Electronic device and method of operating the same

Patent metadata

Field	Value
Publication number	US-12197746-B2
Application number	US-202217876784-A
Country	US
Kind code	B2
Filing date	Jul 29, 2022
Priority date	Mar 11, 2022
Publication date	Jan 14, 2025
Grant date	Jan 14, 2025

Abstract

Provided herein may be an electronic device and a method of operating the same. The electronic device may include a memory device including a replay protected memory block (RPMB) configured to store security data, a memory controller configured to control the memory device, and a host device configured to verify, using a password, an external device coupled thereto wherein the memory controller controls the memory device to read, when the external device is verified, the security data, and wherein the host device is further configured to encrypt the read security data, and transmit, to the verified external device, the encrypted security data, a decryption key for decrypting the encrypted security data, and an RPMB key for accessing the security data.

First claim

What is claimed is:

1. An electronic device, comprising:
a memory device including a replay protected memory block (RPMB) configured to store security data;
a memory controller configured to control the memory device; and
a host device configured to verify, using a password, an external device coupled thereto,
wherein the memory controller controls the memory device to read, when the external device is verified, the security data, and
wherein the host device is further configured to:
encrypt the read security data, and
transmit, to the verified external device, the encrypted security data, a decryption key for decrypting the encrypted security data, and an RPMB key for accessing the security data.

2. The electronic device according to claim 1 ,
wherein the security data is first security data, and
wherein the host device is further configured to control the memory controller and the memory device to perform, when the first security data stored in the RPMB is updated to second security data, an update for the external device.

3. The electronic device according to claim 2 , wherein the memory controller controls the memory device to read the second security data.

4. The electronic device according to claim 3 , wherein the host device is further configured to:
encrypt the read second security data, and
transmit, to the verified external device, the encrypted second security data, a decryption key for decrypting the encrypted second security data, and an RPMB key for accessing the second security data.

5. The electronic device according to claim 1 , wherein the host device is further configured to permit the verified external device to perform a security operation which utilizes the security data stored in the verified external device.

6. The electronic device according to claim 1 , wherein the host device further configured to, before the external device is verified:
provide the memory device with the security data, which is provided from a use; and
control the memory device to store the security data in the RPMB.

7. The electronic device according to claim 6 , wherein the host device is further configured to, before the external device is verified:
provide the RPMB key to the memory controller, and
control the memory controller to store therein the RPMB key.

8. A method for operating an electronic device including a storage device and a host device, the method comprising:
verifying, using a password, an external device coupled to the electronic device;
reading, when the external device is verified, security data stored in a replay protected memory block (RPMB) within the storage device;
encrypting the read security data; and
transmitting, to the verified external device, the encrypted security data, a decryption key for decrypting the encrypted security data, and an RPMB key for accessing the security data.

9. The method according to claim 8 ,
wherein the security data is first security data,
further comprising, when the first security data is updated to second security data stored in the RPMB, performing an update for the external device.

10. The method according to claim 9 , wherein performing the update comprises:
reading the second security data and encrypting the read second security data; and
transmitting, to the verified external device, the encrypted second security data, a decryption key for decrypting the encrypted second security data, and an RPMB key for accessing the second security data.

11. The method according to claim 8 , further comprising permitting the verified external device to perform a security operation which utilizes the security data stored in the verified external device.

12. The method according to claim 8 , further comprising before the verifying:
receiving the security data from a user; and
storing the security data in the RPMB.

13. The method according to claim 12 , wherein storing the security data comprises:
transmitting, by the host device, the RPMB key and the security data to the storage device; and
storing, by the host device, the RPMB key in a memory controller and storing, by the host device, the security data in the RPMB, the memory controller being included in the storage device.

14. A terminal system, comprising:
a first terminal device including:
a memory device including a replay protected memory block (RPMB) in which security data is stored,
a memory controller configured to control the memory device, and
a host device configured to generate a one-time password (OTP); and

a second terminal device coupled to the first terminal device and configured to obtain authorization from the first terminal device through the OTP,
wherein the memory controller controls, when the second terminal device obtains the authorization, the memory device to read the security data, and
wherein the host device is further configured to:
encrypt the read security data, and
transmit, to the authorized second terminal device, the encrypted security data, a decryption key for decrypting the encrypted security data, and an RPMB key for accessing the security data.

15. The terminal system according to claim 14 ,
wherein the security data is first security data, and
wherein the host device is further configured to control the memory controller and the memory device to perform, when the first security data is updated to second security data stored in the RPMB, an update for the second terminal device.

16. The terminal system according to claim 15 , wherein the memory controller controls the memory device to read the second security data.

17. The terminal system according to claim 16 , wherein the host device is further configured to:
encrypt the read second security data, and
transmit, to the authorized second terminal device, the encrypted second security data, a decryption key for decrypting the encrypted second security data, and an RPMB key for accessing the second security data.

18. The terminal system according to claim 14 , wherein the host device is further configured to permit the authorized second terminal device to perform a security operation which utilizes the security data stored in the authorized second terminal device.

19. The terminal system according to claim 14 , wherein the host device is further configured to, before the second terminal device obtains the authorization:
provide the memory device with the security data, which is provided from a user, and
control the memory device to store the security data in the RPMB.

20. The terminal system according to claim 19 , wherein the host device is further configured to, before the second terminal device obtains the authorization:
provide the RPMB key to the memory controller, and
control the memory controller to store therein the RPMB key.

Assignees

• Sk Hynix Inc

Inventors

• Jang In Jong

Classifications

• G06F21/44

  Program or device authentication · CPC title

• G06F3/0637

  Permissions · CPC title

• G06F3/0673

  Single storage device · CPC title

• H04L9/0861

  Generation of secret information including derivation or calculation of cryptographic keys or passwords · CPC title

• H04L9/3228

  One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key · CPC title