Patent ID: 12189832

DETAILED DESCRIPTION

A memory system in accordance with examples disclosed herein may include one or more memory devices and a host device coupled with the one or more memory devices. The one or more memory devices may include different memory technologies, such as volatile memory (e.g., dynamic random-access memory (DRAM)) and non-volatile memory (e.g., flash memory). Some applications, such as vehicle safety systems, autonomous vehicle systems, or other safety-critical systems, may have relatively high reliability and strict time constraints, or may otherwise be designed for a relatively low probability of failures. Accordingly, data stored to the volatile memory and/or non-volatile memory may be authenticated before any operations associated with the data are performed to increase safety and prevent attacks to the data stored.

In some memory systems, data written (e.g., stored) to a memory device may be authenticated upon booting the system (e.g., upon starting a vehicle) using methods such as cyclic redundancy checking (CRC). To authenticate data using CRC, a host device may first calculate a binary sequence (e.g., a first check value). Once the first check value has been generated, data (e.g., a row of data) may be communicated from the memory device to the host device, and the host device may calculate a binary sequence (e.g., a second check value) using the data. If the first and second check values match, the data may be authenticated. During a boot sequence, each row of data of the memory device may be communicated to the host device for authentication, which may be time consuming. Due to the high reliability and strict time constraints associated with various systems, such as vehicle safety systems, autonomous vehicle systems, or other safety-critical systems, it may be desirable to reliably authenticate data of the system while reducing the overall timing of the system's boot sequence, among other operations.

The techniques described herein may reliably authenticate data associated with a memory device, while reducing the memory device's overall operation time, such as boot time or when the memory device exits a low power state (e.g., when the memory device exits a suspend-to-RAM mode). As described herein, a system may include a host device coupled with a memory device. The system, which may be an example of an automotive system, may authenticate data before an operation associated with the data is executed. To authenticate the data, the system may generate and/or assign a hash (e.g., a cryptographic hash, a first hash, a keyed hash) to each row (e.g., each row of data). Before one or more operations associated with the data is executed, the host device may transmit a request to the memory device for the data and/or the first hash. The data and the first hash may be stored to a temporary storage (e.g., a cache) of the host device in response to the request. Unless explicitly noted otherwise, as used herein a “hash” includes a hash that can be used for authentication (as opposed to a hash that can be used solely to check integrity), and an example of the “hash” may also be a “keyed hash,” a MAC, or an HMAC, as referred to elsewhere herein.

Once the data and first hash are stored to the temporary storage (e.g., the cache), the host device may generate an additional hash of the data (e.g., a second hash, a second keyed hash) using a key and/or a secure message authentication code (MAC) algorithm such as hash-based message authentication code (HMAC). Although the key may be a same type of key as was used to generate the first hash, the key used to generate the second hash may be accessible to only the host device (and inaccessible to the one or more memory devices). Thus if the data is unaltered, the first hash would match the second hash generated. Accordingly, to authenticate the data, the host device may compare the first hash and the second hash and determine if the hashes match. As described herein, if the hashes match, the data may be authenticated. If the hashes do not match, the host device may be configured to perform one or more additional steps or operations to authenticate the data or to ensure that the memory device is safe and secure. In some examples, upon authenticating the data, the data, which may be associated with one or more operations, may be executed directly from the cache (e.g., as opposed to being executed from the memory device), which may minimize a quantity of communications between the host device and the memory device and thus may improve overall timing of the system. Moreover, by authenticating data before executing an associated operation, data may be authenticated on-the-fly, thus reducing the overall boot time of the associated system.

Features of the disclosure are initially described in the context of systems and dies as described with reference toFIGS.1and2. Features of the disclosure are described in the context of a process flow diagram as described with reference toFIG.3. These and other features of the disclosure are further illustrated by and described with reference to an apparatus diagram and flowcharts that relate to safety and security for memory as described with reference toFIGS.4-7.

FIG.1illustrates an example of a system100that supports safety and security for memory in accordance with examples as disclosed herein. The system100may include a host device105, a memory device110, and a plurality of channels115coupling the host device105with the memory device110. The system100may include one or more memory devices110, but aspects of the one or more memory devices110may be described in the context of a single memory device (e.g., memory device110).

The system100may include portions of an electronic device, such as a computing device, a mobile computing device, a wireless device, a graphics processing device, a vehicle, or other systems. For example, the system100may illustrate aspects of a computer, a laptop computer, a tablet computer, a smartphone, a cellular phone, a wearable device, an internet-connected device, a vehicle controller, or the like. The memory device110may be a component of the system operable to store data for one or more other components of the system100.

At least portions of the system100may be examples of the host device105. The host device105may be an example of a processor or other circuitry within a device that uses memory to execute processes, such as within a computing device, a mobile computing device, a wireless device, a graphics processing device, a computer, a laptop computer, a tablet computer, a smartphone, a cellular phone, a wearable device, an internet-connected device, a vehicle controller, a system on a chip (SoC), or some other stationary or portable electronic device, among other examples. In some examples, the host device105may refer to the hardware, firmware, software, or a combination thereof that implements the functions of an external memory controller120. In some examples, the external memory controller120may be referred to as a host or a host device105.

The host device105may also include a local memory (not shown). In some cases, the local memory may include read-only memory (ROM) or other memory that may store operating code (e.g., executable instructions) executable by the external memory controller120to perform functions ascribed herein to the external memory controller120. In some cases, the local memory may additionally or alternatively include static random access memory (SRAM) or other memory that may be used by the external memory controller120for internal storage or calculations, for example, related to the functions ascribed herein to the external memory controller120. Additionally or alternatively, the local memory may serve as a cache for the external memory controller120. For example, the local memory may be configured to store data and hashes (e.g., cryptographic hashes) received from the memory device110and may be configured to authenticate the data using the methods described herein. In some examples, if the data is authenticated, the data may be executed from the local memory. In other examples, data may be stored to the local memory when read from or written to a memory device130or memory device140, and may be available within the local memory for subsequent retrieval for or manipulation (e.g., updating) by the host system105(e.g., with reduced latency relative to a memory device130or memory device140) in accordance with a cache policy.

A memory device110may be an independent device or a component that is operable to provide physical memory addresses/space that may be used or referenced by the system100. In some examples, a memory device110may be configurable to work with one or more different types of host devices. Signaling between the host device105and the memory device110may be operable to support one or more of: modulation schemes to modulate the signals, various pin configurations for communicating the signals, various form factors for physical packaging of the host device105and the memory device110, clock signaling and synchronization between the host device105and the memory device110, timing conventions, or other factors.

The memory device110may be operable to store data for the components of the host device105. In some examples, the memory device110may act as a slave-type device to the host device105(e.g., responding to and executing commands provided by the host device105through the external memory controller120). Such commands may include one or more of a write command for a write operation, a read command for a read operation, a refresh command for a refresh operation, or other commands.

The host device105may include one or more of an external memory controller120, a processor125, a basic input/output system (BIOS) component130, or other components such as one or more peripheral components or one or more input/output controllers. The components of host device105may be coupled with one another using a bus135.

The external memory controller120may be an example of a microcontroller as described herein. Additionally or alternatively, the host device105may include other components configured to authenticate data received from the memory device110. For example, the host device105may include a hashing component (not shown) for generating one or more hashes of data using a key that is accessible by the host device105. The host device105may also include a safety component (not shown) for performing one or more operations based on data being authenticated (or not authenticated). The operations of the hashing component and the safety component may be performed by each respective component or, in other examples, may be performed by the external memory controller120.

