公开(公告)号：US11487677B2

公开(公告)日：2022-11-01

申请号：US16996304

申请日：2020-08-18

Applicant: SAMSUNG ELECTRONICS CO., LTD.

Inventor： Min Gon Shin ,  Ji Soo Kim ,  Seung-Jae Lee ,  Ye Jin Yoon ,  Hwa Soo Lee

IPC: G06F12/14 ,  G06F13/16 ,  G06F21/31 ,  G06F13/42 ,  G06F21/79 ,  G06F13/12

Abstract: A storage device including: a bridge board to receive a first command; an authenticator to receive user information; and a memory device to receive the first command from the bridge board, the memory device includes a memory controller which determines a status of the memory device, provides status information including the determined status of the memory device to the bridge board, determines the status of the memory device as an unlocked status or a locked status, the bridge board includes a transceiver which communicates with the host through an interface, a register which stores interface information, and a bridge board controller which generates a first response to the first command in a format corresponding to the interface using the interface information, and provides the first response to a host, the first response includes a status bit which inhibits or allows a write operation with respect to the memory device.

公开(公告)号：US12045472B2

公开(公告)日：2024-07-23

申请号：US17744918

申请日：2022-05-16

Applicant: Samsung Electronics Co., Ltd.

Inventor： Hee Seok Eun ,  Ji Soo Kim

IPC: G06F3/06 ,  G06F21/60 ,  H03M13/11 ,  H03M13/15

CPC classification number: G06F3/0623 ,  G06F3/0659 ,  G06F3/0664 ,  G06F3/0679 ,  G06F21/602 ,  H03M13/1151 ,  H03M13/1575

Abstract: A storage device includes a storage controller, which is configured to receive a command generated by a first virtual machine, from a host, and a non-volatile memory device, which is configured to store first data for the command. The command includes one of a retain command, which is generated to command the storage controller to retain the first data in the non-volatile memory device, or an erase command, which is generated to command the storage controller to erase the first data from the non-volatile memory device, when access between the first virtual machine and the storage controller at least temporarily interrupted.

公开(公告)号：US11914879B2

公开(公告)日：2024-02-27

申请号：US17724857

申请日：2022-04-20

Applicant: Samsung Electronics Co., Ltd.

Inventor： Moon Chan Park ,  Ji Soo Kim ,  Youn Sung Chu

IPC: G06F3/06

CPC classification number: G06F3/064 ,  G06F3/0622 ,  G06F3/0656 ,  G06F3/0658 ,  G06F3/0679

Abstract: A storage controller and a storage system comprising the same are provided. Provided is a device security manager configured to set a first device security zone to allow a first tenant to access first tenant data stored in a non-volatile memory, receive access information from a host device and writing the received access information in a mapping table, wherein the access information includes a first host memory address in which the first tenant data is stored in the host device, a first namespace identifier for identifying the first tenant data stored in the non-volatile memory, a first logic block address corresponding to the first namespace identifier, and an encryption key, encrypt the first tenant data by using the encryption key, and write the encrypted first tenant data in the first device security zone of the non-volatile memory.

公开(公告)号：US11644983B2

公开(公告)日：2023-05-09

申请号：US17514059

申请日：2021-10-29

Applicant: Samsung Electronics Co., Ltd.

Inventor： Myeong Jong Lee ,  Hyun Sook Hong ,  Ji Soo Kim ,  Seung-Jae Lee

IPC: G06F3/06

CPC classification number: G06F3/0622 ,  G06F3/0655 ,  G06F3/0679

Abstract: A storage device includes a non-volatile memory configured to store an encryption key and a data key encrypted with the encryption key, writes data using the data key, and reads the data using the data key; and a storage controller, wherein the storage controller is configured to receive a first security setting command which allows access to the data key, using a first password, generates a first key on the basis of the first password in response to the first security setting command, encrypts the encryption key with the first key to generate a first encrypted encryption key, encrypts the first key with the encryption key to generate an encrypted first key, and stores the first encrypted encryption key and the encrypted first key in the non-volatile memory.

公开(公告)号：US20230139519A1

公开(公告)日：2023-05-04

申请号：US17744918

申请日：2022-05-16

Applicant: Samsung Electronics Co., Ltd.

Inventor： Hee Seok Eun ,  Ji Soo Kim

IPC: G06F3/06 ,  G06F21/60 ,  H03M13/15 ,  H03M13/11

Abstract: A storage device includes a storage controller, which is configured to receive a command generated by a first virtual machine, from a host, and a non-volatile memory device, which is configured to store first data for the command. The command includes one of a retain command, which is generated to command the storage controller to retain the first data in the non-volatile memory device, or an erase command, which is generated to command the storage controller to erase the first data from the non-volatile memory device, when access between the first virtual machine and the storage controller at least temporarily interrupted.

公开(公告)号：US20150089247A1

公开(公告)日：2015-03-26

申请号：US14494106

申请日：2014-09-23

Applicant: Samsung Electronics Co., Ltd.

