TWI789082B - Secure memory card and control method thereof - Google Patents

Abstract

A secure memory card and control method thereof, the secure memory card includes a non-volatile memory device, a secure element, and a non-volatile memory controller in communication with the non-volatile memory device and the secure element. The non-volatile memory controller is adapted to be used with a host, and triggered to interact with the secure element to conduct a securing operation in response to a single command received from the host, and the single command takes a single instruction cycle.

Description

Memory card device with information security and chip control method applied therein

This case is a memory card device with information security and a chip control method applied therein, especially a memory card device with information security built in a security chip and a chip control method applied therein.

With the popularization of information technology, many important information (various account numbers and passwords) that need to be kept secret will be stored together with general information in the information device on the user side, such as common personal computers, notebook computers or the more popular smart phones today. In mobile phones, and portable devices will exchange data or conduct financial transactions with other information devices through various data transmission channels (such as USB interface or Internet, etc.). Therefore, if important information that needs to be kept confidential is not properly stored, such information is likely to be stolen and cause important losses. However, today's information devices in the hands of users seldom have such functions. Only a few newly launched information devices may have built-in data security modules to complete the function of data security storage, and most of the existing information processing devices The data encryption function cannot be obtained through a simple installation.

In order to effectively improve this deficiency, the existing old organic type can be easily added with the function of safe storage of data. As shown in Figure 1, a memory card 11 with information security function has been developed, which is mainly based on the common memory Card (such as Secure Digital Memory Card (SD for short) microSD card) and a CC EAL5+ certified security chip (Secure Element) 119 to provide password services, key management, data storage and other functions. As can be seen from the figure, when the application program 100 in the host (host) 10 has a demand for data encryption, the application program 100 can issue an encryption command, and the file system (file system) 101 can respond to the request The encryption command issued by the application program 100 is to send a preset special combination 102 to the flash memory controller (Flash memory controller) 110 in the memory card 11. The default special combination 102 can be composed of multiple and continuous Composed of read and write commands, for example, the preset special combination 102 may be consecutively performing a read command (Read command) twice and a write command (Write command) once. The preset special combination 102 will trigger the flash memory controller 110 to establish a vendor command tunnel (VC tunnel) 103 with the file system 101 . After the provider command pipeline 103 is established, a write command (Write command) sent by the file system (file system) 101 through the provider command pipeline 103 will be recognized by the flash memory controller 110 as a A vendor command (Vendor command), so when the vendor command (Vendor command) is defined in advance as an action related to data encryption, the flash memory controller 110 can be used to complete the corresponding encryption action of the encryption command. For example, the content of the vendor command (Vendor command) is: make the flash memory controller 110 transmit a relevant piece of data in the write command to the security chip 119 for encryption, and then pass through the vendor command pipeline 103 after encryption Send back to the application program or save to flash memory 111.

However, it can be seen from the above description that the usual method is to use the preset special combination 102 of multiple continuous read and write commands to further define the vendor command (Vendor command), and then "establish a vendor command pipeline" for subsequent encryption command, and the flash memory controller 110 and the security chip 119 communicate with the traditional ISO-7816 smart card communication protocol. But preset special combination 102 It is too complicated to waste instruction cycles, and the highest operating frequency of ISO-7816 can only reach 1.25MHz, and the configuration of three pins (IO/CLK/RST) can only carry out half-duplex (Half-duplex) signal transmission, Too slow data processing speed can no longer meet today's requirements.

In order to improve the lack of the above-mentioned conventional means, the inventors have developed the following technical concepts and implementation means. The present invention relates to a memory card device with information security, which is used to complete signal connection with a host, and the memory card device includes: a non-volatile memory device, which is used to store data; a security chip; and a A non-volatile memory controller, signally connected to the host, the non-volatile memory device, and the security chip, the non-volatile memory controller communicates with the security chip in response to a single command of a single command cycle issued by the host interactive.

According to the above idea, the memory card device with information security described in this case, wherein the single command of the single command cycle is a file system in the host computer to write a first special address to the non-volatile memory controller input command, the first special address is located in the range of a reserved area in the non-volatile memory device, when a firmware in the non-volatile memory controller recognizes the first special address, it will set the security chip encryption mode.

According to the above idea, the memory card device with information security described in this case, wherein the security chip has multiple encryption modes, and the write command of the first special address is used to set the security chip to a first encryption mode, a The write command of the second special address sets the security chip to a second encryption mode.