The processor125may be operable to provide control or other functionality for at least portions of the system100or at least portions of the host device105. The processor125may be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or a combination of these components. In such examples, the processor125may be an example of a central processing unit (CPU), a graphics processing unit (GPU), a general purpose GPU (GPGPU), or an SoC, among other examples. In some examples, the external memory controller120may be implemented by or be a part of the processor125.

The BIOS component130may be a software component that includes a BIOS operated as firmware, which may initialize and run various hardware components of the system100or the host device105. The BIOS component130may also manage data flow between the processor125and the various components of the system100or the host device105. The BIOS component130may include a program or software stored in one or more of read-only memory (ROM), flash memory, or other non-volatile memory.

The memory device110may include a device memory controller155and one or more memory dies160(e.g., memory chips) to support a desired capacity or a specified capacity for data storage. Each memory die160may include a local memory controller165(e.g., local memory controller165-a, local memory controller165-b, local memory controller165-N) and a memory array170(e.g., memory array170-a, memory array170-b, memory array170-N). A memory array170may be a collection (e.g., one or more grids, one or more banks, one or more tiles, one or more sections) of memory cells, with each memory cell being operable to store at least one bit of data. A memory device110including two or more memory dies may be referred to as a multi-die memory or a multi-die package or a multi-chip memory or a multi-chip package.

The memory device110may include memory dies160that include different types of memory cells. For example, the memory array170-aof the memory die160-amay include one or more volatile memory cells. The memory array170-amay include one or more volatile memory cells, such as dynamic random-access memory (DRAM) cells, synchronous dynamic random-access memory (SDRAM) cells, double data rate synchronous DRAM (DDR SDRAM) cells, graphics DDR SDRAM (GDDR SDRAM), and/or static random-access memory (SRAM). The volatile memory cells of the memory array170-amay be configured to receive data from other memory arrays (e.g., memory arrays of other memory die) of the memory device110.

The memory device110may include one or more arrays of non-volatile memory cells. For example, the memory array170-bof the memory die160-bmay include one or more non-volatile memory cells. The memory array170-bmay include one or more non-volatile memory cells such as NAND (e.g., NAND flash) memory, ROM, phase change memory (PCM), self-selecting memory, other chalcogenide-based memories, ferroelectric RAM (FeRAM), magneto RAM (MRAM), NOR (e.g., NOR flash) memory, Spin Transfer Torque (STT)-MRAM, conductive bridging RAM (CBRAM), resistive random access memory (RRAM), oxide based RRAM (OxRAM), and electrically erasable programmable ROM (EEPROM). The non-volatile memory cells of the memory array170-bmay be configured to communicate data to the volatile memory of the memory array170-avia one or more signal paths (not shown).

The device memory controller155may include circuits, logic, or components operable to control operation of the memory device110. The device memory controller155may include the hardware, the firmware, or the instructions that enable the memory device110to perform various operations and may be operable to receive, transmit, or execute commands, data, or control information related to the components of the memory device110. The device memory controller155may be operable to communicate with one or more of the external memory controller120, the one or more memory dies160, or the processor125. In some examples, the device memory controller155may control operation of the memory device110described herein in conjunction with the local memory controller165of the memory die160.

The memory device110may receive data or commands or both from the host device105. For example, the memory device110may receive a write command indicating that the memory device110is to store data for the host device105or a read command indicating that the memory device110is to provide data stored in a memory die160to the host device105. The memory device110may receive a request for data (e.g., a read command) and the data may be authenticated (or not authenticated) by the host device. The memory device110may receive other notifications, commands, or requests from the host device105that relate to the authentication of data as described herein.

A local memory controller165(e.g., local to a memory die160) may include circuits, logic, or components operable to control operation of the memory die160. A local memory controller165may be operable to communicate (e.g., receive or transmit data or commands or both) with the device memory controller155. In some examples, a memory device110may not include a device memory controller155, and a local memory controller165, or the external memory controller120may perform various functions described herein. As such, a local memory controller165may be operable to communicate with the device memory controller155, with other local memory controllers165, or directly with the external memory controller120, or the processor125, or a combination thereof. Examples of components that may be included in the device memory controller155or the local memory controllers165or both may include receivers for receiving signals (e.g., from the external memory controller120), transmitters for transmitting signals (e.g., to the external memory controller120), decoders for decoding or demodulating received signals, encoders for encoding or modulating signals to be transmitted, or various other circuits or controllers operable for supporting described operations of the device memory controller155or local memory controller165or both.

The external memory controller120may be operable to enable communication of one or more of information, data, or commands between components of the system100or the host device105(e.g., the processor125) and the memory device110. The external memory controller120may convert or translate communications exchanged between the components of the host device105and the memory device110. In some examples, the external memory controller120or other component of the system100or the host device105, or its functions described herein, may be implemented by the processor125. For example, the external memory controller120may be hardware, firmware, or software, or some combination thereof implemented by the processor125or other component of the system100or the host device105. Although the external memory controller120is depicted as being external to the memory device110, in some examples, the external memory controller120, or its functions described herein, may be implemented by one or more components of a memory device110(e.g., a device memory controller155, a local memory controller165) or vice versa.

The components of the host device105may exchange information with the memory device110using one or more channels115. The channels115may be operable to support communications between the external memory controller120and the memory device110. Each channel115may be examples of transmission mediums that carry information between the host device105and the memory device. Each channel115may include one or more signal paths or transmission mediums (e.g., conductors) between terminals associated with the components of system100. A signal path may be an example of a conductive path operable to carry a signal. For example, a channel115may include a first terminal including one or more pins or pads at the host device105and one or more pins or pads at the memory device110. A pin may be an example of a conductive input or output point of a device of the system100, and a pin may be operable to act as part of a channel.

Channels115(and associated signal paths and terminals) may be dedicated to communicating one or more types of information. For example, the channels115may include one or more command and address (CA) channels186, one or more clock signal (CK) channels188, one or more data (DQ) channels190, one or more other channels192, or a combination thereof. In some examples, signaling may be communicated over the channels115using single data rate (SDR) signaling or double data rate (DDR) signaling. In SDR signaling, one modulation symbol (e.g., signal level) of a signal may be registered for each clock cycle (e.g., on a rising or falling edge of a clock signal). In DDR signaling, two modulation symbols (e.g., signal levels) of a signal may be registered for each clock cycle (e.g., on both a rising edge and a falling edge of a clock signal).

The system100may be an example of a system100used in an automotive application. For example, the host device105and the memory device110(e.g., the different memory die160of the memory device110) may control different applications and operations of a vehicle. Because vehicles are often powered on and off, the memory device110may include volatile memory to process data and non-volatile memory to store the data when the system100is powered off or in a reduced power state. Moreover, vehicles may be subject to strict timing constraints and thus it may be desirable to decrease the time it takes to perform certain operations. For example, by authenticating data of the memory device before executing an operation associated with the data (e.g., as opposed to authenticating all data upon booting the system100), the overall boot time of the system100(e.g., the time needed to start a vehicle) may be reduced.

To authenticate data associated with the memory device110, data and a corresponding hash may be communicated (e.g., transferred) from non-volatile memory of the memory array170-bto volatile memory of the memory array170-a. The hash, which may be referred to as a first hash, may be used by the host device105to authenticate the data. The data and hash may be transferred to the volatile memory of the memory array170-ain different scenarios. For example, in one scenario the data may be transferred when the system100is booted (e.g., powered on). Once stored in the volatile memory of the memory array170-a, the host device105may transmit a request to the memory device110for the data and/or the hash, and the data and the hash may be communicated to the host device via one or more channels115.

