KR101617089B1 - Non-volatile memory chip for enhancing security and method for data security using the non-volatile memory chip - Google Patents

Abstract

A nonvolatile memory chip for enhancing security using authentication and a data security method using the same. A non-volatile memory chip for enhancing security using authentication includes a challenger register for storing a random value generated by a processor, an authentication code register for storing a message authentication code generated by using a random value and a password of the first user, An authentication register for storing an authentication success value for allowing access to data stored in the nonvolatile memory chip and a temporary register for storing a message reauthentication code generated in response to the reauthentication request, , It is determined whether or not access to the data stored in the nonvolatile memory chip is permitted according to whether the message authentication code and the message reauthentication code are matched. Therefore, the security of the data in the nonvolatile memory can be improved to the level of the volatile memory chip.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention [0001] The present invention relates to a nonvolatile memory chip for enhancing security by using authentication, and a data security method using the nonvolatile memory chip. 2. Description of the Related Art [0002]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to security for data stored in a nonvolatile memory, and more particularly, to a nonvolatile memory chip for enhancing security using authentication and a data security method using the same.

Volatile memory, the mainstream of main memory, is expected to be replaced by nonvolatile memory based on various devices in the near future. In particular, STT-MRAM technology, which is being developed recently, is expected to show the same read / write latency and durability as DRAM.

It is expected that volatile memory will be replaced with nonvolatile memory in the near future and the file system will be converted into a new type of memory based file system for high performance.

However, since the nonvolatile memory has a characteristic of retaining data even when the power of the system is shut off, an attacker acquiring information can easily obtain data stored in the nonvolatile memory by inserting and executing the nonvolatile memory into his computer system . That is, the nonvolatile memory is less secure than the volatile memory.

Conventionally, in order to enhance security for data stored in a nonvolatile memory, the data itself is encrypted by a processor and stored in a nonvolatile memory. However, according to the related art, the performance of the data processing is deteriorated because the processor has to encrypt every time data is written and decrypted every time it is read.

Also, even when only a part of data is changed, there is a problem that power consumption increases in the process of writing because the entire data portion changes when the data is encrypted.

SUMMARY OF THE INVENTION The present invention has been made to solve the above-mentioned problems, and it is an object of the present invention to provide a nonvolatile memory chip that enhances security using authentication.

It is another object of the present invention to provide a data security method for a nonvolatile memory.

According to an aspect of the present invention, there is provided a nonvolatile memory chip for enhancing security using authentication according to an embodiment of the present invention includes a challenger register for storing a random value generated by a processor, An authentication code register for storing the generated message authentication code, an authentication register for storing an authentication success value for allowing access to data stored in the non-volatile memory chip, and a message re-authentication code generated according to the re- And determines whether to allow access to data stored in the nonvolatile memory chip according to whether the message authentication code and the message reauthentication code are matched, if there is a reauthentication request.

Here, the message re-authentication code is generated using a user password and a random value provided in response to the re-authentication request. If there is the re-authentication request, the message re- By setting the success value, it is possible to determine whether to allow access to the data stored in the nonvolatile memory chip.

Here, the re-authentication request may be a case where power is supplied again after the power supply to the non-volatile memory chip is stopped.

Here, the nonvolatile memory chip may disable or delete the authentication success value when the power supply to the nonvolatile memory chip is interrupted.

Here, when it is determined that the message authentication code and the message re-authentication code match, the authentication success value may be activated or regenerated to allow access to the data stored in the non-volatile memory.

Here, when it is determined that the message authentication code and the message reauthentication code do not match, access to the data stored in the nonvolatile memory may be blocked.

Here, the authentication success value may be set to one.

Here, the message authentication code and the message re-authentication code may be generated by a hash function or an encryption function.

Here, the challenger register and the authentication code register are configured as non-volatile memory cells, and the authentication register and the temporary register may be configured as volatile memory cells.

Here, when there is an update request for the random value or the message authentication code, some or all of the data stored in the nonvolatile memory may be deleted.

According to another aspect of the present invention, there is provided a data security method for a non-volatile memory, the method comprising: setting a random value, a message authentication code, The method comprising the steps of: initializing a memory chip; deactivating or deleting an authentication success value according to interruption of power supply to the non-volatile memory chip; and determining whether the message re- And allowing the access to the data stored in the nonvolatile memory by activating or regenerating the authentication success value if the message authentication code and the message reauthentication code match.

