Memory device using time from a trusted host device

• US 20080307507A1
• Filed: 06/08/2007
• Published: 12/11/2008
• Est. Priority Date: 06/08/2007
• Status: Abandoned Application

• Current Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Original Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Inventors: Conley, Kevin M., Holtzman, Michael, Barzilai, Ron, Sela, Rotem, Jogand-Coulomb, Fabrice E.
• Application Number:
  US11/811,345
• Publication Number:
  US 20080307507A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/725 operating on a secure reference time value
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2151 Time stamp

Abstract

A memory device for using time from a trusted host device is disclosed. In one embodiment, a memory device comprises a memory array and circuitry operative to provide a security system operative to authenticate an entity running on a host device, a time module that keeps track of time, and an application operative to perform a time-based operation, wherein the application is further operative to use time from the host device instead of time from the time module to perform the time-based operation. Other embodiments are disclosed, and each of the embodiments can be used alone or together in combination.

Claims

1. A memory device comprising:

a memory array; and

circuitry in communication with the memory array and operative to provide;

a security system operative to authenticate an entity running on a host device;

a time module that keeps track of time; and

an application operative to perform a time-based operation, wherein the application is further operative to use time from the host device instead of time from the time module to perform the time-based operation.

2. The memory device of claim 1, wherein the application is operative to use the time from the host device instead of the time from the time module only if the time from the host device is later than the time from the time module.

3. The memory device of claim 1, wherein the application is further operative to determine an identification of the host device, and wherein the application uses the time from the host device instead of the time from the time module only if the application determines the host device to be trustworthy.

4. The memory device of claim 1, wherein the time from the host device is relatively more accurate than the time from the time module, and wherein the time from the time module is relatively more secure than the time from the host device.

5. The memory device of claim 1, wherein the time from the host device cannot be used to update the time module.

6. The memory device of claim 1, wherein the security system is operative to use the time from the time module to authenticate the entity.

7. The memory device of claim 1, wherein the application is operative to use the time from the host device only for a single session.

8. The memory device of claim 1, wherein the time-based operation comprises a digital rights management (DRM) license validation operation.

9. The memory device of claim 1, wherein the memory device stores digital rights management (DRM) keys and licenses to unlock protected content stored on the memory device.

10. A memory device comprising:

a memory array; and

circuitry in communication with the memory array and operative to;

receive a request to authenticate an entity running on a host device;

authenticate the entity using an authentication method specified in an access control record (ACR) and time from a time module on a memory device, wherein the ACR associates the entity with an application in the memory device;

receive a request from the entity for the application to perform a time-based operation;

select time from the host device instead of time from the time module to perform the time-based operation; and

use the time from the host device to perform the time-based operation.

11. The memory device of claim 10, wherein the time from the host device is selected instead of the time from the time module only if the time from the host device is later than the time from the time module.

12. The memory device of claim 10, wherein the time from the host device is selected instead of the time from the time module only if the host device is determined to be trustworthy.

13. The memory device of claim 10, wherein the time from the host device is relatively more accurate than the time from the time module, and wherein the time from the time module is relatively more secure than the time from the host device.

14. The memory device of claim 10, wherein the time from the host device cannot be used to update the time module.

15. The memory device of claim 10, wherein the circuitry is further operative to use the time from the host device only for a single session.

16. The memory device of claim 10, wherein the time-based operation comprises a digital rights management (DRM) license validation operation.

17. The memory device of claim 10, wherein the memory device stores digital rights management (DRM) keys and licenses to unlock protected content stored on the memory device.

18. A memory device comprising:

a memory array; and

circuitry in communication with the memory array and operative to;

store time received from a first host device;

receive time from a second host device;

compare the time from the second host device to the stored time from the first host device; and

based on the comparison, decide whether to use the time from the second host device or the stored time from the first host device to perform a time-based operation.

19. The memory device of claim 18, wherein the circuitry is further operative to:

compare the time from the second host device to time from a time module on the memory device; and

based on the comparison, decide whether to use the time from the second host device, the stored time from the first host device, or the time from the time module to perform the time-based operation.

20. The memory device of claim 18, wherein the time-based operation comprises a digital rights management (DRM) license validation operation.

21. The memory device of claim 18, wherein the circuitry is further operative to decide to use the time from the second host device to perform the time-based operation.

22. The memory device of claim 18, wherein the circuitry is further operative to decide to use the stored time from the first host device to perform the time-based operation.

23. A memory device comprising:

a memory array; and

circuitry in communication with the memory array and operative to;

authenticate a host device using a non-time-based authentication system;

receive time from the host device; and

use the time received from the host device to perform a time-based operation.

24. The memory device of claim 23, wherein the circuitry is further operative to validate the time received from the host device.

25. The memory device of claim 24, wherein the circuitry is operative to validate the time received from the host device by comparing the time with one or both of stored time from a different host device and time from a time module on the memory device.

26. The memory device of claim 23, wherein the non-time-based authentication system comprises symmetric authentication.

27. The memory device of claim 23, wherein the time-based operation comprises a digital rights management (DRM) license validation operation.

28. The memory device of claim 23, wherein the host device is connected to a network.

29. The memory device of claim 23, wherein the host device is unconnected to a network.