According to the above idea, in the memory card device with information security described in this case, the single command of the single command cycle is a file system in the host computer for the non-volatile memory controller A write command for writing a first specific data to a third special address, the third special address is located in a reserved area range in the non-volatile memory device, a firmware in the non-volatile memory controller When the body recognizes the third special address, a set of parameters of the security chip will be rewritten, and the content of the first specific data is the parameter value to be rewritten.

According to the above idea, the memory card device with information security described in this case, wherein the single command of the single command cycle is a file system in the host to write a fourth special address to the non-volatile memory controller input command, the fourth special address is located in the range of a reserved area in the non-volatile memory device, when a firmware in the non-volatile memory controller recognizes the fourth special address, it will be used from the security Read the specific information of the security chip from the chip.

According to the above idea, in the memory card device with information security described in this case, the specific information of the security chip is a firmware version, and the security chip sends the firmware version of the security chip back to the non-volatile memory controller, and The firmware then writes the firmware version of the security chip into the reserved area or temporarily stores it in the non-volatile memory controller, and the file system then transfers the firmware version from the reserved area or the non-volatile memory controller The firmware version of the security chip is read back.

According to the above idea, in the memory card device with information security described in this case, the single command of the single command cycle is that a file system in the host computer writes a fifth special address to the non-volatile memory controller. The write command of the second specific data, the fifth special address is located in a reserved area in the non-volatile memory device, when a firmware in the non-volatile memory controller recognizes the fifth special address, Drive the security chip to encrypt the second specific data and then send the encrypted data back to the non-volatile memory controller, and the firmware writes the encrypted data into the reserved area or temporarily stores it in the non-volatile memory controller In the volatile memory controller, the file system reads back the encrypted data from the reserved area or the non-volatile memory controller.

According to the above idea, in the memory card device with information security described in this case, the single command of the single command cycle is a data access command to a special address.

According to the above idea, in the memory card device with information security described in this case, the form of the special address is a preset multi-digit number.

According to the above idea, in the memory card device with information security described in this case, the special address is dynamically selected from a plurality of multi-digit numbers conforming to a specific formula.

Another aspect of this case is a chip control method applied between a host and a memory card device with information security. The memory card device with information security includes a non-volatile memory device, a security chip and a For a non-volatile memory controller, the control method includes the following steps: the host sends a single command of a single command cycle to the non-volatile memory controller; and the non-volatile memory controller responds to the single command of the single command cycle and interact with the security chip.

According to the above idea, the chip control method described in this case, wherein the single command of the single command cycle is a file system in the host computer performing a write command to a first special address for the non-volatile memory controller, the The first special address is located in a reserved area in the non-volatile memory device. When a firmware in the non-volatile memory controller recognizes the first special address, it will set the encryption mode of the security chip.

According to the above idea, the chip control method described in this case, wherein the security chip has a plurality of encryption modes, the write command of the first special address is used to set the security chip to a first encryption mode, and a second special address The write command then sets the security chip to a second encryption mode.

According to the above idea, the chip control method described in this case, wherein the single command of the single command cycle is a file system in the host computer to write a first specific data to a third special address for the non-volatile memory controller write command, the third special address is located in the non-volatile memory In the range of a reserved area in the memory device, when a firmware in the non-volatile memory controller recognizes the third special address, it will rewrite a set of parameters of the security chip, and the content of the first specific data will be is the parameter value to be overwritten.

According to the above idea, the chip control method described in this case, wherein the single command of the single command cycle is a file system in the host to perform a write command to a fourth special address for the non-volatile memory controller, the The fourth special address is located in the range of a reserved area in the non-volatile memory device. When a firmware in the non-volatile memory controller recognizes the fourth special address, it will be used to read from the security chip Information specific to the security chip.

According to the above idea, the chip control method described in this case, wherein the specific information of the security chip is a firmware version, the security chip sends the firmware version of the security chip back to the non-volatile memory controller, and the firmware is then The firmware version of the security chip is written into the reserved area, and the file system reads back the firmware version of the security chip from the reserved area.

According to the above idea, the chip control method described in this case, wherein the single command of the single command cycle is a file system in the host computer to write a second specific data to a fifth special address for the non-volatile memory controller write command, the fifth special address is located in a reserved area in the non-volatile memory device, when a firmware in the non-volatile memory controller recognizes the fifth special address, it will drive the security After the chip encrypts the second specific data, the encrypted data is sent back to the non-volatile memory controller, and the firmware writes the encrypted data into the reserved area, and the file system reads the encrypted data from the reserved area Read encrypted data back.