At the host device105, the data and corresponding hash may be stored, for example, to a local memory. As described herein, the external memory controller120may include local memory configured as cache storage. Once stored to the cache, the external memory controller120(or other component such as a hashing component (not shown)) may generate a second hash of the data. The second hash may be generated using a key and/or a secure MAC algorithm such as HMAC that is accessible only by the host device105(and thus inaccessible by the memory device110). If the second hash matches the first hash, the data may be authenticated and thus may be executed (e.g., an operation associated with the data may be executed) directly from the cache. By authenticating data before executing an operation associated with the data at the host device without necessarily authenticating the data at one or more of the memory dies160, the timing associated with booting the system100or the timing when exiting a low power state, such as a suspend-to-RAM mode, may be reduced.

In other examples, if the second hash does not match the first hash, the data may not be authenticated. To maximize safety and security of the system100, unauthenticated data may not be executed and the host device105may perform one or more additional steps and/or operations to authenticate the data or to operate the memory device110in a safe manner, such as requesting the data an additional time. Accordingly, in addition to reducing the timing associated with booting the system100, the methods for authenticating data as described herein may allow for an automotive system (e.g., such as system100) to operate safely and securely.

FIG.2illustrates an example of a system200that supports safety and security for memory in accordance with examples as disclosed herein. The system200may include a host device205and a memory device210. The host device205may be an example of a host device105and the memory device210may be an example of a memory device110as described with reference toFIG.1. The memory device210may include volatile memory215and/or non-volatile memory220, and the host device205may communicate with the volatile memory215and the non-volatile memory220via signal path275and signal path280, respectively. In some examples, each of the volatile memory215or the non-volatile memory220may be included in different memory devices110. The host device205may authenticate data associated with the memory device210in a more efficient and effective way, which may reduce the overall boot time or the timing associated with exiting a low power state, such as a suspend-to-RAM mode, of the memory system200.

The host device205may include components configured to authenticate data associated with the memory device210. The data associated with the memory device210may include, for example, program code or other types of data. In some examples, the host device205may include a controller225(e.g., a microcontroller225) configured to communicate with the volatile memory215and/or the non-volatile memory220of the memory device. The controller225may include (or may be coupled with or configured at least part as) a cache230(e.g., cache storage230) that is configured to store data associated with the volatile memory215during an authentication operation, among other things. In some examples, the cache230may also store one or more hashes (e.g., cryptographic hashes) associated with the data. The host device205may also include a controller235(e.g., a microcontroller235) that may include a cache240(e.g., cache storage240). The cache240may be configured to store data associated with the non-volatile memory220.

The host device205may include a hashing component245and a safety component250. The hashing component245may be referred to as a first circuit and may be configured to generate one or more hashes (e.g., cryptographic hashes, keyed hashes) during one or more operations, such as an authentication operation. The hashing component245may have access to (e.g., have stored or written) a key (e.g., a secret key, a key accessible to only the host device205, a key inaccessible to one or more memory devices210) and/or a secure MAC algorithm such as HMAC that may be used to generate the hash or hashes. The hashing component245may include storage configured to store the key or, in other examples, may assign (e.g., store) the key to the cache230or receive the key from one or more memory devices210.

As described herein, the memory device210may include volatile memory215and non-volatile memory220. The volatile memory215may include one or more memory cells, such as dynamic random-access memory (DRAM) cells. The non-volatile memory220may include one or more memory cells, such as flash (e.g., NAND) memory cells and/or FeRAM memory cells. In some examples, the volatile memory215may communicate with the non-volatile memory220via signal path270.

AlthoughFIG.2illustrates the volatile memory215and the non-volatile memory220as being part of a same memory device (e.g., memory device210), the volatile memory215and the non-volatile memory220may be included as part separate memory devices (e.g., separate memory devices210) or may otherwise be separate from each other. For example, the volatile memory215may be included in a first memory device210(not shown) and the non-volatile memory220may be included in a second memory device210(e.g., a different memory device, not shown). The first and second memory devices may communicate via a signal path, such as signal path270.

When the system200is off (e.g., powered down), data may be stored to the non-volatile memory220. When the system200is powered on (e.g., when the system is booted), the data may be communicated (e.g., transferred) from the non-volatile memory220to the volatile memory215. In some examples, the data may be communicated via the signal path270. In other examples, the data may be communicated from the non-volatile memory220to the volatile memory215via the host device205. For example, the data may be communicated via signal path280and may be received by a controller260(e.g., a non-volatile memory controller260). The data may be communicated via a bus265to a controller255(e.g., a volatile memory controller255) and to the volatile memory215via the signal path275. Once the data is stored to the volatile memory215and/or in the host device205, it may be authenticated by the host device205before an associated operation is executed. Authenticating the data before executing an associated operation may allow for the memory system200to selectively authenticate data, as opposed to authenticating all data of the volatile memory215in a single operation (e.g., when booting the system or when exiting a low-power mode). By selectively authenticating data—before executing an associated operation—the overall boot time of the system200and the timing when exiting a low-power mode, such as a suspend-to-RAM mode, may be reduced.

In other examples, the data may be communicated from the memory device210to the host device205when the memory device210comes out of a low power mode (e.g., a suspend mode, a suspend-to-RAM mode). In some examples, the memory device210may enter a suspend-to-RAM mode. During a suspend-to-RAM mode, the memory device210may operate in a lower-power state, and information on system configuration, open applications, and active files may be stored in the volatile memory215while other components of the memory system200are powered off. In some examples, when the memory device210exits the suspend-to-RAM mode (e.g., when the memory device changes its operational modes), some or all of the data stored at the volatile memory215while the memory device was in the low-power state may be authenticated. When the data is authenticated, it may be communicated directly from the volatile memory215of the memory device210to be authenticated. That is, the data may already be stored to the volatile memory and thus may not need to be communicated from the non-volatile memory220to the volatile memory215before being authenticated.

To authenticate data associated with the memory device210, the data communicated to the volatile memory215may be associated with a respective hash (e.g., a respective cryptographic hash, a respective keyed hash, a MAC such as an HMAC). The hash may be generated using a cryptographic hash function, such as SHA-256. In some examples, the hash associated with the data may be a complete hash (e.g., a complete version of the cryptographic hash) or may be a truncated version of the hash (e.g., a version of the hash that is shorter than a length of a full hash). To generate a truncated hash, a complete hash may be generated. The complete hash may be a first length (e.g., 64 or 256 bits). The complete hash may then be truncated to a length that is shorter than the first length. For example, a truncated hash may include 6 or 8 bits of a 64 bit full hash, or may include 64 (or fewer) bits of a 256 bit full hash, among other examples.

For example, a truncated version of the hash may include a portion (e.g., a subset) of a complete hash (e.g., 64 or fewer bytes of the complete hash). The data may be authenticated, as described herein, using either the complete hash or a truncated version of the hash. Additionally or alternatively, the hash may be generated and assigned to the data when the system200is booted (e.g., before the data is communicated to the volatile memory215). In other examples, the data and respective hashes may be stored to the non-volatile memory220and may be communicated to the volatile memory215when the system200is booted.