The nonvolatile memory chip and the data security method using the same according to the present invention can improve the security of the data to the level of the volatile memory chip.

In addition, data stored in the nonvolatile memory chip can be securely protected through authentication without performing an encryption or decryption process for the data.

1 is a block diagram for explaining a structure of a nonvolatile memory chip for enhancing security using authentication according to an embodiment of the present invention.
2 is a conceptual diagram illustrating an authentication process of a nonvolatile memory chip that enhances security using authentication according to an embodiment of the present invention.
3 is a conceptual diagram for explaining a re-authentication process of a nonvolatile memory chip for enhancing security using authentication according to an embodiment of the present invention.
4 is a flowchart illustrating a data security method using a nonvolatile memory according to an embodiment of the present invention.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention. Like reference numerals are used for like elements in describing each drawing.

The terms first, second, A, B, etc. may be used to describe various elements, but the elements should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In the present application, the terms "comprises" or "having" and the like are used to specify that there is a feature, a number, a step, an operation, an element, a component or a combination thereof described in the specification, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries are to be interpreted as having a meaning consistent with the contextual meaning of the related art and are to be interpreted as either ideal or overly formal in the sense of the present application Do not.

Hereinafter, preferred embodiments according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram for explaining a structure of a nonvolatile memory chip for enhancing security using authentication according to an embodiment of the present invention.

Referring to FIG. 1, a non-volatile memory chip 100 according to an embodiment of the present invention includes an authentication register 110, a challenger register 120, a message authentication register 130 Code Register) and temporary register 140 (Temporary Register).

The challenger register 120 may receive and store the random value generated by the processor. The authentication code register 130 may receive and store the message authentication code generated by the processor. Here, the processor means that the processor is provided in the device in which the nonvolatile memory chip 100 is mounted, and the processor receives the password from the first user or the root user, and generates the message authentication code using the generated random value and the password .

The authentication register 110 may store an authentication success value that allows access to data stored in the non-volatile memory chip 100. [ That is, access to the data stored in the nonvolatile memory chip 100 can be permitted only when the authentication register 110 has the authentication success value.

The temporary register 140 may store the generated message re-authentication code in response to the re-authentication request. Here, the re-authentication request may mean that the power is supplied again after the power supply to the non-volatile memory chip 100 is stopped, and the message re-authentication code may include a user password provided corresponding to the re- Can be generated using a random value.

Among the four registers included in the nonvolatile memory chip 100 according to the embodiment of the present invention, the authentication register 110 and the temporary register 140 are implemented in the form of volatile memory cells and include the challenger register 120 and the authentication code The register 130 may be implemented in the form of a non-volatile memory cell. For example, when the power supply is interrupted, the authentication register 110 and the temporary register 140 lose information, and the challenger register 120 and the authentication code register 130 can maintain information even when the power supply is interrupted.

Accordingly, when there is a re-authentication request, the non-volatile memory chip 100 according to the embodiment of the present invention accesses the data stored in the non-volatile memory chip 100 according to whether the message authentication code matches the message re- It is possible to decide whether or not to allow such a request.

In addition, the nonvolatile memory chip 100 according to the embodiment of the present invention can separate and store data according to a required level of security.

The page mode setting unit 150 may store data in the data storage unit 160 in a secure mode, a read-only mode, and a normal mode. Here, the data storage unit 160 may refer to a memory cell or a memory circuit that actually stores data or information.

In detail, the data corresponding to the security mode is authenticated so that an unauthorized person can read or write the data. The data corresponding to the read-enable mode is authenticated so that an unauthorized person can use the data. Can be read or written by unauthorized persons.

2 is a conceptual diagram illustrating an authentication process of a nonvolatile memory chip that enhances security using authentication according to an embodiment of the present invention.

The nonvolatile memory chip 100 according to the embodiment of the present invention can be mounted in various devices. For example, the non-volatile memory chip 100 may be mounted in an arithmetic processing unit such as a computer, a mobile phone, a smart phone, a notebook, and the like.

Referring to FIG. 2, a process of initializing the non-volatile memory chip 100 so as to perform authentication will be described.

