Qualcomm Incorporated

Satish Anand

Billy Brumley

Vinoth Kumar Deivasigamani

Bohuslav Rychlik

Wesley James Holland

Rashmi Kulkarni

Simon Peter William Booth

Huang Huang

Jeffrey Shabel

Benish Babu

Songhe Cai

Ling Feng Huang

Hung Vuong

Chih-Chi Cheng

Baranidharan Muthukumaran

Data may be purged from a memory device in a manner confined to a particular partition of a memory device having two or more partitions. Logical memory blocks may be de-mapped from physical memory blocks of a first storage partition of the memory device. De-mapped physical memory blocks of the first storage partition may be listed in a local de-mapped block list uniquely associated with the first storage partition. A local purge command may be received from a host device. In response to the local purge command, at least a portion of the de-mapped physical memory blocks listed only in the local de-mapped block list are purged.

Flash memory local purge

In some aspects, the present disclosure provides a method for managing a command queue in a universal flash storage (UFS) host device. The method includes determining to power on a first subsystem of a system-on-a-chip (SoC), wherein the determination to power on the first subsystem is made by a second subsystem of the SoC based on detection of user identity data contained in a first image frame during an initial biometric detection process. In certain aspects, the second subsystem is configured to operate independent of the first subsystem and control power to the first subsystem. In certain aspects, the second subsystem includes a second optical sensor, a set of ambient sensors, and a second processor configured to detect, via a set of ambient sensors, an event comprising one or more of an environmental event outside of the device or a motion event of the device.

Multi-stage biometric authentication

One feature pertains to an efficient procedure for storing data units in a storage device that allows for authentication of data units to prevent rollback attacks and other attacks such as cut-and-paste attacks. In one aspect, a message authentication code (MAC) is generated or otherwise obtained based on a primary key, a data unit to be stored, a corresponding index for the data unit (such as a page index) and a secondary key for the corresponding data unit, which is generated for each new write operation. The MAC and the corresponding data unit are stored in a bulk storage device such as a relatively insecure off-chip storage. Secondary keys are stored in a separate storage device such as a more secure on-chip storage. In some examples, new secondary keys are generated upon each data write based on a non-zero random or pseudorandom value.

Data integrity protection from rollback attacks for use with systems employing message authentication code tags

One feature pertains to encrypting data to improve data confidentiality. In one aspect, a modified form of XTS encryption is provided for use with reduced-round block ciphers. A data unit index of data to be applied to the reduced-round cipher is encrypted under a secret key to generate or otherwise obtain a modified secret key for applying to the reduced-round cipher. That is, data to be encrypted by the reduced-round cipher is not encrypted under a static key but is instead encrypted under a dynamic key that varies according to the index of the data. If an attacker were to derive the value of the key applied to the reduced-round cipher by analyzing data encrypted by the cipher, the attacker would only obtain the dynamic key corresponding to one particular data unit index, rather than a global static key applied to an entire address space. Decryption procedures are also described.

Dynamic encryption keys for use with XTS encryption systems employing reduced-round ciphers

Growing community of inventors

San Diego, CA, United States of America

Satish Anand