Memory device, operation method of memory device, and authentication system of memory device
Provided is a system including a memory device including an interface configured to receive a measurement value generation request signal from a host and transmit a first measurement value and a second measurement value to the host, attester firmware configured to receive measurement values for a plurality of pieces of firmware, a bootloader configured to perform booting, a first register configured to record a first measurement value of the bootloader, and a second register configured to record a second measurement value for the attester firmware in response to the first measurement value being recorded, and the host including processing circuitry configured to receive the first measurement value and the second measurement value, and determine whether to falsify the bootloader or the attester firmware based on at least one of (1) the first measurement value and first reference values or (2) the second measurement value and second reference values.
1 . A system comprising:
a memory device including
an interface configured to receive a measurement value generation request signal from a host and transmit a first measurement value of a bootloader and a second measurement value for an attester firmware to the host,
the attester firmware configured to receive measurement values for a plurality of pieces of firmware,
the bootloader configured to perform booting,
a first register configured to record the first measurement value of the bootloader, and
a second register configured to record the second measurement value for the attester firmware in response to the first measurement value being recorded; and
the host including processing circuitry configured to
receive the first measurement value and the second measurement value, and determine whether to falsify the bootloader and the attester firmware based on both (1) the first measurement value and first reference values and (2) the second measurement value and second reference values.
2 . The system of claim 1 , wherein the memory device comprises:
a register manager configured to
control the recording of the first register and the second register, and
prohibit recording of the first register in response to the first measurement value being recorded in the first register.
3 . The system of claim 2 , wherein the register manager is configured to:
record the second measurement value in the second register in response to the first measurement value being recorded; and
prohibit recording of the second register in response to the second measurement value being recorded in the second register.
4 . The system of claim 1 , wherein the processing circuitry is configured to:
determine that the bootloader is falsified in response to a reference value of the bootloader being different from the first measurement value.
5 . The system of claim 1 , wherein the processing circuitry is configured to:
determine that the attester firmware is falsified in response to a reference value of the attester firmware being different from the second measurement value.
6 . The system of claim 1 , wherein the processing circuitry is configured to:
receive measurement values for the plurality of pieces of firmware from the attester firmware; and
determine whether the plurality of pieces of firmware are falsified based on the received measurement values for the plurality of pieces of firmware.
7 . The system of claim 1 , wherein the memory device further includes read-only memory (ROM) configured to perform authentication for the bootloader,
wherein the bootloader is configured to execute in response to the first measurement value being recorded in the first register, and
the second register is configured to record the second measurement value in response to the bootloader being executed.
8 . An operation method of a system, the method comprising:
receiving a measurement value generation request signal from a host;
recording a first measurement value of a bootloader;
recording a second measurement value of an attester firmware in response to the first measurement value being recorded, the attester firmware configured to receive measurement values for a plurality of pieces of firmware; and
determining whether to falsify the bootloader and the attester firmware based on both (1) the first measurement value and first reference values and (2) the second measurement value and second reference values.
9 . The method of claim 8 , further comprising:
prohibiting a recording of a first register in response to the first measurement value being recorded in the first register.
10 . The method of claim 9 , further comprising:
recording the second measurement value in a second register in response to the first measurement value being recorded; and
prohibiting recording of the second register in response to the second measurement value being recorded in the second register.
11 . The method of claim 8 , further comprising:
determining that the bootloader is falsified in response to a reference value of the bootloader being different from the first measurement value.
12 . The method of claim 8 , further comprising:
determining that the attester firmware is falsified in response to a reference value of the attester firmware being different from the second measurement value.
13 . The method of claim 8 , further comprising:
receiving measurement values for the plurality of pieces of firmware from the attester firmware; and
determining whether the plurality of pieces of firmware are falsified based on the received measurement values for the plurality of pieces of firmware.
14 . The operation method of a memory device of claim 8 , further comprising:
generating the first measurement value by performing authentication on the bootloader;
executing the bootloader in response to the first measurement value being recorded in a first register; and
recording the second measurement value in a second register in response to the bootloader being executed.
15 . An authentication system comprising:
a memory device including
an interface configured to receive a measurement value generation request signal from a host and transmit a first measurement value of a bootloader and a second measurement value for an attester firmware to the host,
the attester firmware configured to receive measurement values for a plurality of pieces of firmware,
the bootloader configured to perform booting,
a first register configured to record the first measurement value of the bootloader, and
a second register configured to record the second measurement value for the attester firmware in response to the first measurement value being recorded; and
the host including processing circuitry configured to
receive the first measurement value and the second measurement value, and
determine whether to falsify the bootloader or the attester firmware based on at least one of (1) the first measurement value and first reference values or (2) the second measurement value and second reference values.
16 . The authentication system of claim 15 , wherein the memory device comprises:
a register manager configured to
control the recording of the first register and the second register, and
prohibit recording of the first register in response to the first measurement value being recorded in the first register.
17 . The authentication system of claim 16 , wherein the register manager is configured to:
record the second measurement value in the second register in response to the first measurement value being recorded; and
prohibit recording of the second register in response to the second measurement value being recorded in the second register.
18 . The authentication system of claim 15 , wherein the processing circuitry is configured to:
determine that the bootloader is falsified in response to a reference value of the bootloader being different from the first measurement value.
19 . The authentication system of claim 15 , wherein the processing circuitry is configured to:
determine that the attester firmware is falsified in response to a reference value of the attester firmware being different from the second measurement value.
20 . The authentication system of claim 15 , wherein the processing circuitry is configured to:
receive measurement values for the plurality of pieces of firmware from the attester firmware; and
determine whether the plurality of pieces of firmware are falsified based on the received measurement values for the plurality of pieces of firmware.