The nonvolatile memory chip 100 can perform authentication in cooperation with the processor of the arithmetic processing unit to which the nonvolatile memory chip 100 is mounted. The non-volatile memory chip 100 may receive and store the random value r generated by the processor and the message authentication code.

Here, the message authentication code can be generated by the processor using the random value r and the password k input by the first user or the root user. That is, the message authentication code may be represented by MAC (k, r).

In detail, the random value r may be stored in the challenger register 120 and the MAC (k, r) may be stored in the authentication code register 130. [ Further, after the random value r and the MAC (k, r) are stored in the respective registers, the authentication success value can be stored in the authentication register 110. [ Here, the authentication success value may be generated by the processor and transferred to the authentication register 110, or may be generated by the authentication register 110, and only when the authentication success value is stored in the authentication register 110, And may allow for access. For example, the authentication success value may be set to '1'.

Accordingly, the initial user or root user of the non-volatile memory chip 100 can store the random value r and the MAC (k, r) in the nonvolatile memory chip 100 through the input to the password k So that it is possible to utilize the random value r and MAC (k, r) when re-authentication is required.

3 is a conceptual diagram for explaining a re-authentication process of a nonvolatile memory chip for enhancing security using authentication according to an embodiment of the present invention.

Referring to FIG. 3, a re-authentication process performed according to the occurrence of a re-authentication request will be described.

According to the embodiment of the present invention, the re-authentication request may occur when power is supplied again after the power supply to the non-volatile memory chip 100 is stopped.

For example, a person who intends to use the data stored in the nonvolatile memory chip 100 without authorization may be a person who has obtained the nonvolatile memory chip 100 by acquiring the nonvolatile memory chip 100 from an operation processing device such as a computer equipped with the nonvolatile memory chip 100 The nonvolatile memory chip 100 may be mounted on its own computer or the like to acquire data. That is, the nonvolatile memory chip 100 holds data even when the power supply or the like is cut off, unlike the volatile memory chip. Therefore, in order for the non-volatile memory chip 100 to maintain the same security as the volatile memory chip, re-authentication is required.

First, if the power supply to the non-volatile memory chip 100 is interrupted, the authentication register 110 may deactivate or delete the authentication success value. That is, when the power supply to the non-volatile memory chip 100 is interrupted, access to the memory stored in the non-volatile memory chip 100 is blocked, and re-authentication is required.

If there is a re-authentication request, the processor can read the random value r stored in the non-volatile memory chip 100 and can read the random value r and the password k ') To generate a message re-authentication code MAC (k', r). Here, the processor that generates the message re-authentication code may be the same processor as the processor that generated the message authentication code, or may refer to another processor. For example, the message authentication code and the message reauthentication code may be generated by a hash function such as SHA or an encryption function such as AES.

The message re-authentication code may be passed to the non-volatile memory chip 100 and stored in the temporary register 140.

Accordingly, when there is a re-authentication request, the non-volatile memory chip 100 according to the embodiment of the present invention sets the authentication success value according to whether the message authentication code matches the message re- ) May be allowed or denied.

In detail, when it is determined that the message authentication code and the message re-authentication code match, the authentication success value may be activated or regenerated to allow access to the data stored in the non-volatile memory.

On the other hand, if the message authentication code and the message reauthentication code do not match, access to the data stored in the nonvolatile memory can be blocked.

For example, data can be stored in the data storage unit 160 by dividing the data into a secure mode, a read-only mode, and a normal mode.

Specifically, the data corresponding to the security mode is re-authenticated so that an unauthorized person can read or write the data. The data corresponding to the read-enabled mode is re-authenticated so that unauthorized persons can not write the data. Normal mode data can be read or written by unauthorized persons.

In addition, when there is an update request for a random value or a message authentication code, some or all of the data stored in the nonvolatile memory can be deleted. That is, when a person who is not authorized to the data stored in the non-volatile memory chip 100 wants to delete or change the random value or the message authentication code stored in the challenger register 120 or the authentication code register 130, The security can be enhanced by deleting part or all of the stored data. For example, when there is an update request for a random value or a message authentication code, all data can be deleted, data other than data corresponding to the normal mode can be deleted, or only data corresponding to the security mode can be deleted.

