Non-volatile memory to store resettable data

• US 10,452,567 B2
• Filed: 04/29/2013
• Issued: 10/22/2019
• Est. Priority Date: 04/29/2013
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Inventors: Lesartre, Gregg B., Hana, Andrew, Herrell, Russ W., Trezise, Gregory
• Primary Examiner(s): Mackall, Larry T
• Application Number:
  US14/785,749
• Publication Number:
  US 20160077979A1
• Time in Patent Office: 2,367 Days
• Field of Search: 711152, 711164, 711166, 713161, 713171, 713184
• CPC Class Codes: A61B 17/72 Intramedullary pins, nails or other devices A61B17/744 takes precedence
• CPC Class Codes: A61B 17/7283 with special cross-section of the nail
• CPC Class Codes: A61B 17/744 the longitudinal elements coupled to an intramedullary nail
• CPC Class Codes: G06F 12/1466 Key-lock mechanism
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/0679 Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]

Abstract

A non-volatile memory (NVM) is to store data and a first password. The first password is to protect the data. A controller is to selectively enable interaction with the data based on authenticating the first password against a second password. A temporary region is to store the second password. The second password is discarded in response to a status change of the apparatus. The data, the first password, and the second password are resettable by the controller in response to a reset request to bypass the first password, such that the apparatus is restorable to an unused state without authenticating the first password.

Claims

1. An apparatus comprising:

a non-volatile memory (NVM) to store data and a first password, wherein the first password is to protect the data;

a controller to selectively enable interaction with the data based on authenticating the first password against a second password; and

a region of the non-volatile memory having an address range allocated as non-persistent and behaving as a temporary region that is cleared responsive to any of a reset, power loss, or power cycle occurring, by zeroing out of the region, the temporary region to store the second password;

wherein the data, the first password, and the second password are resettable by the controller in response to a reset request to bypass the first password, such that the apparatus is restorable to an unused state without authenticating the first password.

2. The apparatus of claim 1, wherein, in response to the reset request, the controller is to reset the data, the first password, and the second password based on writing zeros into writeable data locations, and the controller is to determine that all locations are zeroed prior to clearing the first password and rendering the apparatus in the unused state.

3. The apparatus of claim 1, further comprising an encryption engine to encrypt at least a portion of the data, wherein the controller enables bypassing the first password to retrieve encrypted data from, and load encrypted data to, the apparatus to migrate the encrypted data without authenticating the first password.

4. The apparatus of claim 3, wherein the encryption engine is to perform cryptographic operations based on a public key and private key pair, according to asymmetric keying to enable migration of the encrypted data between a source apparatus and a destination apparatus without compromising the private key.

5. The apparatus of claim 3, wherein the data is stored unencrypted at the apparatus, and the encryption engine is to encrypt at least a portion of the data according to the encryption password in response to a request to migrate the data, according to an encrypted mode readout to encrypt as data is being read out.

6. The apparatus of claim 3, wherein the apparatus is to decrypt the encrypted data based on the private key and authenticating the first password.

7. The apparatus of claim 1, wherein the controller is to enable interaction with the data according to mode information stored in the NVM, wherein the mode information is to indicate a mode of operation of the apparatus including a reset mode.

8. The apparatus of claim 1, wherein the controller is to apply address range checking to a received address signal, wherein an address range and associated mode information correspond to the first password, wherein the controller is to support a plurality of address ranges and corresponding mode information, isolated by corresponding passwords.

9. The apparatus of claim 8, wherein the address range and associated mode information corresponding to the first password are protected against modification based on authentication of a master password.

10. The apparatus of claim 8, wherein the apparatus is to migrate data corresponding to the address range, without migrating remaining portions of the data corresponding to a remaining plurality of address ranges.

11. The apparatus of claim 10, wherein the apparatus includes an interface to serve as system memory of a computing system.

12. An apparatus comprising:

a non-volatile memory (NVM) to store data and a first password;

a controller to selectively enable interaction with the data based on authenticating the first password against a second password; and

a region of the non-volatile memory having an address range allocated as non-persistent and behaving as a temporary region that is cleared responsive to any of a reset, power loss, or power cycle occurring, by zeroing out of the region, the temporary region store the second password

wherein the data and the first password of the non-volatile memory are resettable by the controller in response to a reset request to bypass the first password, such that the memory module is restorable to an unused state without authenticating the first password.

13. A method, comprising:

storing data in a non-volatile memory;

storing a first password in the non-volatile memory;

selectively enabling interaction with the data based on authenticating the first password against a second password;

storing the second password in a region of the non-volatile memory having an address range allocated as non-persistent and behaving as a temporary region that is cleared responsive to any of a reset, power loss, or power cycle occurring, by zeroing out of the region;

responsive to the reset, power loss, or power cycle occurring, discarding the second password from the temporary region by zeroing out the region; and

resetting the data, the first password, and the second password in response to a reset request to bypass the first password, such that the memory module is restorable to an unused state without authenticating the first password.

14. The method of claim 13, further comprising:

encrypting the data; and

bypassing the authenticating the first password to migrate the encrypted data from the non-volatile memory.