KEY STORAGE AND REVOCATION IN A SECURE MEMORY SYSTEM

摘要

A technique for providing access to a first storage structure of a system includes exposing a first key of a plurality of first keys stored in a second storage structure in response to a select code based on a plurality of corresponding select records stored in one-time programmable storage elements of the second memory structure. The technique includes providing the first key as a current first key of a memory access controller. Only one of the plurality of first keys stored in the second storage structure may be exposed at a time and other first keys of the plurality of first keys stored in the second storage structure are inaccessible from the second storage structure at the time.

主权项

1. An apparatus comprising:
a memory controller configured to provide information from a first storage structure in response to authentication of an access to the first storage structure, the authentication being based on a current first key of a plurality of first keys; a second storage structure configured to store the plurality of first keys and a plurality of corresponding select records in corresponding one-time programmable storage elements; and a key controller configured to expose, to the memory controller, a first key of the plurality of first keys stored in the second storage structure, in response to a select code based on the plurality of corresponding select records, the memory controller being configured to use the first key as the current first key.