Accordingly, the nonvolatile memory chip 100 according to the embodiment of the present invention can have security such as a volatile memory chip using authentication.

Although the configuration of the nonvolatile memory chip 100 according to the embodiment of the present invention has been described above for the sake of convenience, at least two of the constituent units may be combined to form one constituent unit, It is to be understood that the invention is not limited to the disclosed embodiments, but may be embodied in many other specific forms without departing from the spirit or essential characteristics thereof.

4 is a flowchart illustrating a data security method using a nonvolatile memory according to an embodiment of the present invention.

Referring to FIG. 4, a data security method for a non-volatile memory includes a step S410 of initializing a non-volatile memory chip 100, a step S410 of initializing an authentication success value according to an interruption of power supply to the non-volatile memory chip 100 (S430) of determining whether the message authentication code generated according to the re-authentication request matches the message re-authentication code (S430), and re-authentication of the message re-authentication code and the message authentication code (S440) access to the data stored in the nonvolatile memory according to whether or not the received data matches the data stored in the nonvolatile memory (S450).

The initialization of the nonvolatile memory chip 100 (S410) includes storing a random value generated by the processor, storing the message authentication code generated by the processor using the random value and the password of the first user, May store an authentication success value that allows access to data stored in the volatile memory chip (100).

That is, the initial user or the root user can set or store the random value, the message authentication code, and the authentication success value so that the non-volatile memory chip 100 can perform the authentication.

In particular, the random value may be stored in the challenger register 120, and the message authentication code may be stored in the authentication code register 130. Further, after being stored in the respective registers of the random value and the message authentication code, the authentication success value can be stored in the authentication register 110. [ Here, the authentication success value may be generated by the processor and transferred to the authentication register 110, or may be generated by the authentication register 110, and only when the authentication success value is stored in the authentication register 110, And may allow for access. For example, the authentication success value may be set to '1'.

The authentication success value may be deactivated or deleted according to the interruption of the power supply to the non-volatile memory chip 100 (S420).

For example, when a person who intends to use the data stored in the nonvolatile memory chip 100 without permission is to remove the nonvolatile memory chip 100 from an operation processing device such as a computer equipped with the nonvolatile memory chip 100 , The authentication success value stored in the non-volatile memory chip 100 may be deactivated or deleted.

It may be determined whether the message reauthentication code generated according to the re-authentication request matches the message authentication code (S430). Here, the message re-authentication code may be generated using a user password (k ') and a random value provided corresponding to the re-authentication request.

In addition, the message reauthentication code may be generated by a processor different from the processor that generated the message authentication code and delivered to the non-volatile memory chip 100.

In addition, the message authentication code and the message reauthentication code may be generated by a hash function or an encryption function.

In detail, the nonvolatile memory chip 100 holds data even when the power supply or the like is cut off, unlike the volatile memory chip. Accordingly, in order for the non-volatile memory chip 100 to maintain the same security as the volatile memory chip, when the power supply to the non-volatile memory chip 100 is stopped, It can be judged.

Accordingly, when the message authentication code and the message re-authentication code are identical, the non-volatile memory chip 100 according to the embodiment of the present invention permits access to the data stored in the non-volatile memory by activating or regenerating the authentication success value . In addition, the nonvolatile memory chip 100 may block access to data stored in the nonvolatile memory if the message authentication code and the message reauthentication code do not match.

In addition, the data corresponding to the security mode is re-authenticated so that an unauthorized person can read or write. The data corresponding to the read-enabled mode is re-authenticated so that an unauthorized person can not write the data. Can be read or written by unauthorized persons.

Furthermore, the non-volatile memory chip 100 may delete some or all of the data stored in the non-volatile memory when there is an update request for a random value or a message authentication code. For example, when there is an update request for a random value or a message authentication code, all data can be deleted, data other than data corresponding to the normal mode can be deleted, or only data corresponding to the security mode can be deleted.

The operation of the data security method for a non-volatile memory according to the embodiment of the present invention can be implemented as a computer-readable program or code in a computer-readable recording medium. A computer-readable recording medium includes all kinds of recording apparatuses in which data that can be read by a computer system is stored. The computer-readable recording medium may also be distributed and distributed in a networked computer system so that a computer-readable program or code can be stored and executed in a distributed manner.

