Secure replay protected storage

摘要

Embodiments of the invention create an underlying infrastructure in a flash memory device (e.g., a serial peripheral interface (SPI) flash memory device) such that it may be protected against user attacks—e.g., replacing the SPI flash memory device or a man-in-the-middle (MITM) attack to modify the SPI flash memory contents on the fly. In the prior art, monotonic counters cannot be stored in SPI flash memory devices because said devices do not provide replay protection for the counters. A user may also remove the flash memory device and reprogram it. Host platforms alone cannot protect against such hardware attacks.;Embodiments of the invention enable secure standard storage flash memory devices such as SPI flash memory devices to achieve replay protection for securely stored data. Embodiments of the invention utilize flash memory controllers, flash memory devices, unique device keys and HMAC key logic to create secure execution environments for various components.

主权项

1. A system comprising:
a flash memory device including a monotonic counter; and a host device, communicatively coupled to the flash memory device, to:
generate authentication credentials;request a value from the monotonic counter included in the flash memory device using the authentication credentials and a first signature generated with a device key;receive the value from the monotonic counter and the authentication credentials from the flash memory device;send a second signature generated with the device key and a command to increment the monotonic counter to the flash memory;wherein the flash memory device is to validate the request for the value from the monotonic counter and the command to increment the monotonic counter with its own key.