The host device205may utilize a hash-based message authentication code (HMAC) to authenticate the data associated with the memory device210. To authenticate the data using a HMAC, the data and associated hash (e.g., a keyed hash) may be communicated from the volatile memory215to the host device205. The host device205may transmit a request to the volatile memory215for the data, and the data and the hash may be communicated to the host device205. In some examples, the hash communicated from the volatile memory215to the host device and/or the hash generated by the hashing component245may be or may be referred to as a keyed hash. By communicating and/or generating keyed hashes, the integrity of the associated data may be verified in addition to the data being authenticated. Additionally or alternatively, the hash may be generated using a MAC algorithm such as a HMAC, which may further ensure the integrity and/or the authenticity of the data.

The data may be received by the controller225and, in some examples, the data and associated hash may be written to the cache230(e.g., to one or more lines of the cache230) by the controller225. For example, the data and hash may be written to the cache230as 32 bytes of data or 64 bytes of data (e.g., 32 or 64 bytes of program code) and 8 bytes of a hash. The cache230may include multiple portions (e.g., a set of lines) configured to store data and associated hashes. In some examples, each cache line of the set of cache lines may be assigned data and an associated hash to be authenticated. As described herein, upon being authenticated, the data may be executed directly from the cache line.

Before executing an operation associated with the data, the hashing component245may generate a hash (e.g., a second hash) of the data using a key and/or a secure MAC algorithm such as HMAC inaccessible to the memory device210. In some examples, a size of the generated hash may correspond to a size of the hash stored to the cache230while in other examples a size of the generated hash may be different than a size of the hash stored to the cache230. For example, if the hash stored to the cache230is a truncated hash (e.g., 6 or 8 bytes) then the hashing component245may generate a truncated hash. In other examples, if the hash stored to the cache230is a complete hash (e.g., a full hash), then the hashing component245may generate a complete hash. The generated hash may be compared with the hash received from the volatile memory215and stored to the cache230. If the hashes match, the data may be executed from the cache230(e.g., from the line of the cache230). If the hashes do not match, the data may have been altered (e.g., by a malicious attacker) and the safety component250may initiate one or more operations as described herein.

In some examples, the hashing component245may authenticate the data by generating a hash of the data using a key inaccessible to the one or more memory device210. For example, the key and/or the secure MAC algorithm such as HMAC, which may be referred to as a secret key or a private key, may be inaccessible to both the volatile memory215and the non-volatile memory220. In some examples, the secret key may be accessible only to the host device205(e.g., to the hashing component245of the host device205). In some examples, the key may be selected by the hashing component245based on one or more characteristics of the data to be authenticated. In other examples, the key may be specific to the hashing component245(e.g., the key may be the only key used by the hashing component) and may be identical to the key that was used to hash the data stored to the non-volatile memory220and/or the volatile memory215. The key may be stored to the hashing component245or, in some examples, may be stored to a different portion of the host device205(e.g., stored to an embedded trusted platform module (TPM) of the host device205).

One or more operations associated with different data (e.g., second data) may be executed before or concurrent with the data transmitted from the memory device210to the host device205being authenticated. For example, the controller225may execute operations associated with data stored to the volatile memory215while the hashing component245is authenticating data stored to the cache230.

In other examples, the controller225may execute a quantity of operations on data (e.g., second data) stored to the volatile memory215before the hashing component245authenticates data (e.g., first data) stored to the cache230. Executing operations on second data stored to the volatile memory215, which may be referred to as pipelining, may allow for the second data to be executed before other data is authenticated. In some examples, first data may be authenticated based on the occurrence of one or more triggers. For example, first data may be authenticated upon a threshold quantity of operations being executed by the controller225, after first data has been stored to the cache230for a threshold time, or other instances.

In some examples, the host device205may authenticate data associated with the memory device210using a message authentication code (MAC). To authenticate the data using a MAC, the data and hash may be communicated to the host device205along with a tag (e.g., a key). The tag may be used to authenticate that the message was received from the intended sender (e.g., from the memory device210). Accordingly, the host device205may verify the tag and, upon verifying the tag, may attempt to authenticate the data. To authenticate the data, the data and associated hash may be written to the cache230(e.g., to a line of the cache230) by the controller225. Before executing an operation associated with the data, the hashing component245may generate a hash of the data using a secret key or a private key, and the generated hash may be compared with the hash received from the volatile memory215. If the hashes match, the data may be executed from the cache230(e.g., from the line of the cache230).

Based on authenticating the data (or not authenticating the data—a failure in authenticating the data), the hashing component245may communicate with the safety component250via the signal path285. The safety component250, which may be referred to as a second circuit, may be configured to receive information (e.g., from the controller225and/or the hashing component245) pertaining to whether data is authenticated. For example, when data is not authenticated the safety component250may discard the data, may initiate a request for the data to be retransmitted from the memory device210for authentication, and/or may update an operational mode of the memory device210.

The hashing component245may communicate a notification to the safety component250that indicates whether the data was authenticated. If the data was authenticated, the safety component250may generate a notification to be transmitted to the memory device210indicating that the data was authenticated. If, however, the data was not authenticated, the safety component250may perform one or more operations to attempt to authenticate the data or to protect the memory device210from a malicious attack (e.g., due to the data not being authenticated). For example, the safety component250may instruct the controller225to refrain from executing the data and may initiate a backup operation of the data stored to the memory device210or may initiate a request for the data from one or more other components (e.g., volatile memory215, non-volatile memory220). In some examples, the safety component may instruct the controller to perform such operations by transmitting an indication to the controller. The indication may include or may refer to one or more bits that indicate a specific operation to perform (e.g., to perform a backup operation of the data stored to the memory device210).

If the safety component250receives a notification that data was not authenticated, the host device205may attempt to authenticate the data a second time (e.g., may reattempt to authenticate the data). For example, the safety component250may generate a request for the data and hash to be communicated (e.g., recommunicated) from the volatile memory215to the host device205. The request may be transmitted to the memory device210from the safety component250or from another component, such as the controller225. In addition to generating a request, the safety component250may be configured to discard the data (and hash) stored to the cache230that were not authenticated. Upon receiving the data and the hash recommunicated from the volatile memory215, the hashing component245may attempt to authenticate the data for a second time using the authentication procedures described herein. If the data is not authenticated for a second time, the safety component250may continue to generate requests for the data and hash to be communicated (e.g., recommunicated) from the volatile memory215to the host device205. In some examples, the data and hash may be recommunicated until the data is authenticated.

In some examples, the safety component250may be configured to change an operational mode of the memory device210, among other examples, based on the data not being authenticated. Because non-authenticated data may indicate a malicious attack on the memory device210, it may be desirable for the memory device210to operate in a safe state. A safe state, as used herein, may refer to the memory device210having reduced functionality. For example, the memory device210may operate in a read-only mode when in a safe state. To change an operational mode of the memory device210, the safety component250may generate a command, which may be transmitted to the memory device210from the safety component250or from another component, such as the controller225. In some examples, to change an operational mode of the memory device210, the safety component250may send an indication to another components, such as controller225, to facilitate generating a command, which may be transmitted to the memory device210from the host device205.

Upon authenticating data received form the memory device210, the controller225or hashing component245may execute the data stored to the cache230. By executing the data from the cache230after authenticating the data using a MAC or an HMAC, among other examples, for example before otherwise authenticating the data at the volatile memory215and/or the non-volatile memory220, the quantity of communications between the host device205and the memory device210may be reduced and the time and the operations needed to authenticate the data can be streamlined. Additionally, by authenticating the data before it is executed as opposed to authenticating the data each time the system200is booted the overall boot time of the system200may be reduced.

