claim 14 , wherein the host device comprises:
a host MAC calculator configured to calculate the host MAC using the host metadata;
a host PIU generator configured to generate the command PIU; and
an authentication key storage configured to store a host authentication key used for generating the host MAC.
18 . The electronic device of claim 17 , wherein the host MAC calculator calculates the host MAC using the host metadata and the host authentication key.
19 . The electronic device of claim 12 , wherein the command PIU further comprises a transaction specific field identifying a type of a PIU transferred between the host device and the storage device, and the total extra header segment length field has a value other than 0.
20 . The electronic device of claim 12 , wherein the host device receives a response PIU from the storage device, and
the response PIU comprises a basic header segment including a total extra header segment length field having a value other than 0 and an extra header segment including a device RPMB message.
21 . The electronic device of claim 20 , wherein the device RPMB message includes a device MAC and device metadata.
22 . The electronic device of claim 21 , wherein the device MAC is generated by the storage device using the device metadata.
23 . The electronic device of claim 21 , wherein the device metadata includes a result code indicating a result of accessing the RPMB by the command PIU.
24 . The electronic device of claim 21 , wherein the device metadata includes a write count value indicating the number of write operations performed on the RPMB.