According to the above idea, the chip control method described in this case, wherein the single command of the single command cycle is a data access command to a special address.

According to the above idea, in the chip control method described in this case, the form of the special address is a preset multi-digit number.

According to the above idea, the chip control method described in this case, wherein the special address is dynamically selected from a plurality of multi-bit numbers conforming to a specific formula.

In order to have a clearer understanding of the above-mentioned idea of the present invention, a number of embodiments are specifically cited below, and detailed descriptions are given below with corresponding drawings.

11: memory card

119: security chip

10: Host

100: Apps

101: File System

110: Flash memory controller

102:Preset special combination

103:Vendor Command Pipeline

111: Flash memory

21:Memory card device

20: Host

210: Non-volatile memory device

211: Security chip

212: Non-volatile memory controller

2120:Firmware

201: Application

202: File system

2100: reserved area

2101: formal data storage area

FIG. 1 is a functional block schematic diagram of a conventional memory card with an information security function.

Fig. 2, it is the functional block schematic diagram of the memory card device with encryption function developed in this case.

3a, 3b, and 3c are functional block schematic diagrams and flowchart timing diagrams of the first embodiment of the encryption-related program proposed in this case.

4a, 4b, and 4c are functional block schematic diagrams and flowchart timing diagrams of the second embodiment of the encryption-related program proposed in this case.

5a, 5b, and 5c are functional block schematic diagrams and flowchart timing diagrams of the third embodiment of encryption-related programs proposed in this case.

6a, 6b, and 6c are functional block schematic diagrams and flowchart timing diagrams of the fourth embodiment of encryption-related programs proposed in this case.

Fig. 7 is a schematic diagram of another flow sequence of encryption-related procedures proposed in this case.

Fig. 8 is a schematic diagram of another flow sequence of encryption-related procedures proposed in this case.

In order to improve the deficiency of the above-mentioned known means, this case is to develop a functional block schematic diagram of a memory card device with information security as shown in Figure 2. The memory card device 21 with information security is connected with a host 20 to complete the signal connection (such as Wired signal connection method with metal pins or wireless signal connection method such as Bluetooth or wireless network). And its memory card device 21 mainly comprises non-volatile memory device 210, security chip 211 and non-volatile memory controller 212, and wherein non-volatile memory device 210 is used for storing data, and this security chip 211 can then be It is a security chip certified by CC EAL5+ (for example, a security chip produced by Infineon), which is used to provide functions such as password service, key management, and data storage. As for the non-volatile memory controller 212, the signals are connected to the host computer 20, the non-volatile memory device 210 and the security chip 211. The non-volatile memory controller 212 developed in this case can respond to a security chip control command To interact with the security chip 211, the security chip control command can be a single command in a single command cycle. In this embodiment, the non-volatile memory controller 212 is provided with a firmware 2120 to trigger the security chip 211 to perform encryption-related procedures in response to a single command in a single command cycle.

Specifically, when the application program 201 in the host computer 20 needs to perform various programs interacting with the security chip 211, the application program 201 first commands the file system (file system) 202 to execute the non-volatile memory controller 212 Perform a write command (Write Command) of a special address. This command is one of the above-mentioned security chip control commands, and it is also a single command in a single command cycle. The form of the above-mentioned special address can be a preset multi-bit number, and the special address points to a certain reserved area 2100 in the non-volatile memory device 210 as shown in the figure. The firmware 2120 in the non-volatile memory controller 212 is set to have an address decoding function that can recognize the special address. Therefore, when the write command (Write Command) of the special address is decoded by the firmware 2120 to identify the special address, the firmware 2120 can interact with the security chip 211, such as triggering the security chip 211 to perform encryption. close the program. In addition, the non-volatile memory controller 212 can interact with the non-volatile memory device 210 in response to a non-secure chip control command issued by the file system (file system) 202 of the host 20 but will not interact with the secure chip. Chip 211 interacts, and the non-secure chip control command includes a regular address that is not related to the secure chip, and the regular address is different from the first special address. In other words, the file system (file system) 202 can perform another instruction write command (Write Command) of the regular (normal) address (that is, other addresses that are not special addresses) to the non-volatile memory controller 212, and the The normal address and the first special address do not overlap each other, so the above-mentioned normal address refers to a regular data storage area 2101 in the non-volatile memory device 210 as shown in the figure (that is, another area that does not overlap with the reserved area 2100) a data storage area), the non-volatile memory controller 212 directly interacts with the non-volatile memory device 210 but does not interact with the security chip 211, for example, it can directly interact with the non-volatile memory device 210 The regular data storage area 2101 performs data reading and writing. Various embodiments for interacting with the security chip 211 will be described below.

