Storage device having an RPMB reset function and RPMB management method thereof
A method for managing a replay protection memory block (RPMB) of a storage device includes allocating an RPMB master region managed separately from an RPMB region in which an RPMB key is stored in the RPMB of the storage device, programming a master key into the RPMB master region responsive to a request from a host, receiving a reset request for the RPMB region using the master key from the host, resetting the RPMB key in response to the reset request for the RPMB region, and receiving a reset lock request for the RPMB region from the host.
1 . A method for managing a replay protected memory block (RPMB) of a storage device, comprising:
allocating an RPMB master region, which is managed separately from an RPMB region in which an RPMB key is stored, in the RPMB of the storage device;
programming a master key into the RPMB master region responsive to a request from a host;
receiving a reset request for the RPMB region using the master key from the host;
resetting the RPMB key in response to the reset request for the RPMB region; and
receiving a reset lock request for the RPMB region from the host.
2 . The method of claim 1 , wherein an attribute for indicating whether the RPMB master region is locked has a one-time write characteristic.
3 . The method of claim 1 , wherein the master key and a write counter of the master key are stored in the RPMB master region.
4 . The method of claim 1 , wherein the reset request for the RPMB region comprises:
requesting, by the host, a value of a write counter of the master key to the storage device; and
transmitting, by the host, a reset command for the RPMB region including a first message authentication code generated by combining the value of the write counter of the master key and the master key to the storage device.
5 . The method of claim 4 , wherein the resetting the RPMB key comprises:
generating, by the storage device, a second message authentication code using the master key programmed in the RPMB master region and the write counter; and
performing a reset on the RPMB region based on a comparison result between the first message authentication code and the second message authentication code.
6 . The method of claim 5 , wherein the resetting of the RPMB region includes an operation of deleting the RPMB key stored in the RPMB region.
7 . The method of claim 1 , further comprising:
receiving a master region lock request for blocking a program operation into the RPMB master region.
8 . The method of claim 7 , further comprising:
setting, by the storage device, an attribute of the RPMB master region to a locked state according to the master region lock request.
9 . The method of claim 1 , wherein the reset request for the RPMB region includes an initialization level of the RPMB region, and a reset range of the RPMB region, which is selected according to the initialization level.
10 . The method of claim 9 , wherein the reset of one or more of the RPMB key, a write counter of the master key, and RPMB data is determined according to the initialization level.
11 . The method of claim 9 , wherein the reset request for the RPMB region includes a query request for the initialization level supported by the storage device.
12 . A storage device comprising:
a non-volatile memory device; and
a storage controller configured to access the nonvolatile memory device responsive to a request of a host,
wherein the storage controller is configured to divide and manage a replay protected memory block (RPMB) of the nonvolatile memory device into an RPMB region in which an RPMB key is stored and an RPMB master region in which a master key is stored, and
wherein the storage controller is configured to program the master key in the RPMB master region responsive to a request from the host and to reset the RPMB region in response to a reset request from the host for the RPMB region based on the master key.
13 . The device of claim 12 , wherein the storage controller is configured to support an initialization level defining a reset range of the RPMB region, and to provide the initialization level to the host responsive to a request from the host.
14 . The device of claim 13 , wherein the initialization level includes:
a first initialization level for resetting the RPMB key stored in the RPMB region;
a second initialization level for resetting the RPMB key and a write counter of the RPMB key; and
and a third initialization level for resetting the RPMB key, the write counter, and RPMB data stored in the RPMB region.
15 . The device of claim 12 , wherein the storage controller is configured to receive a reset lock request for the RPMB region based on the master key from the host, and to block reset of the RPMB region in response to the reset lock request.
16 . The device of claim 12 , wherein the storage controller is configured to receive a master region lock request for blocking a program operation into the RPMB master region.
17 . The device of claim 16 , wherein the storage controller is configured to set an attribute of the RPMB master region to a locked state in response to the master region lock request.
18 . A management method of a replay protected memory block (RPMB) of a storage device, comprising:
allocating an RPMB master region managed separately from an RPMB region in which an RPMB key is stored in the RPMB of the storage device;
programming a master key in the RPMB master region responsive to a request of a host;
requesting, by the host, to reset the RPMB region of the storage device using the RPMB master key; and
setting a reset lock to block resetting of the RPMB region responsive to a request of the host.
19 . The method of claim 18 , wherein the storage device applies a reset range of the RPMB region according to an initialization level, the method further comprising:
providing, by the storage device, the initialization level to the host responsive to an initialization level inquiry request of the host.
20 . The method of claim 18 , further comprising:
setting, by the storage device, an attribute of the RPMB master region to a locked state responsive to a request for locking the master region from the host.