FIG.3illustrates an example of a process flow diagram300that supports safety and security for memory in accordance with examples as disclosed herein. The process flow diagram300may illustrate operations performed at or by a host device305, volatile memory315, and non-volatile memory320. The volatile memory315and the non-volatile memory320may be included in a single memory device310or may each be included in separate memory devices310that may be coupled with one another. The host device, memory device310, volatile memory315, and non-volatile memory320may be examples of a host device205, a memory device210, volatile memory215, and non-volatile memory220as described with reference toFIG.2. The host device305may be configured to authenticate data associated with the memory device310before executing an operation associated with the data, which may reduce the overall boot time of an associated memory system.

The process flow diagram300may illustrate data being authenticated by a host device305before one or more operations (e.g., a threshold quantity of operations) associated with the data is executed. As described with reference toFIG.2, the data to be authenticated may include, for example, program code or other types of data. Additionally or alternatively, the memory device310may include volatile memory315and non-volatile memory320. The volatile memory315may include one or more memory cells, such as DRAM cells and the non-volatile memory320may include one or more memory cells, such as FeRAM memory cells or flash (e.g., NAND) memory cells. The volatile memory315and non-volatile memory may be located within a memory device, such as memory device310or may be separate memory devices. In either instance, data stored to the volatile memory315may be communicated to the host device305for authentication before an associated operation is executed.

At325, data and associated hashes (e.g., cryptographic hashes) may optionally be stored to the non-volatile memory320. As described with reference toFIG.2, the associated hashes may be complete hashes or may be truncated (e.g., truncated relative to the complete hash). The data and associated hashes may be stored to the non-volatile memory in the event that the associated system is powered off. When the system is powered on (e.g., booted), the data may be communicated to the volatile memory315and/or the host device305to be authenticated.

At330, the volatile memory315and the non-volatile memory320may optionally be booted (e.g., powered on). In an automotive context, for example, the boot sequence may represent a vehicle starting. In some examples, data stored to the memory device310may be authenticated after at least part of the boot sequence and before an associated operation is executed. By authenticating data after the boot sequence, the time needed to boot the associated system (e.g., the memory device310) may be reduced, but by using a cryptographic representation of a MAC the data may otherwise be correctly authenticated. In some examples, a cryptographic representation of a MAC may refer to a hash (e.g., a cryptographic hash) of a message authentication code (MAC). The MAC may be hashed, using a hashing algorithm such as SHA-256. In some examples, the data may be authenticated using a cryptographic representation of a HMAC. In either example, the hash may be a full hash (e.g., a complete hash) or may be a truncated hash that includes a subset of the full hash. For example, a truncated hash may include a subset of bits of the complete hash, such as 8 bits.

At335, the data and respective hashes stored to the non-volatile memory320may be optionally communicated to the volatile memory315. In instances where the memory device310is already powered (e.g., when coming out of a low power mode), the data and associated hashes may not be communicated from the non-volatile memory320to the volatile memory315. However, due to operational characteristics of the volatile memory315, the data and associated hashes may be communicated from the non-volatile memory320to the volatile memory315, for example, upon booting the associated system (e.g., the memory device310). The data and associated hashes may be communicated from the non-volatile memory320to the volatile memory315directly (e.g., as shown inFIG.3) or by way of the host device305(not shown).

At340, the host device305may optionally transmit a request for data to the volatile memory315. The request may be for a subset of the data stored to the volatile memory315, which may be referred to as first data. The first data may be associated with a hash (e.g., a first hash) to be used for authenticating the data.

At345, the first data and first hash may be communicated from the volatile memory315to the host device305. The data may be received at, for example, a controller of the host device305(e.g., a controller225as described with reference toFIG.2).

At350, the host device305may write (e.g., store) the first data and the first hash to a cache. For example, the host device may write the first data and the first hash to a line in the cache. As described with reference toFIG.2, the cache may be a portion of a controller (e.g., a storage portion that may be configured as a cache) that is configured as temporary storage. When the first data and first hash are written to the cache, a component of the host device305may attempt to authenticate the first data before the first data is executed.

At355, the host device305(e.g., a hashing component245as described with reference toFIG.2) may generate a second hash of the first data using a secret key or a private key. The secret key or the private key may be known and/or accessible only to the host device305, and may not be known to the volatile memory315or the non-volatile memory320. The secret key or the private key may correspond to a key and/or a secure MAC algorithm such as HMAC used to hash the first data (e.g., a key used to generate the first hash), but may be private in order to reliably authenticate the first data.

At360, the host device305(e.g., a hashing component245as described with reference toFIG.2) may optionally assign (e.g., store) the second hash to the cache. The second hash may be assigned to the same line in the cache as the first data and the first hash. At365, the host device305(e.g., a hashing component245as described with reference toFIG.2) may compare the first hash with the second hash. Based on the comparison, the host device305may determine whether the first hash matches the second hash.

At370, the host device305may optionally execute one or more operations associated with additional data (e.g., second data) before authenticating the first data. The term second data may refer to any data stored to the volatile memory315other than the first data. The host device305may execute such operations before or concurrent with authenticating the first data. The host device305may include a counter that may be incremented each time second data is executed. When the counter satisfies a threshold value (e.g., when a threshold quantity of operations associated with the second data are executed), the first data may be authenticated.

At375, the host device305(e.g., a hashing component245as described with reference toFIG.2) may authenticate the first data. The authentication may be based on a comparison of the first hash and the second hash. For example, if the first hash matches the second hash, the first data may be authenticated and may ultimately be executed. However, if the first hash does not match the second hash, the first data may have been modified and thus may not be authenticated by the host device305.

At380, if the first data is authenticated (e.g., at375) then an operation associated with the first data may be executed. The first data may be executed from the cache line where it was previously stored (e.g., at350). By executing the data from the cache line, the host device305need not communicate with the volatile memory315to execute the data, thus reducing the overall time to execute the first data.

At385, if the first data is not authenticated (e.g., at375) then the host device305(e.g., a safety component250as described with reference toFIG.2) may optionally discard the first data. That is, when the first data is not authenticated the first data may have been altered or modified. Because it is undesirable to execute modified data, the host device305may discard the first data and attempt to authenticate (e.g., reauthenticate) first data stored to the volatile memory315.

At390, the host device305(e.g., a safety component250as described with reference toFIG.2) may optionally generate a message (e.g., a notification, an instruction, a request, etc.) to be communicated to the volatile memory315. The message may indicate that the first data was authenticated (e.g., at375) and/or executed (e.g., at380) or that the first data was not authenticated (e.g., at375). If the data was not authenticated, the message may request that the first data to be re-transmitted from the volatile memory315to the host device305for authentication. Additionally or alternatively, if the data was not authenticated, the message may instruct the volatile memory315to operate in a safe state (e.g., a safe mode), such as a read-only mode until the first data is authenticated.

At393, the volatile memory315may optionally change modes based on the message (e.g., transmitted at390). In some examples (not shown), the memory device310may change modes. The volatile memory315may change modes to a safe state (e.g., a safe mode) until the first data is authenticated or until another condition is met. As described herein, the safe state may include a read-only mode.

At395, the volatile memory315may optionally transmit (e.g., retransmit) the first data and the first hash based on the message (e.g., transmitted at390). The first data and the first hash may be retransmitted based on the first data not being authenticated (e.g., at375). Although not shown inFIG.3, the first data and the first hash may be written to a cache, a second hash may be generated, the second hash may be assigned (e.g., reassigned) to the cache, and/or the second hash may be compared with the first hash before the first data is executed.