The nonvolatile memory chip and the data security method using the same according to the embodiment of the present invention can improve the security of the data to the level of the volatile memory chip.

In addition, data stored in the nonvolatile memory chip can be securely protected through authentication without performing an encryption or decryption process for the data.

It will be apparent to those skilled in the art that various modifications and variations can be made in the present invention without departing from the spirit or scope of the present invention as defined by the following claims It can be understood that

100: nonvolatile memory chip 110: authentication register
120: Challenger register 130: Authentication code register
140: temporary register 150: page mode setting section
160: Data storage unit 200: Processor

Claims (18)

In a non-volatile memory chip,
A challenger register for storing a random value generated by the processor;
An authentication code register for storing a message authentication code generated by the processor using the random value and a user password;
An authentication register that stores an authentication success value that allows access to data stored in the non-volatile memory chip; And
And a temporary register for storing a message re-authentication code generated according to the re-authentication request,
Determining whether to allow access to the data stored in the nonvolatile memory chip according to whether the message authentication code and the message reauthentication code match with each other,
Wherein the message reauthentication code is generated using a user password provided in response to the reauthentication request and the random value. The method according to claim 1,
Wherein the message re-authentication code is generated using the user password and the random value provided in response to the re-authentication request,
Wherein the access permission determination unit determines whether to permit access to data stored in the nonvolatile memory chip by setting the authentication success value according to whether the message authentication code and the message reauthentication code are matched, A nonvolatile memory chip that uses authentication to enhance security. The method according to claim 1,
The re-
Wherein the power is supplied again after the power supply to the non-volatile memory chip is stopped. The method according to claim 1,
When power supply to the nonvolatile memory chip is interrupted,
Wherein the authentication register deactivates or deletes the authentication success value. ≪ RTI ID = 0.0 > 15. < / RTI > The method of claim 4,
Volatile memory to permit access to data stored in the non-volatile memory by activating or regenerating the authentication success value when it is determined that the message authentication code and the message re- Non-volatile memory chip. The method of claim 5,
Volatile memory to block access to data stored in the non-volatile memory when it is determined that the message authentication code and the message re-authentication code do not match. The method according to claim 1,
The authentication success value may be,
1 < / RTI > of the non-volatile memory chip. The method according to claim 1,
Wherein the message authentication code and the message re-
Wherein the security function is generated by a hash function or an encryption function. The method according to claim 1,
Wherein the challenger register and the authentication code register are configured as non-volatile memory cells,
Wherein the authentication register and the temporary register are comprised of volatile memory cells. The method according to claim 1,
If there is an update request for the random value or the message authentication code,
And deletes some or all of the data stored in the non-volatile memory. A method performed in a non-volatile memory chip,
Initializing the nonvolatile memory chip by setting a random value, a message authentication code, and an authentication success value;
Disabling or deleting the authentication success value in response to an interruption of power supply to the non-volatile memory chip;
Determining whether the message reauthentication code generated according to the re-authentication request matches the message authentication code; And
And allowing access to data stored in the nonvolatile memory by activating or regenerating the authentication success value if the message authentication code and the message reauthentication code match,
Wherein the message re-authentication code is generated using the user password and the random value provided in response to the re-authentication request. The method of claim 11,
If the message authentication code and the message reauthentication code do not match,
Further comprising: blocking access to data stored in the non-volatile memory. The method of claim 11,
The re-
Wherein the power is supplied again after the power supply to the non-volatile memory chip is interrupted. The method of claim 11,
Wherein the initializing the non-volatile memory chip comprises:
Storing a random value generated by the processor;
Storing the message authentication code generated by the processor using the random value and the password of the user; And
And storing the authentication success value to allow access to data stored in the non-volatile memory chip. 15. The method of claim 14,
The message re-
Wherein the random number is generated using the user password and the random value provided in response to the re-authentication request. 16. The method of claim 15,
The message re-
Wherein the processor is generated by another processor and is delivered to the non-volatile memory chip. The method of claim 11,
Wherein the message authentication code and the message re-
A hash function or an encryption function. ≪ Desc / Clms Page number 19 > The method of claim 11,
If there is an update request for the random value or the message authentication code,
Further comprising the step of deleting some or all of the data stored in the non-volatile memory.

Images