Inventor： Bo Gyeong KANG ,  Ji Soo Kim ,  Jae Bum Lee

IPC: G06F21/78 ,  G06F12/14 ,  G06F21/44

CPC classification number: G06F21/78 ,  G06F12/1408 ,  G06F21/305 ,  G06F2212/214

Abstract: A security method based on a memory unit for a user is provided. The security method includes receiving, from a server, a security code including a security service command for the user terminal and verification information certifying the security service command; determining whether the received verification information matches verification information stored in the memory unit; and performing, by the memory unit, a security action corresponding to the security service command, when the received verification information matches the stored verification information.

Abstract translation: 提供了一种基于用户的存储单元的安全方法。 该安全方法包括：从服务器接收包括用户终端的安全服务命令的安全码，以及验证安全服务命令的验证信息; 确定所接收的验证信息是否与存储在存储单元中的验证信息相匹配; 以及当所接收的验证信息与所存储的验证信息相匹配时，由所述存储器单元执行与所述安全服务命令相对应的安全动作。

公开(公告)号：US12219049B2

公开(公告)日：2025-02-04

申请号：US17842201

申请日：2022-06-16

Applicant: Samsung Electronics Co., Ltd.

Inventor： Mun Gyu Bae ,  Ji Soo Kim ,  Hyun Soo Kwon ,  Youn Sung Chu

IPC: H04L9/08 ,  G06F21/78 ,  H04L9/32

Abstract: A storage device having improved security reliability includes a non-volatile memory, and a storage controller configured to control an operation of the non-volatile memory, generate a key material, receive a key identification (ID) from a firmware, determine whether a salt value matching the key ID is stored in the non-volatile memory, generate a private key using the salt value stored in the non-volatile memory and the key material in response to determining that the salt value matching the key ID is stored in the non-volatile memory, and, in response to determining that the sale value matching the key ID is not stored in the non-volatile memory, receive a salt value from the firmware and generate the private key using the salt value from the firmware and the key material, and store the salt value used for generating the private key in the non-volatile memory.

公开(公告)号：US11755315B2

公开(公告)日：2023-09-12

申请号：US16543533

申请日：2019-08-17

Applicant: SAMSUNG ELECTRONICS CO., LTD.

Inventor： Hyun Sook Hong ,  Ji Soo Kim ,  Seung Jae Lee ,  Seok Gi Hong

IPC: G06F8/65 ,  G06F9/4401 ,  H04L9/30 ,  H04L9/32 ,  G06F21/57

CPC classification number: G06F8/66 ,  G06F9/4401 ,  G06F21/575 ,  H04L9/30 ,  H04L9/3242 ,  H04L9/3247 ,  G06F2221/034

Abstract: A boot Read-Only Memory (ROM) update method and a boot-up method of an embedded system are provided. The boot Read-Only Memory (ROM) update method of an embedded system including a memory and a ROM. The memory includes a user data area and a boot ROM area that includes a first area and a second area. The ROM copies a first boot code from the boot ROM area during boot-up. The boot ROM update method includes writing a second boot code to the second area in response to a first ROM update command. The second boot code includes a second boot ROM image and a second signature for the second boot ROM image. The method also includes verifying validity of the second signature and, if the second signature is valid, swapping the first area and the second area. The first boot code is disposed in the first area and includes a first boot ROM image and a first signature for the first boot ROM image.

公开(公告)号：US20230195332A1

公开(公告)日：2023-06-22

申请号：US17815245

申请日：2022-07-27

Applicant: Samsung Electronics Co., Ltd.

Inventor： Kyung-Jin Lee ,  Ji Soo Kim ,  Kyung-Woo Noh ,  Young Hyun Ji

IPC: G06F3/06

CPC classification number: G06F3/0623 ,  G06F3/0652 ,  G06F3/0679

Abstract: A storage device, a method of operating the storage device, and a method of operating a host device are provided. The storage device includes a nonvolatile memory (NVM) and a storage controller controlling the nonvolatile memory. The storage controller is configured to receive a command from a host device giving instructions to sanitize data with the use of a cryptographic erase. The storage controller is also configured to, in response to a request from the host device, transmit to the host device a first verification value indicative of whether a first media encryption key (MEK) stored in the NVM has been deleted and a second verification value indicative of whether a second MEK, which is different from the first MEK, has been generated and stored in the NVM.

公开(公告)号：US11520896B2

公开(公告)日：2022-12-06

申请号：US17237532

申请日：2021-04-22

Applicant: SAMSUNG ELECTRONICS CO., LTD.

Inventor： Jin Taek Kwon ,  Ye Jin Yoon ,  Seung-Jae Lee ,  Ji Soo Kim

IPC: G06F21/57 ,  G06F21/64 ,  G06F21/79

Abstract: A storage device is provided. The storage device includes a boot ROM stores a plurality of public keys and a boot ROM image, an OTP memory identifies a first public key among the plurality of public keys, a first memory including a first area the stores the plurality of public keys and a flash boot image different from the boot ROM image, and a second area that stores a first boot signature corresponding to the flash boot image, a second memory including a first firmware image including a first firmware signature, and a memory controller that receives a second firmware image including a second firmware signature and a second boot signature, receives a second public key among the plurality of public keys and the flash boot image based on the second firmware image being received, and write the second boot signature in the second area of the first memory.