At397, the host device305(e.g., a hashing component245as described with reference toFIG.2) may optionally attempt to authenticate the retransmitted first data. The authentication operation may be a same operation as at375, and may continue to occur until the first data is authenticated. In the event that subsequent authentication operations are performed on the first data, the operations at steps380,385,390,393, and395may optionally occur between each authentication operation. Once the first data is authenticated, an associated operation may be executed. Thus by authenticating the data before it is executed—as opposed to authenticating the data each time the memory device310is booted—the overall boot time of the associated system may be reduced.

FIG.4shows a block diagram400of a host device405that supports safety and security for memory in accordance with examples as disclosed herein. The host device405may be an example of aspects of a host device as described with reference toFIGS.2and3. The host device405may include a reception component410, a writing component415, a generation component420, an authentication component425, a transmission component430, a comparison component435, a determination component440, a truncating component445, an assigning component450, and an execution component455. Each of these modules may communicate, directly or indirectly, with one another (e.g., via one or more buses).

The reception component410may receive, by a host device from a volatile memory, data and a first hash associated with the data.

The writing component415may write, by the host device, the data and the first hash to a cache of the host device.

The generation component420may generate, by the host device, a second hash associated with the data using a key that is accessible to the host device and inaccessible to the volatile memory, the second hash including a cryptographic construction of a message authentication code. The generation component420may generate a third hash using the data and the key that is accessible to the host device and inaccessible to the volatile memory. In some cases, the second hash associated with the data is generated after the data and the first hash are written to the cache of the host device.

The authentication component425may authenticate, by the host device and before executing an operation associated with the data, the data from using the first hash received from the volatile memory and the second hash generated by the host device.

The transmission component430may transmit, by the host device to the volatile memory, a request for the data, where receiving the data and the first hash associated with the data is based on transmitting the request. The transmission component430may transmit an indication to a circuit of the host device to back up the data based on refraining from executing the one or more operations associated with the data.

The comparison component435may compare at least a portion of the first hash written to the cache of the host device with at least a portion of the second hash based on generating the second hash.

The determination component440may determine whether the portion of the first hash written to the cache of the host device matches the portion of the second hash based on the comparing. The determination component440may determine that the data is invalid based on determining that the portion of the first hash does not match the portion of the second hash. The determination component440may determine the key for generating the second hash based on a portion of the cache in which that the data and the first hash are written to, where generating the second hash is based on determining the key.

The truncating component445may truncate the third hash to generate the second hash. In some cases, the cryptographic construction of the message authentication code includes a hash-based message authentication code (HMAC). In some cases, the first hash includes a key.

The assigning component450may assign the second hash to a line in the cache of the host device, where the data is authenticated based on assigning the second hash to the line in the cache of the host device.

The execution component455may execute, by the host device, at least one operation associated with the data before authenticating the data using the first hash and the second hash. The execution component455may execute, by the host device, a quantity of operations associated with second data concurrent with authenticating the data using the first hash and the second hash, where authenticating, by the host device, the data using the first hash and the second hash is based on executing the at least one operation associated with the data, or executing the quantity of operations associated with second data, or both.

FIG.5shows a block diagram500of a memory device505that supports safety and security for memory in accordance with examples as disclosed herein. The memory device505may be an example of aspects of a memory device as described with reference toFIGS.2and3. The memory device505may include a reception component510, a transmission component515, an execution component520, and a hashing component525. Each of these modules may communicate, directly or indirectly, with one another (e.g., via one or more buses).

The reception component510may receive, at a volatile memory from a non-volatile memory, data and a hash associated with the data. The reception component510may receive, at the volatile memory from a host device, a request for the data. In some examples, the reception component510may receive, from the host device, an indication that the data was authenticated based on transmitting the data and the hash to the host device.

The transmission component515may transmit, to the host device, the data and the hash based on receiving the request for data.

The execution component520may execute at least one operation associated with the data after transmitting the data and the hash to the host device and before the data is authenticated. The execution component520may execute at least one operation associated with second data different than the data, where a threshold quantity of operations associated with the data or the second data are executed before the data is authenticated at the volatile memory. In some examples, the execution component520may execute data received from a cache line of the host device before the data is authenticated by the host device.

In some cases, the hash includes a hash-based message authentication code (HMAC), and where the data and the hash are transmitted to the host device for authentication using a key that is inaccessible to the volatile memory and the non-volatile memory. In some cases, the data and the hash are stored at the non-volatile memory prior to being received at the volatile memory, where the data and the hash associated with the data are received at the volatile memory during a boot sequence associated with a memory device including the volatile memory. In some cases, the data and the hash associated with the data are transmitted to the host device based on a change in an operational mode of a memory device including the volatile memory.

In some cases, the non-volatile memory stores a full hash associated with the data, and where the hash received by the volatile memory includes the full hash. In some cases, the request for data is received before the data and the hash are received from the non-volatile memory. In some cases, the volatile memory is located in a first memory device different than a second memory device that includes the non-volatile memory. In some cases, the hash associated with the data includes a key.

FIG.6shows a flowchart illustrating a method or methods600that supports safety and security for memory in accordance with aspects of the present disclosure. The operations of method600may be implemented by a host device or its components as described herein. For example, the operations of method600may be performed by a host device as described with reference toFIG.4. In some examples, a host device may execute a set of instructions to control the functional elements of the host device to perform the described functions. Additionally or alternatively, a host device may perform aspects of the described functions using special-purpose hardware.

At605, the host device may receive, from a volatile memory, data and a first hash associated with the data. The operations of605may be performed according to the methods described herein. In some examples, aspects of the operations of605may be performed by a reception component as described with reference toFIG.4.

At610, the host device may write the data and the first hash to a cache of the host device. The operations of610may be performed according to the methods described herein. In some examples, aspects of the operations of610may be performed by a writing component as described with reference toFIG.4.

At615, the host device may generate a second hash associated with the data using a key that is accessible to the host device and inaccessible to the volatile memory, the second hash including a cryptographic construction of a message authentication code. The operations of615may be performed according to the methods described herein. In some examples, aspects of the operations of615may be performed by a generation component as described with reference toFIG.4.

At620, the host device may authenticate, before executing an operation associated with the data, the data from using the first hash received from the volatile memory and the second hash generated by the host device. The operations of620may be performed according to the methods described herein. In some examples, aspects of the operations of620may be performed by an authentication component as described with reference toFIG.4.

In some examples, an apparatus as described herein may perform a method or methods, such as the method600. The apparatus may include features, means, or instructions (e.g., a non-transitory computer-readable medium storing instructions executable by a processor) for receiving, by a host device from a volatile memory, data and a first hash associated with the data, writing, by the host device, the data and the first hash to a cache of the host device, generating, by the host device, a second hash associated with the data using a key that is accessible to the host device and inaccessible to the volatile memory, the second hash including a cryptographic construction of a message authentication code, and authenticating, by the host device and before executing an operation associated with the data, the data from using the first hash received from the volatile memory and the second hash generated by the host device.

Some examples of the method600and the apparatus described herein may further include operations, features, means, or instructions for transmitting, by the host device to the volatile memory, a request for the data, where receiving the data and the first hash associated with the data may be based on transmitting the request.

In some examples of the method600and the apparatus described herein, authenticating the data may include operations, features, means, or instructions for comparing at least a portion of the first hash written to the cache of the host device with at least a portion of the second hash based on generating the second hash, and determining whether the portion of the first hash written to the cache of the host device matches the portion of the second hash based on the comparing.

Some examples of the method600and the apparatus described herein may further include operations, features, means, or instructions for determining that the data may be invalid based on determining that the portion of the first hash does not match the portion of the second hash, and transmitting an indication to a circuit of the host device to back up the data based on refraining from executing the one or more operations associated with the data.

