BACKGROUND

[0001] Flash memory is a solid-state non-volatile computer memory that has gained popularity in recent years due to greater availability and decreasing costs. One major category or configuration of the flash memory is known as a NOR flash memory.

[0002] The NOR flash memory is often used in mobile phones, scientific instruments, and medical devices. It is a type of flash memory that employs NOR logic gates. That is, the NOR flash memory produces a low output when at least one input is high.

[0003] While NOR flash memory provides a faster reading of stored information, it has long erased and write times. The NOR flash memory can further provide full address and data buses, allowing random access to any memory location.

BRIEF DESCRIPTION OF THE DRAWINGS

[0004] Fig. 1 is an example block diagram of an apparatus that implements data protection using features of a non-volatile memory.

[0005] Fig. 2 illustrates an example implementation of storing and updating of data set in a non-volatile memory. [0006] Fig. 3 illustrates a flowchart of an example process for protecting data through use of non-volatile memory features.

[0007] The Detailed Description references the accompanying figures. In the figures, the left-most digit(s) of a reference number identifies the figure in which the reference number first appears. The same numbers are used throughout the drawings to reference like features and components.

DETAILED DESCRIPTION

[0008] Described herein is a technology for an efficient storage of data into a non-volatile computer storage. Particularly, an updated data may be stored into a block of the non-volatile computer storage in such a manner that does not require an erasure of an entire block. This saves processing time, efficient use of available segments of the block, and minimizes wear on the non-volatile computer storage.

[0009] The non-volatile computer storage may include a solid-state non volatile computer storage medium that employs NOR logic gates. For example, a NOR flash memory. In this example, a block of the NOR flash memory is initialized to become a fresh block by setting all addressable locations to the same binary value, which may be, for example, 1. Depending on the particulars of the implementation, an addressable location may be selected from a bit, byte, a word, a page, or a combination thereof. Furthermore, the addressable location of the NOR flash memory can be read in a random-access fashion; however, an erasure may include block at a time.

[0010] As described herein, a data set is written into the initialized block or the fresh block. To store a subsequent data set, the already written data set may be marked as invalid by marking a designated portion of the already written data. For example, the marking includes changing a binary value of at least one bit of the addressable location from 1 to 0. This value-change may indicate both invalidity and lack of integrity of the already written data set. Thereafter, the subsequent data set is stored into the block without overwriting the addressable location of the already written data set.

[0011] Fig. 1 illustrates an example block diagram of an apparatus that implements data protection using features of a non-volatile memory. Particularly, the apparatus may include the computer system 100. As depicted, the computer system 100 includes at least one processor 102, a controller or an embedded controller (EC) 104, and a storage 106.

[0012] The storage 106 further includes a plurality of M blocks such as a first block 108-2, a second block 108-4, and up to last block 108-M. Each of these M blocks includes addressable locations. As depicted, the first block 108-2 includes addressable locations 110-2 to 110-N. The addressable locations of each block may be selected from a group consisting of a bit, a byte, a word, a page, or some combination thereof. [0013] A data set is written into multiple addressable locations. For example, a data set may be written over addressable locations 110-2 and 110- 4. This is indicated by these addressable locations being depicted as a shaded pattern in Fig. 1. In this example, the data set is written on a page frame of the block 108-2. The page frame may include a smallest unit that can be written with a data set, while the block may be the smallest unit of the storage 106 that can be erased. In this case, the block may include a plurality of page frames for the N addressable locations.

[0014] The data set may include a data name, data size, and data to be written. For example, the data name, data size, and the data include a particular file name, size of the particular file, and file contents, respectively.

[0015] The computer system 100 may include (but is not limited to) a computer, a mobile phone, a cellular phone, a smartphone, a personal digital assistant, a tablet computer, a netbook, a notebook computer, a laptop computer, a multimedia playback device, a digital music player, a digital video player, a navigational device, a digital camera, and the like.

[0016] The processor 102 may include one or more processors that may be coupled to the EC 104 and the storage 106. The processor 102, for example, may facilitate running of operating system (OS) on the computer system 100, while the EC 104 may facilitate secure boot of the OS. The EC 104 may further generate the data sets that may be written into the blocks 108. In some cases, these data sets may be accessible to the EC 104 but not the processor 102. [0017] The storage 106 may include a non-volatile storage such as, but not limited to, a solid-state non-volatile computer storage medium that employs NOR logic gates. An example of this type of solid-state non-volatile computer storage is a NOR flash memory that utilizes the NOR logic gates. The NOR flash memory may provide faster reading of data; however, it may take longer to erase and write new data because of its block-erasure feature.

[0018] As depicted, the storage 106 is a NOR flash memory that may be divided into M blocks. Each block of the M blocks may be initially initialized as a fresh block. That is, the fresh block may include the block where all addressable locations 110-2 to 110-N are set to one binary value such as "one."

[0019] Referencing the first block 108-2, the shaded addressable locations 110-2 to 110-4 may indicate that the addressable locations 110-2 to 110-4 are valid, and not altered. However, in a case where a subsequent data set is to be written on the first block 108-2, then the addressable locations 110-2 to 110-4 may be invalidated by changing a binary value of at least one bit of the addressable location from 1 to 0. This value-change may indicate both invalidity and lack of integrity of the already written data set on the addressable locations 110-2 to 110-4.