Please refer to FIG. 3a first, which is a functional block diagram of the first embodiment of the relevant program for interacting with the security chip 211 proposed in this case. It is mainly a file system (file system) 202 to control the non-volatile memory. The device 212 performs a write command (Write Command) of a first special address as shown by arrow C1. This command is a single command of a single command cycle without writing data. The first special address is located in the range of the reserved area 2100 middle. When the firmware 2120 in the non-volatile memory controller 212 recognizes the first special address, it will issue a command as shown by arrow C2 to set the encryption mode of the security chip 211 . For example, the security chip 211 may have multiple encryption modes, and the write command of the first special address is used to set the security chip 211 to the first encryption mode (such as AES-256-CBC). Similarly, if the write command (Write Command) of the second special address without writing data is issued, the security chip 211 can be set to the second encryption mode (such as AES-256-CTR).

Then referring to FIG. 3b, it is a schematic diagram of the flow sequence corresponding to FIG. 3a, which clearly shows the details and sequence of the command transmission and execution of the first embodiment of the relevant program interacting with the security chip 211. At first, the host computer 20 issues Write a command (Write Command) to the non-volatile memory controller 212, and the non-volatile memory controller 212 will set the encryption mode of the security chip 211 in response to the write command. After the setting is successful, the security chip 211 will encrypt the non-volatile memory. The non-volatile memory controller 212 sends out the signal that the setting shown by the dotted line in the figure is completed, and the non-volatile memory controller 212 can write the representative encryption mode in the non-volatile memory device 210 in response to the signal that the setting is completed Set the code of the successful result, and reply the main frame 20 with a write-in completion signal.

Of course, as shown in FIG. 3c, the step of “writing the result record of successful encryption mode setting in the non-volatile memory device 210” can also be omitted, but the security chip 211 can be set after the setting is successful. The setting completion signal sent out is directly sent to the host 20, so as to prevent the non-volatile memory device 210 from being overused and shortening its lifespan.

FIG. 4a is a schematic functional block diagram of the second embodiment of the relevant program for interacting with the security chip 211 proposed in this case. It is mainly a file system (file system) 202 to perform such operations on the non-volatile memory controller 212. As shown by the arrow D1, write a write command (Write Command) of a first specific data to the third special address, this command is also a single command of a single command cycle, and the third special address is located in the range of the reserved area 2100 . And when the firmware 2120 in the non-volatile memory controller 212 recognizes the 3rd special address, it will issue the command shown in the arrow D2, which will be used to rewrite a group of parameters of the security chip 211, and the first The content of the specified data is the parameter value to be overwritten. For example, there is a set of parameters in the security chip 211, such as an initialization vector value IV, and the D2 command can be used to set the IV value used in AES-256-CBC. The purpose of rewriting the parameters in the security chip 211 can be achieved through such write commands.

Then referring to Fig. 4b, it is a flow sequence schematic diagram corresponding to Fig. 4a, which clearly shows the details and sequence of the command transmission and execution of the second embodiment of the relevant program interacting with the security chip 211, at first, the host computer 20 issues A write command with specific data is sent to the non-volatile memory controller 212, and the non-volatile memory controller 212 rewrites the parameters of the security chip 211 in response to the write command and the specific data. After the rewrite is successful, the security chip 211 will Send the non-volatile memory controller 212 a signal of completion of rewriting shown by the dotted line in the figure, and the non-volatile memory controller 212 writes a representative in the non-volatile memory device 210 in response to the signal of completion of rewriting. The parameter rewrites the code of the successful result, and replies to the host computer 20 with a signal of completion of writing. Of course, as shown in FIG. 4c, the step of "writing the code representing the result of parameter rewriting success in the non-volatile memory device 210" can also be omitted, but the security chip 211 sends out the code after the parameter rewriting is successful. The rewriting completion signal is directly sent to the host 20, thereby avoiding the overuse of the non-volatile memory device 210 and shortening its lifespan.