In some examples of the method600and the apparatus described herein, generating the second hash may include operations, features, means, or instructions for generating a third hash using the data and the key that may be accessible to the host device and inaccessible to the volatile memory, and truncating the third hash to generate the second hash.

Some examples of the method600and the apparatus described herein may further include operations, features, means, or instructions for assigning the second hash to a line in the cache of the host device, where the data may be authenticated based on assigning the second hash to the line in the cache of the host device.

Some examples of the method600and the apparatus described herein may further include operations, features, means, or instructions for executing, by the host device, at least one operation associated with the data before authenticating the data using the first hash and the second hash; and executing, by the host device, a quantity of operations associated with second data concurrent with authenticating the data using the first hash and the second hash, where authenticating, by the host device, the data using the first hash and the second hash may be based on executing the at least one operation associated with the data, or executing the quantity of operations associated with second data, or both.

In some examples of the method600and the apparatus described herein, the cryptographic construction of the message authentication code includes a hash-based message authentication code (HMAC).

Some examples of the method600and the apparatus described herein may further include operations, features, means, or instructions for determining the key for generating the second hash based on a portion of the cache in which that the data and the first hash may be written to, where generating the second hash may be based on determining the key.

In some examples of the method600and the apparatus described herein, the second hash associated with the data may be generated after the data and the first hash may be written to the cache of the host device.

In some examples of the method600and the apparatus described herein, the first hash includes a key.

FIG.7shows a flowchart illustrating a method or methods700that supports safety and security for memory in accordance with aspects of the present disclosure. The operations of method700may be implemented by a memory device or its components as described herein. For example, the operations of method700may be performed by a memory device as described with reference toFIG.5. In some examples, a memory device may execute a set of instructions to control the functional elements of the memory device to perform the described functions. Additionally or alternatively, a memory device may perform aspects of the described functions using special-purpose hardware.

At705, the memory device may receive, at a volatile memory from a non-volatile memory, data and a hash associated with the data. The operations of705may be performed according to the methods described herein. In some examples, aspects of the operations of705may be performed by a reception component as described with reference toFIG.5.

At710, the memory device may receive, at the volatile memory from a host device, a request for the data. The operations of710may be performed according to the methods described herein. In some examples, aspects of the operations of710may be performed by a reception component as described with reference toFIG.5.

At715, the memory device may transmit, to the host device, the data and the hash based on receiving the request for data. The operations of715may be performed according to the methods described herein. In some examples, aspects of the operations of715may be performed by a transmission component as described with reference toFIG.5.

At720, the memory device may execute at least one operation associated with the data after transmitting the data and the hash to the host device and before the data is authenticated. The operations of720may be performed according to the methods described herein. In some examples, aspects of the operations of720may be performed by an execution component as described with reference toFIG.5.

In some examples, an apparatus as described herein may perform a method or methods, such as the method700. The apparatus may include features, means, or instructions (e.g., a non-transitory computer-readable medium storing instructions executable by a processor) for receiving, at a volatile memory from a non-volatile memory, data and a hash associated with the data, receiving, at the volatile memory from a host device, a request for the data, transmitting, to the host device, the data and the hash based on receiving the request for data, and executing at least one operation associated with the data after transmitting the data and the hash to the host device and before the data is authenticated.

Some examples of the method700and the apparatus described herein may further include operations, features, means, or instructions for executing at least one operation associated with second data different than the data, where a threshold quantity of operations associated with the data or the second data may be executed before the data may be authenticated at the volatile memory.

Some examples of the method700and the apparatus described herein may further include operations, features, means, or instructions for receiving, from the host device, an indication that the data was authenticated based on transmitting the data and the hash to the host device.

In some examples of the method700and the apparatus described herein, the hash includes a hash-based message authentication code (HMAC), and where the data and the hash may be transmitted to the host device for authentication using a key that may be inaccessible to the volatile memory and the non-volatile memory.

In some examples of the method700and the apparatus described herein, the data and the hash may be stored at the non-volatile memory prior to being received at the volatile memory, where the data and the hash associated with the data may be received at the volatile memory during a boot sequence associated with a memory device including the volatile memory.

In some examples of the method700and the apparatus described herein, the data and the hash associated with the data may be transmitted to the host device based on a change in an operational mode of a memory device including the volatile memory.

In some examples of the method700and the apparatus described herein, the non-volatile memory stores a full hash associated with the data, and where the hash received by the volatile memory includes the full hash.

In some examples of the method700and the apparatus described herein, the request for data may be received before the data and the hash may be received from the non-volatile memory.

In some examples of the method700and the apparatus described herein, the volatile memory may be located in a first memory device different than a second memory device that includes the non-volatile memory.

In some examples of the method700and the apparatus described herein, the hash associated with the data includes a key.

In some examples of the method700and the apparatus described herein, executing the at least one operation may include operations, features, means, or instructions for executing data received from a cache line of the host device before the data may be authenticated by the host device.

It should be noted that the methods described herein describe possible implementations, and that the operations and the steps may be rearranged or otherwise modified and that other implementations are possible. Further, portions from two or more of the methods may be combined.

An apparatus is described. The apparatus may include a controller including memory configured as a cache, where the controller is configured to receive data including a first hash from a volatile memory and to store the data and the first hash, a first circuit coupled with the controller and configured to generate a second hash associated with the data and to authenticate the data before executing a threshold quantity of operations associated with the data based on the first hash and the second hash, the second hash including a cryptographic construction of a message authentication code, and a second circuit coupled with the first circuit and configured to receive a notification from the first circuit about whether the data could be authenticated.

In some examples, the first circuit may be configured to store a key inaccessible to the volatile memory and to use the key to generate the second hash.

In some examples, the first circuit may be configured to determine the key for generating the second hash based on a portion of the cache that the data and the first hash may be stored in and to generate the second hash based on determining the key.

In some examples, the second hash includes a hash-based message authentication code, and where the first circuit may be configured to authenticate the data by comparing at least a portion of the first hash with at least a portion of the second hash.

In some examples, the notification includes an indication that the data was not authenticated, or where the second circuit may be configured to discard the data and the first hash based on the notification indicating that the data was not authenticated; and where the controller may be configured to transmit a request for second data associated with the first hash from the volatile memory based on the notification.

An apparatus is described. The apparatus may include a host device configured to be coupled with a non-volatile memory and a volatile memory, the host device including a controller configured to cause the apparatus to, write the data and the first hash to a cache of the host device, generate a second hash associated with the data using a key that is accessible to the host device and inaccessible to the volatile memory, the second hash including a cryptographic construction of a message authentication code, and authenticate the data before executing an operation associated with the data using the first hash and the second hash.

Some examples of the apparatus may include a first memory device coupled with the host device, where the first memory device includes the non-volatile memory, and a second memory device coupled with the first memory device and the host device, where the second memory device includes the volatile memory.

Some examples may further include transmit a request for the data from the host device to the volatile memory, where receiving the data and the first hash associated with the data may be based on transmitting the request.

Some examples may further include generating a third hash using the data and the key that may be accessible to the host device and inaccessible to the volatile memory, and truncate the third hash to generate the second hash.

Some examples may further include assigning the second hash to a line in the cache, where the data may be authenticated based on assigning the second hash to the line in the cache.

