NON-VOLATILE MEMORY TO STORE RESETTABLE DATA

• US 20160077979A1
• Filed: 04/29/2013
• Published: 03/17/2016
• Est. Priority Date: 04/29/2013
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Herrell, Russ W., Trezise, Gregory, Lesartre, Gregg B., Hana, Andrew
• Granted Patent: US 10,452,567 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: A61B 17/72 Intramedullary pins, nails or other devices A61B17/744 takes precedence
• CPC Class Codes: A61B 17/7283 with special cross-section of the nail
• CPC Class Codes: A61B 17/744 the longitudinal elements coupled to an intramedullary nail
• CPC Class Codes: G06F 12/1466 Key-lock mechanism
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 3/0622 in relation to access
• CPC Class Codes: G06F 3/0637 Permissions
• CPC Class Codes: G06F 3/0679 Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]

Abstract

A non-volatile memory (NVM) is to store data and a first password. The first password is to protect the data. A controller is to selectively enable interaction with the data based on authenticating the first password against a second password. A temporary region is to store the second password. The second password is discarded in response to a status change of the apparatus. The data, the first password, and the second password are resettable by the controller in response to a reset request to bypass the first password, such that the apparatus is restorable to an unused state without authenticating the first password.

Claims

1. An apparatus comprising:

a non-volatile memory (NVM) to store data and a first password, wherein the first password is to protect the data;

a controller to selectively enable interaction with the data based on authenticating the first password against a second password; and

a temporary region to store the second password;

wherein the second password is discarded in response to a status change of the apparatus; and

wherein the data, the first password, and the second password are resettable by the controller in response to a reset request to bypass the first password, such that the apparatus is restorable to an unused state without authenticating the first password.

2. The apparatus of claim 1, wherein, in response to the reset request, the controller is to reset the data, the first password, and the second password based on writing zeros into writeable data locations, and the controller is to determine that all locations are zeroed prior to clearing the first password and rendering the apparatus in the unused state.

3. The apparatus of claim 1, further comprising an encryption engine to encrypt at least a portion of the data, wherein the controller enables bypassing the first password to retrieve encrypted data from, and load encrypted data to, the apparatus to migrate the encrypted data without authenticating the first password.

4. The apparatus of claim 3, wherein the encryption engine is to perform cryptographic operations based on a public key and private key pair, according to asymmetric keying to enable migration of the encrypted data between a source apparatus and a destination apparatus without compromising the private key.

5. The apparatus of claim 3, wherein the data is stored unencrypted at the apparatus, and the encryption engine is to encrypt at least a portion of the data according to the encryption password in response to a request to migrate the data, according to an encrypted mode readout to encrypt as data is being read out.

6. The apparatus of claim 3, wherein the apparatus is to decrypt the encrypted data based on the private key and authenticating the first password.

7. The apparatus of claim 1, wherein the controller is to enable interaction with the data according to mode information stored in the NVM, wherein the mode information is to indicate a mode of operation of the apparatus including a reset mode.

8. The apparatus of claim 1, wherein the controller is to apply address range checking to a received address signal, wherein an address range and associated mode information correspond to the first password, wherein the controller is to support a plurality of address ranges and corresponding mode information, isolated by corresponding passwords.

9. The apparatus of claim 8, wherein the address range and associated mode information corresponding to the first password are protected against modification based on authentication of a master password.

10. The apparatus of claim 8, wherein the apparatus is to migrate data corresponding to the address range, without migrating remaining portions of the data corresponding to a remaining plurality of address ranges.

11. The apparatus of claim 1, wherein the temporary region comprises non-volatile memory resettable by the controller upon the status change of the apparatus, wherein the status change includes at least one of a reset, a power loss, and a power cycle.

13. The apparatus of claim 10, wherein the apparatus includes an interface to serve as system memory of a computing system.

12. An apparatus comprising:

a non-volatile memory (NVM) to store data and a first password;

a controller to selectively enable interaction with the data based on authenticating the first password against a second password; and

a volatile storage to store the second password;

wherein the data and the first password of the non-volatile memory are resettable by the controller in response to a reset request to bypass the first password, such that the memory module is restorable to an unused state without authenticating the first password.

14. A method, comprising:

storing data in a non-volatile memory;

storing a first password in the non-volatile memory;

selectively enabling interaction with the data based on authenticating the first password against a second password;

storing the second password in a temporary region; and

resetting the data, the first password, and the second password in response to a reset request to bypass the first password, such that the memory module is restorable to an unused state without authenticating the first password.

15. The method of claim 14, further comprising:

encrypting the data; and

bypassing the authenticating the first password to migrate the encrypted data from the non-volatile memory.