Referring to Fig. 5a again, it is a schematic functional block diagram of the third embodiment of the relevant program for interacting with the security chip 211 proposed in this case, and it is mainly a file system (file system) 202 to the non-volatile memory controller 212, as shown by arrow E1, the write command (Write Command) of the fourth special address without writing data, this command is also a single command of a single instruction cycle, and the fourth special address is located in the range of the reserved area 2100 . When the firmware 2120 in the non-volatile memory controller 212 recognizes the fourth special address, it is used to read the specific information (such as firmware version) of the security chip 211 from the security chip 211, through which The write-like command can achieve the purpose of obtaining specific information in the security chip 211 . For example, the security chip 211 sends the firmware version of the security chip 211 back to the non-volatile memory controller 212 (as shown by arrow E2), and the firmware 2120 writes the firmware version of the security chip 211 In the reserved area 2100 (as shown by the arrow E3), the file system (file system) 202 can be retrieved from the reserved area In 2100, the firmware version of the security chip 211 is read back (as shown by arrow E4). The purpose of reading back the firmware version of the security chip 211 can be achieved through such write commands.

Then referring to FIG. 5b, it is a schematic diagram of the flow sequence corresponding to FIG. 5a, which clearly shows the details and sequence of the command transmission and execution of the third embodiment of the relevant program interacting with the security chip 211. At first, the host computer 20 issues Write the command to the non-volatile memory controller 212, and the non-volatile memory controller 212 reads the specific information (such as the firmware version) from the security chip 211 in response to the write command. After the read is successful, the security The chip 211 will send the non-volatile memory controller 212 the read completion signal shown in the dotted line in the figure, and the non-volatile memory controller 212 will send a signal to the non-volatile memory device in response to the read completion signal. In 210, write the read specific information (for example, firmware version), and reply the host computer 20 with a signal of completion of writing. The host computer 20 sends a read result command to the non-volatile memory controller 212 in response to the write completion signal, and the non-volatile memory controller 212 reads the specific information (for example, firmware version), and send the specific information (such as firmware version) to the host 20.

Of course, it is also possible to choose not to perform the step of "writing the read specific information (for example, firmware version) in the non-volatile memory device 210" as shown in Figure 5c, but to read the read The specific information (for example, the firmware version) is temporarily stored in the memory of the non-volatile memory controller 212, and a write completion signal is returned to the host computer 20, and then the file system (file system) 202 sends a message to carry out Read result (firmware version) command, its content is a read command of a special address, the special address is located in the range of the reserved area 2100, and the firmware 2120 in the non-volatile memory controller 212 recognizes the When a special address is used, the data temporarily stored in the memory of the non-volatile memory controller 212 (such as a firmware version) can be sent back to the host, thereby avoiding the excessive use of the non-volatile memory device 210 and shortening life.

As for Fig. 6a, it is a functional block schematic diagram of the fourth embodiment of the relevant program for interacting with the security chip 211 proposed in this case, which is mainly a file system (file system) 202 to control the non-volatile memory controller 212 As shown by arrow F1, write a write command (Write Command) of a second specific data to the fifth special address. This command is also a single command of a single command cycle. The fifth special address is located in the reserved area 2100 in range. When the firmware 2120 in the non-volatile memory controller 212 recognizes the fifth special address, it will drive the security chip 211 to encrypt the second specific data. For example, the security chip 211 encrypts the second specific data and sends the encrypted data back to the non-volatile memory controller 212 (as shown by arrow F2), and the firmware 2120 writes the encrypted data into the In the reserved area 2100 (as shown by arrow F3), and the file system (file system) 202 reads back the encrypted data from the reserved area 2100 (as shown by arrow F4), through this type of write command, the specified The purpose of encrypting data and reading back encrypted data.

Then referring to FIG. 6b, it is a schematic diagram of the flow sequence corresponding to FIG. 6a, which clearly shows the details and sequence of the command transmission and execution of the fourth embodiment of the relevant program interacting with the security chip 211. At first, the host computer 20 issues The write command with the data to be encrypted is sent to the non-volatile memory controller 212, and the non-volatile memory controller 212 sends the data to be encrypted to the security chip 211 for data encryption in response to the write command. After the encryption is successful, the security chip 211 will send the non-volatile memory controller 212 the encryption completion signal shown in the dotted line in the figure, and the non-volatile memory controller 212 will write in the non-volatile memory device 210 in response to the encryption completion signal. Enter the encrypted data, and reply the host computer 20 with a write-in completion signal. The host computer 20 sends a read and add result command to the non-volatile memory controller 212 in response to the write completion signal, and the non-volatile memory controller 212 reads the encrypted data from the non-volatile memory device 210, and The encrypted data is sent to the host 20 .