Some examples may further include executing at least one operation associated with the data before authenticating the data using the first hash and the second hash; execute at least one operation associated with second data before authenticating the data using the first hash and the second hash, and authenticate the data using the first hash and the second hash based on executing a threshold quantity of operations associated with the data, a threshold quantity of operations associated with the second data, or both.

Some examples may further include determining the key for generating the second hash based on a portion of the cache that the data and the first hash may be written to, where generating the second hash may be based on determining the key.

An apparatus is described. The apparatus may include a non-volatile memory, a volatile memory coupled with the non-volatile memory, a controller coupled with the volatile memory and the non-volatile memory, where the controller is configured to cause the apparatus to, receive, at the volatile memory, a request for the data, transmit the data and the hash based on receiving the request for data, and execute at least one operation associated with the data after transmitting the data and the hash and before the data is authenticated.

Some examples may further include executing at least one operation associated with second data different than the data, where a threshold quantity of operations associated with the data or the second data may be executed before the data may be authenticated at the volatile memory.

Some examples may further include receiving an indication that the data was authenticated based on transmitting the data and the hash, where executing at least one operation associated with the data before the data may be authenticated at the volatile memory may be based on transmitting the data and the hash.

Information and signals described herein may be represented using any of a variety of different technologies and techniques. For example, data, instructions, commands, information, signals, bits, symbols, and chips that may be referenced throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or particles, optical fields or particles, or any combination thereof. Some drawings may illustrate signals as a single signal; however, it will be understood by a person of ordinary skill in the art that the signal may represent a bus of signals, where the bus may have a variety of bit widths.

The terms “electronic communication,” “conductive contact,” “connected,” and “coupled” may refer to a relationship between components that supports the flow of signals between the components. Components are considered in electronic communication with (or in conductive contact with or connected with or coupled with) one another if there is any conductive path between the components that can, at any time, support the flow of signals between the components. At any given time, the conductive path between components that are in electronic communication with each other (or in conductive contact with or connected with or coupled with) may be an open circuit or a closed circuit based on the operation of the device that includes the connected components. The conductive path between connected components may be a direct conductive path between the components or the conductive path between connected components may be an indirect conductive path that may include intermediate components, such as switches, transistors, or other components. In some examples, the flow of signals between the connected components may be interrupted for a time, for example, using one or more intermediate components such as switches or transistors.

The term “coupling” refers to condition of moving from an open-circuit relationship between components in which signals are not presently capable of being communicated between the components over a conductive path to a closed-circuit relationship between components in which signals are capable of being communicated between components over the conductive path. When a component, such as a controller, couples other components together, the component initiates a change that allows signals to flow between the other components over a conductive path that previously did not permit signals to flow.

The term “isolated” refers to a relationship between components in which signals are not presently capable of flowing between the components. Components are isolated from each other if there is an open circuit between them. For example, two components separated by a switch that is positioned between the components are isolated from each other when the switch is open. When a controller isolates two components, the controller affects a change that prevents signals from flowing between the components using a conductive path that previously permitted signals to flow.

The devices discussed herein, including a memory array, may be formed on a semiconductor substrate, such as silicon, germanium, silicon-germanium alloy, gallium arsenide, gallium nitride, etc. In some examples, the substrate is a semiconductor wafer. In other examples, the substrate may be a silicon-on-insulator (SOI) substrate, such as silicon-on-glass (SOG) or silicon-on-sapphire (SOP), or epitaxial layers of semiconductor materials on another substrate. The conductivity of the substrate, or sub-regions of the substrate, may be controlled through doping using various chemical species including, but not limited to, phosphorous, boron, or arsenic. Doping may be performed during the initial formation or growth of the substrate, by ion-implantation, or by any other doping means.

A switching component or a transistor discussed herein may represent a field-effect transistor (FET) and comprise a three terminal device including a source, drain, and gate. The terminals may be connected to other electronic elements through conductive materials, e.g., metals. The source and drain may be conductive and may comprise a heavily-doped, e.g., degenerate, semiconductor region. The source and drain may be separated by a lightly-doped semiconductor region or channel. If the channel is n-type (i.e., majority carriers are electrons), then the FET may be referred to as a n-type FET. If the channel is p-type (i.e., majority carriers are holes), then the FET may be referred to as a p-type FET. The channel may be capped by an insulating gate oxide. The channel conductivity may be controlled by applying a voltage to the gate. For example, applying a positive voltage or negative voltage to an n-type FET or a p-type FET, respectively, may result in the channel becoming conductive. A transistor may be “on” or “activated” when a voltage greater than or equal to the transistor's threshold voltage is applied to the transistor gate. The transistor may be “off” or “deactivated” when a voltage less than the transistor's threshold voltage is applied to the transistor gate.

The description set forth herein, in connection with the appended drawings, describes example configurations and does not represent all the examples that may be implemented or that are within the scope of the claims. The term “exemplary” used herein means “serving as an example, instance, or illustration,” and not “preferred” or “advantageous over other examples.” The detailed description includes specific details to providing an understanding of the described techniques. These techniques, however, may be practiced without these specific details. In some instances, well-known structures and devices are shown in block diagram form to avoid obscuring the concepts of the described examples.

In the appended figures, similar components or features may have the same reference label. Further, various components of the same type may be distinguished by following the reference label by a dash and a second label that distinguishes among the similar components. If just the first reference label is used in the specification, the description is applicable to any one of the similar components having the same first reference label irrespective of the second reference label.

Information and signals described herein may be represented using any of a variety of different technologies and techniques. For example, data, instructions, commands, information, signals, bits, symbols, and chips that may be referenced throughout the above description may be represented by voltages, currents, electromagnetic waves, magnetic fields or particles, optical fields or particles, or any combination thereof.

The various illustrative blocks and modules described in connection with the disclosure herein may be implemented or performed with a general-purpose processor, a DSP, an ASIC, an FPGA or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof designed to perform the functions described herein. A general-purpose processor may be a microprocessor, but in the alternative, the processor may be any processor, controller, microcontroller, or state machine. A processor may also be implemented as a combination of computing devices (e.g., a combination of a DSP and a microprocessor, multiple microprocessors, one or more microprocessors in conjunction with a DSP core, or any other such configuration).

The functions described herein may be implemented in hardware, software executed by a processor, firmware, or any combination thereof. If implemented in software executed by a processor, the functions may be stored on or transmitted over as one or more instructions or code on a computer-readable medium. Other examples and implementations are within the scope of the disclosure and appended claims. For example, due to the nature of software, functions described herein can be implemented using software executed by a processor, hardware, firmware, hardwiring, or combinations of any of these. Features implementing functions may also be physically located at various positions, including being distributed such that portions of functions are implemented at different physical locations. Also, as used herein, including in the claims, “or” as used in a list of items (for example, a list of items prefaced by a phrase such as “at least one of” or “one or more of”) indicates an inclusive list such that, for example, a list of at least one of A, B, or C means A or B or C or AB or AC or BC or ABC (i.e., A and B and C). Also, as used herein, the phrase “based on” shall not be construed as a reference to a closed set of conditions. For example, an exemplary step that is described as “based on condition A” may be based on both a condition A and a condition B without departing from the scope of the present disclosure. In other words, as used herein, the phrase “based on” shall be construed in the same manner as the phrase “based at least in part on.”

The description herein is provided to enable a person skilled in the art to make or use the disclosure. Various modifications to the disclosure will be apparent to those skilled in the art, and the generic principles defined herein may be applied to other variations without departing from the scope of the disclosure. Thus, the disclosure is not limited to the examples and designs described herein, but is to be accorded the broadest scope consistent with the principles and novel features disclosed herein.