SECURE ERASE SYSTEM FOR A SOLID STATE NON-VOLATILE MEMORY DEVICE

• US 20120079289A1
• Filed: 09/27/2010
• Published: 03/29/2012
• Est. Priority Date: 09/27/2010
• Status: Abandoned Application

• Current Assignee: Skymedi Corporation
• Original Assignee: Skymedi Corporation
• Inventors: WENG, Wu Kun, WU, Hsin Hsien
• Application Number:
  US12/891,631
• Publication Number:
  US 20120079289A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 12/0246 in block erasable memory, e.g. flash memory
• CPC Class Codes: G06F 12/1425 the protection being physical, e.g. cell, word, block
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 2212/7209 Validity control, e.g. using flags, time stamps or sequence numbers
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A secure erase system for a solid state memory device is disclosed. A memory area provides a data block for storing data and a key block for storing at least one key. A translation unit maps a logical address to a physical address associated with the memory area. An encryption unit encrypts plaintext data to be written to the memory area with the associated key and decrypts the encrypted data to be read by a host with the associated key. The key associated with a logical erase group to be secure erased is deleted after receiving a command requesting to erase the data associated with the logical erase group.

Claims

1. A secure erase system for a solid state memory device, the system comprising:

a memory area that provides a data block for storing data and a key block for storing at least one key;

a translation unit configured to map a logical address to a physical address associated with the memory area; and

an encryption unit configured to encrypt plaintext data to be written to the memory area with the associated key and decrypt the encrypted data to be read by a host with the associated key;

wherein the key associated with a logical erase group to be secure erased is deleted after receiving a command requesting to erase the data associated with the logical erase group.

2. The system of claim 1, wherein the solid state memory device is a solid state non-volatile memory device.

3. The system of claim 2, wherein the solid state non-volatile memory device is a flash memory or a phase change memory.

4. The system of claim 1, further comprising a front end device configured to act as an interface of the secure erase system.

5. The system of claim 4, wherein the front end device is one of the following:

Secured Digital (SD), MultiMediaCard (MMC), embedded MultiMediaCard (eMMC), Serial Advanced Technology Attachment (SATA), Peripheral Component Interconnect Express (PCIe), Integrated Drive Electronics (IDE), Universal Serial Bus (UBS), IEEE 1394 and SmartCard.

6. The system of claim 1, wherein the memory area is divided into a user area for storing user data, and a system area for storing a system program and related parameters.

7. The system of claim 1, wherein the data block and the key block are disposed in same or different groups of a sub-area of the memory area.

8. The system of claim 1, wherein the data block and the key block are disposed in groups of different sub-areas of the memory area respectively.

9. The system of claim 1, wherein the key block is disposed in a user sub-area, a system sub-area or a spare region of the memory area.

10. The system of claim 1, wherein the encryption unit adopts a symmetric-key algorithm that produces the single key.

11. The system of claim 1, wherein the key is generated by a random number generator.

12. The system of claim 4, further comprising a controller configured to supervise the encryption unit, the front end device and the memory area to read data from the memory area to the host, or write data from the host to the memory area.

13. The system of claim 12, wherein the controller reads the key stored in the key block after receiving a read command, wherein the encrypted data stored in the memory area is decrypted with the key by the encryption unit and then sent to the host if the key exists, otherwise, a predefined pattern indicating an invalid data or absence of data is generated and then sent to the host.

14. The system of claim 12, wherein the controller reads the key stored in the key block after receiving a write command, wherein a new key is generated by the encryption unit and then stored in the key block if the key does not exist;

data to be written is subsequently encrypted with the existing key or the new key, followed by writing the encrypted data to the memory area.

15. The system of claim 1, wherein the logical address is mapped to the physical address by a flash translation layer.

16. The system of claim 15, wherein the flash translation layer adopts a page level algorithm or a block level algorithm.

17. The system of claim 1, wherein the logical erase group is a data erase unit definable in the memory area.

18. The system of claim 1, wherein the requesting command is issued by the host.

19. The system of claim 12, wherein the requesting command is issued by the controller.

20. The system of claim 1, wherein the key is read from the key block after receiving the requesting command, followed by deleting the key if the key exists.