Of course, it is also possible to choose not to perform the step of "the non-volatile memory controller 212 writes the encrypted data into the non-volatile memory device 210" as shown in the flow chart in Figure 6c, but to temporarily store the encrypted data in In the memory of the non-volatile memory controller 212, and reply the signal that this host computer 20 writes to finish, send out a read result (encrypted data) order by the file system (file system) 202 again, its content is a A read command of a special address, the special address is located in the range of the reserved area 2100, and when the firmware 2120 in the non-volatile memory controller 212 recognizes the special address, it can be temporarily stored in the non-volatile memory The encrypted data in the memory of the memory controller 212 is sent back to the host, so as to prevent the non-volatile memory device 210 from being overused and shortening its lifespan.

In addition, as shown in the schematic diagram of the flow sequence in Figure 7, the single command of a single command cycle used in this case, in addition to the above-mentioned command to write specific data at a special address, of course, the special address shown in the figure can also be selected. Data read command. First, the host 20 sends a data read command with a special address to the non-volatile memory controller 212, and the firmware 2120 of the non-volatile memory controller 212 can recognize the special address, and then respond to the data read command trigger to read specific information (such as firmware version) on the security chip 211, after the read is successful, the security chip 211 will send the non-volatile memory controller 212 to the non-volatile memory controller 212 to read the specific information shown by the dotted line in the figure. The non-volatile memory controller 212 then writes the read specific information (such as firmware version) in the non-volatile memory device 210 in response to the signal that the read should be completed, and replies to the host 20 A data read command completion signal. Certainly, the single command of a single command cycle may also be other similar data access commands, which will not be repeated here.

Referring again to the schematic diagram of the flow sequence of Figure 8, its content is similar to that of Figure 5c and the relevant program for interacting with the security chip 211, first, the host 20 sends a write command with a special dynamic address to the non-volatile memory Body controller 212, the special dynamic address can be dynamically from a specific Choose one of multiple multi-digit numbers in the formula, mainly to allow the firmware 2120 to be quickly identified and unique. The non-volatile memory controller 212 can read specific information (for example, firmware version) from the security chip 211 in response to the trigger of the write command of the special dynamic address that conforms to the specific formula. After the read is successful The security chip 211 will send a signal to the non-volatile memory controller 212 that the reading is completed as shown by the dotted line in the figure, and the read specific information (such as a firmware version) is temporarily stored in the non-volatile memory controller 212 In the memory of the host computer 20, and reply a write-in completion signal to the host computer 20, then the file system (file system) 202 sends a command to read the result (firmware version), the content of which is a read command of a special address , the special address is located in the range of the reserved area 2100, and when the firmware 2120 in the non-volatile memory controller 212 recognizes the special address, the memory temporarily stored in the non-volatile memory controller 212 can be The data in the body (for example, the firmware version) is sent back to the host, so as to prevent the non-volatile memory device 210 from being overused and shortening its lifespan.

The non-volatile memory 210 in this case may be a flash memory or other similar memories, and the non-volatile memory controller 212 may be a flash memory controller. The firmware 2120 in the non-volatile memory controller 212 can communicate with the security chip 211 through a full-duplex communication bus such as SPI Protocol. Full-duplex communication means that the data flow is bidirectional, and data can be received while transmitting data. Therefore, it also has a faster transmission speed than the traditional ISO-7816 smart card communication protocol.

To sum up, although the present invention is disclosed above with the embodiments, it is not intended to limit the present invention. Those with ordinary knowledge in the technical field of the present invention can make various changes and modifications without departing from the technical spirit and scope of the present invention. Therefore, the scope of protection of the present invention should be defined by the appended patent claims.

