Пристрій верифікованого зберігання інформації

Abstract

Запропоновано пристрій із верифікованим зберіганням інформації, в якому фіксується кількість зчитувань інформації, на основі багаторівневих комірок флеш-пам’яті. У разі перевищення кількості зчитувань інформація знищується. Пристрій запропоновано виконувати як монолітну інтегральну схему, що виготовляється на замовлення.

During storage or transfer of highly-valued confidential information, one of the desired security features may be a certainty of the fact that the information was not read by anyone except the intended recipient. Due to continuous increase of information volume stored in digital form, it is proposed to create a device of secure information storage based on Multi Level Cell Flash memory. The advantage of such approach would be an access count verification mechanism implemented on physical (hardware) level, that therefore would make it impossible to bypass the protection using software means. The vision of the device operation relies on two mechanisms: first, the operation of memory-erase will be eliminated from the NAND Flash memory operation algorithms, and second, the memory-read operation will be modified to include a compulsory memory-write operation before the read, that will put the NAND memory cell into internal state that corresponds to next increased level of the threshold voltage. Thus, independently from the data written into the 4-level cell, it will be erased after the third read, since all the cells will move to the fourth state, corresponding to the maximum threshold voltage of the floating gate. In this way, the confidential information will be destroyed, and also, such state of the cell array will act as an indication of the fact that the memory has been read more than twice. Generally, Flash memory products rely heavily on controller units manufactured on the same chip as the memory cell array. Therefore, to make the development of secure information storage device feasible, the existing low-level Flash controller architectures must be reused to the maximum extent. While adapting the existing controller solutions to the design of secure information storage device, the problems listed below may arise. First, since reprogramming the cells of existing NAND Flash memories is not a typical mode of operation, the count of erroneously programmed cells may rise; the solution to that problem is modification of both cell structure and sequences of programming pulses application. Second, the proposed ideology may interfere with the standard procedure of initial testing of cell array with subsequent substitution of defective columns, performed in existing Flash drives; the solution to this problem is application of error correction codes with allocation of one of the threshold levels for initial testing. That would reduce the number of available legitimate reads from the secure information storage device to just one, but this is enough for that specific application niche.