SEMICONDUCTOR MEMORY DEVICE

• US 20130145164A1
• Filed: 06/15/2012
• Published: 06/06/2013
• Est. Priority Date: 12/02/2011
• Status: Active Grant

• Current Assignee: Kioxia Corporation
• Original Assignee: Yuji Nagai
• Inventors: NAGAI, Yuji, Suzuki, Toshihiro, Shibata, Noboru, Kato, Taku, Matsushita, Tatsuyuki
• Granted Patent: US 8,732,466 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00115 wherein the record carrier stores a unique medium identifier
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 2220/2516 Hard disks
• CPC Class Codes: G11B 2220/60 Solid state media details of solid state memory devices G11C
• CPC Class Codes: H04L 2209/601 Broadcast encryption
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

According to one embodiment, a device includes a first memory area to store a first key. A second memory area stores encrypted secret identification (ID) information generated from secret ID information with a family key. A third memory area stores a family key block including data generated from the family key with an ID key. An authentication module performs authentication. A second key is generated from a first number with the first key, a session key is generated from a random number with the second key, and authentication information is generated from the secret ID information with the session key. The encrypted secret ID information, family key block and the authentication information is output.

Claims

1. A device to communicate with an external device via a controller comprising:

a memory comprising;

a first memory area being used to store a first key (NKey) and unique secret identification information (SecretID), the first memory area being prohibited from being read from outside at least after shipping,

a second memory area being used to store encrypted secret identification information (E-SecretID) generated by encrypting the secret identification information (SecretID) with a family key (FKey), the second memory area being required to be read-only from the outside, and

a third memory area being used to store a family key block (FKB) including data generated by encrypting the family key (FKey) with an identification key (IDKey), the third memory area being required to be readable and writable from the outside; and

an authentication module to perform authentication with the external device using information stored in the memory,

wherein

a second key (HKey) is generated by encrypting a first number (HC) received from the external device with the first key (NKey) read from the first memory are in the memory based on AES,

a session key (SKey) is generated by encrypting a random number (RN) received from the external device with the second key (HKey) based on AES,

authentication information (Oneway-ID) is generated by calculating the secret identification information (SecretID) with the session key (SKey) in one-way function, and

the encrypted secret identification information (E-SecretID), the family key block (FKB) and the authentication information (Oneway-ID) is output to the external device.