20: Host

21:Memory card device

210: Non-volatile memory device

211: Security chip

212: Non-volatile memory controller

2120:Firmware

201: Application

202: File system

2100: reserved area

2101: formal data storage area

Claims (20)

A memory card device with information security, which is used to complete signal connection with a host, and the memory card device includes: a non-volatile memory device, which is used to store data; a security chip; and a non-volatile memory A controller, signal connected to the host, the non-volatile memory device and the security chip, the non-volatile memory controller interacts with the security chip in response to a security chip control command issued by the host, wherein the security chip control The command includes a single command of a single command cycle, the single command of the single command cycle includes a first special address corresponding to the security chip, and the non-volatile memory controller can respond to a non-secure address issued by the host The non-volatile memory device interacts with the non-volatile memory device but does not interact with the secure chip. The non-secure chip control command contains a normal address that is not related to the secure chip. The normal address is related to the first special address. different, wherein the security chip has a plurality of encryption modes, the first special address and a second special address are located in a reserved area of the non-volatile memory device, and the non-volatile memory controller recognizes the first special address When there is a special address, the security chip is set to a first encryption mode, and when the non-volatile memory controller recognizes the second special address, the security chip is set to a second encryption mode. The memory card device with information security as described in claim 1, wherein the security chip control command includes a file system in the host computer performing a write command to the first special address of the non-volatile memory controller When a firmware in the non-volatile memory controller recognizes the first special address, it will set the encryption mode of the security chip. The memory card device with information security as described in claim 2, wherein the write command to the first special address is used to set the first encryption mode of the security chip, and the write command to the second special address is The security chip is set to the second encryption mode. A memory card device with information security, which is used to complete signal connection with a host, and the memory card device includes: a non-volatile memory device, which is used to store data; a security chip; and a non-volatile memory A controller, signal connected to the host, the non-volatile memory device and the security chip, the non-volatile memory controller interacts with the security chip in response to a security chip control command issued by the host, wherein the security chip control The command includes a single command of a single command cycle, the single command of the single command cycle includes a first special address corresponding to the security chip, and the non-volatile memory controller can respond to a non-secure address issued by the host The non-volatile memory device interacts with the non-volatile memory device but does not interact with the secure chip. The non-secure chip control command contains a normal address that is not related to the secure chip. The normal address is related to the first special address. Not the same, wherein the secure chip control command includes a file system in the host to write a first specific data write command to a third special address for the non-volatile memory controller, the third special address It is located in the range of a reserved area in the non-volatile memory device. When a firmware in the non-volatile memory controller recognizes the third special address, it will rewrite a set of parameters of the security chip, and the first The content of the specified data is the parameter value to be overwritten. A memory card device with information security, which is used to complete signal connection with a host, and the memory card device includes: a non-volatile memory device, which is used to store data; a security chip; and A non-volatile memory controller, signally connected to the host, the non-volatile memory device and the security chip, the non-volatile memory controller interacts with the security chip in response to a security chip control command issued by the host , wherein the security chip control command includes a single command of a single command cycle, the single command of the single command cycle includes a first special address corresponding to the security chip, and the non-volatile memory controller can respond to the The host sends a non-secure chip control command to interact with the non-volatile memory device but will not interact with the secure chip. The non-secure chip control command contains a normal address that has nothing to do with the security chip. The normal address Different from the first special address, the secure chip control command includes a file system in the host to write a fourth special address to the non-volatile memory controller, the fourth special address is located in a reserved area in the non-volatile memory device, when a firmware in the non-volatile memory controller recognizes the fourth special address, it will be used to read the security chip from the security chip specific information. The memory card device with information security as described in claim 5, wherein the specific information of the security chip is a firmware version, and the security chip sends the firmware version of the security chip back to the non-volatile memory controller, and the The firmware then writes the firmware version of the security chip into the reserved area or temporarily stores it in the non-volatile memory controller, and the file system is then downloaded from the reserved area or the non-volatile memory controller The firmware version of the security chip is read back. The memory card device with information security as described in claim 1, wherein the security chip control command includes a file system in the host to write a fifth special address to a second non-volatile memory controller A write command for specific data, the fifth special address is located in a reserved area in the non-volatile memory device, when a firmware in the non-volatile memory controller recognizes the fifth special address, it will drive The security chip encrypts the second specific data into an encrypted data and sends the encrypted data back to the non-volatile memory controller, and the firmware writes the encrypted data into The reserved area is temporarily stored in the non-volatile memory controller, and the file system reads back the encrypted data from the reserved area or the non-volatile memory controller. The memory card device with information security as described in Claim 1, wherein the single command of the single command cycle is a data access command to a special address. The memory card device with information security as described in claim 8, wherein the form of the special address is a preset multi-digit number. The memory card device with information security as described in Claim 8, wherein the special address is dynamically selected from a plurality of multi-bit numbers that meet a specific formula. A chip control method, applied between a host and a memory card device with information security, the memory card device with information security includes a non-volatile memory device, a security chip and a non-volatile memory controller , the control method comprises the following steps: the host sends a security chip control command to the non-volatile memory controller, the security chip control command includes a single command of a single command cycle; the non-volatile memory controller responds to the single command Interacting with the secure chip with a single command of the single command cycle, the single command of the single command cycle includes a first special address corresponding to the secure chip; and the non-volatile memory controller responds to a non-secure chip issued by the host The non-volatile memory device interacts with the non-volatile memory device but does not interact with the secure chip, and the non-secure chip control command contains a normal address that is not related to the secure chip, and the normal address is different from the first special address. Similarly, wherein the security chip has a plurality of encryption modes, and the first special address and a second special address are located in a reserved area in the non-volatile memory device, the non-volatile memory controller recognizes the first When there is a special address, the security chip is set to a first encryption mode, and when the non-volatile memory controller recognizes the second special address, the security chip is set to a second encryption mode. The chip control method as described in claim 11, wherein the secure chip control command includes a file system in the host computer performing a write command to the first special address of the non-volatile memory controller, the non-volatile When a firmware in the memory controller recognizes the first special address, it will set the encryption mode of the security chip. The chip control method as described in claim 12, wherein the write command to the first special address is used to set the security chip to the first encryption mode, and the write command to the second special address will The security chip is set to the second encryption mode. A chip control method, applied between a host and a memory card device with information security, the memory card device with information security includes a non-volatile memory device, a security chip and a non-volatile memory controller , the control method comprises the following steps: the host sends a secure chip control command to the non-volatile memory controller, the secure chip control command includes a single command of a single command cycle; the non-volatile memory controller responds to the single command Interacting with the secure chip with a single command of the single command cycle, the single command of the single command cycle includes a first special address corresponding to the secure chip; and the non-volatile memory controller responds to a non-secure chip issued by the host The non-volatile memory device interacts with the non-volatile memory device but does not interact with the secure chip. The non-secure chip control command contains a normal address that is not related to the secure chip. The normal address is different from the first special address. Same, wherein the security chip control command includes a file system in the host computer to write a first specific data write command to a third special address for the non-volatile memory controller, and the third special address is Located in the range of a reserved area in the non-volatile memory device, when a firmware in the non-volatile memory controller recognizes the third special address, it will rewrite a set of parameters of the security chip, and the first specific The content of the data is the parameter value to be overwritten. A chip control method, applied between a host and a memory card device with information security, the memory card device with information security includes a non-volatile memory device, a security chip and a non-volatile memory controller , the control method comprises the following steps: the host sends a security chip control command to the non-volatile memory controller, the security chip control command includes a single command of a single command cycle; the non-volatile memory controller responds to the single command Interacting with the secure chip with a single command of the single command cycle, the single command of the single command cycle includes a first special address corresponding to the secure chip; and the non-volatile memory controller responds to a non-secure chip issued by the host The non-volatile memory device interacts with the non-volatile memory device but does not interact with the secure chip, and the non-secure chip control command contains a normal address that is not related to the secure chip, and the normal address is different from the first special address. Same, wherein the secure chip control command includes a file system in the host computer to perform a write command to a fourth special address of the non-volatile memory controller, the fourth special address is located in the non-volatile memory In a reserved area of the device, when a firmware in the non-volatile memory controller recognizes the fourth special address, it will be used to read specific information of the security chip from the security chip. The chip control method as described in claim 15, wherein the specific information of the security chip is a firmware version, and the security chip sends the firmware version of the security chip back to the non-volatile memory controller, and the firmware then sends the The firmware version of the security chip is written into the reserved area, and the file system reads back the firmware version of the security chip from the reserved area. The chip control method as described in claim 11, wherein the secure chip control command includes a file system in the host computer writing a fifth special address and writing a second specific data to the non-volatile memory controller input command, the fifth special address is located in a reserved area in the non-volatile memory device, and a firmware in the non-volatile memory controller recognizes the fifth special address address, the security chip will be driven to encrypt the second specific data into an encrypted data and then send the encrypted data back to the non-volatile memory controller, and the firmware will write the encrypted data into the reserved area, And the file system reads back the encrypted data from the reserved area. The chip control method as described in claim 11, wherein the single command of the single command cycle is a data access command to a special address. The chip control method as claimed in claim 18, wherein the special address is a preset multi-bit number. The chip control method as claimed in claim 18, wherein the special address is dynamically selected from a plurality of multi-bit numbers conforming to a specific formula.

Images