[0020] Prior to the invalidating of the addressable locations 110-2 to 110-4, it is assumed that the first block 108-2 may still have available spaces or page frames to accommodate the subsequent data set to be written. [0021] For example, the first block 108-2 may still have available page frames covered by the addressable locations 110-6 to 110-N. In this example, the subsequent data set may be written on these available page frames after the invalidation of the previous data set. However, if there are no more available spaces for the subsequent data set, then the EC 104 may perform a block- erasure of the first block 108-2. In the case of block-erasure, the subsequent data set may be written on a next block 108-4, or on the same block 108-2 after the initialization to become a fresh block again.

[0022] In an embodiment, a threshold may be configured to determine whether there is enough memory space or page frames to accommodate the subsequent data set to be stored. If there are no available page frames within the block to write the subsequent data set, then a block-erasure is essential prior to the storing of the subsequent data set on the same block. However, if page frames are still available, then the previously valid data set is invalidated, and the subsequent data set may be stored on the same block.

[0023] For example, the first block 108-2 is a 4MB block with 500-page frames. In this example, each page frame has a size of 8Kb. Thus, if each page frame is covered by two addressable locations 110 such as depicted in Fig. 1, then the first block 108-2 may include 1,000 addressable locations for the 500- page frames of the first block 108-2. Furthermore, for an 8Kb size page frame and byte-size addressable location, at least 12bits may be utilized by the addressable locations 110-2 to 110-4 to cover each 8Kb page frame. [0024] For this 4MB block 108-2, the threshold may be set, for example, to have a value of 500. That is, for each data set written onto the block 108-2, a page frame counter is increased to 1. When the page frame counter is equal to the threshold value of 500, then the EC 104 may perform the block-erasure on the 4MB block 108-2. Otherwise, the EC 104 may perform invalidation of the previously valid data set prior to the writing of the subsequent data set as described herein. This operation is made to avoid time-consuming block- erasure which may take several milliseconds forthe block with 500-page frames. Furthermore, this will minimize the wearing of the first block 108-2 due to high erasure cycles.

[0025] When the page frame counter is still below the threshold of 500 in the example above, the invalidation of the previous data set may include changing the bit-value of the addressable location of the data set. As depicted, the addressable locations 110-2 to 110-4 may be invalidated by changing a bit of these addressable location from 1 to 0. As long as there is a bit-1 left on the addressable locations 110-2 to 110-4, then the invalidation operation as described herein may be implemented.

[0026] For example, after writing the first data set to the addressable locations 110-2 to 110-4, the resulting bits of the addressable locations 110-2 to 110-4 include 1111 0000 0000 0000. In this example, the addressable locations 110-2 to 110-4 may be invalidated by changing the first bit (1) into 0.

In other words, the invalidated addressable locations 110-2 to 110-4 may now include 0111 0000 0000 0000. At this state, the value-change in the bits of the addressable locations 110-2 to 110-4 indicate alteration on the first data set.

[0027] After updating of the tag of the first data set in the foregoing paragraph, the second data set can be written into the block 108-2 without overwriting the addressable location of the first data set. For example, the second data set is written using the addressable locations 110-20 to 110-22. In this example, the second data set does not overwrite the addressable locations 110-2 to 110-4 of the first data set.

[0028] The above generation of the data set and the process of tag updating may similarly apply to the generated third data set, fourth data set, and so on. For example, the third data set is generated next by the EC 104. In this example, the third data set may similarly include a tag that indicates a valid third data set.

[0029] Thereafter, the tag of the second data set is updated to invalidate the second data set. For example, the tag of the second data set is set to the opposite binary value as that the binary value of the addressable locations of the fresh block. In this example, the initial binary value of "one" is changed to "zero." This change in the bit value of the addressable locations indicates invalidity and alteration of the second data set.

[0030] In an embodiment, the EC 104 may execute instructions to generate the first data set, and write the first data set into a fresh memory block 108-2.

Thereafter, the EC 104 may update the tag of the first data set, and write the subsequent second data set into the block 108-2. That is if the threshold has not been reached. This storing of the second data set 112-4 is without overwriting the addressable locations 110-2 to 110-4 of the already written first data set. The EC 104 may similarly execute the same instructions in processing the generated third data set, fourth data set, etc.

[0031] The process for storing and updating of the data sets 112 as described in the first block 108-2 above may similarly apply to the second block 108-2, third block 108-6, and so on, up to the last block 108-M.

[0032] Fig. 2 illustrates an example implementation of storing and updating data set in a non-volatile memory.

[0033] As depicted, Fig. 2 includes a first data set 200, a block 202 that is divided into a plurality of page frames 204, a page frame counter 206, a second data set 208, and addressable location bits 210. The block 202, for example, is a 4MB block that is divided into 500-page frames 204 of 8Kb size for each page frame. The 500-page frames 204 are further represented by 1000 addressable locations where each addressable location includes a byte or 8 bits.

[0034] In an embodiment, the fresh block 202 may include a common first binary value bit Is on all of its addressable locations 110. For example, after an initialization of the block 202, the first binary value of all addressable location bits 210 are set to a common binary value 1. In another example, a block- erasure of the block 202 is performed. In this other example, the first binary value of all addressable location bits 210 are similarly set to Is. The block- erasure, for example, may be performed when the page frame counter 206 has reached a threshold value of 500, which is the total number of page frames that can be written with data set as described herein.

[0035] As shown, the first data set 200 is written into the page frame 204-2 of the fresh block 202. As a result, some of the addressable location bits 210 are changed to 0s, while the rest remain as Is. For example, after writing the first data set 200 into the page frame 204-2, the addressable locations 110-2 and 110-4 include addressable location bits "11111101" and "00010100," respectively. In this example, the bits "1" can still be programmed or changed to "0" for updating purposes; however, the "0s" cannot be changed to "Is" without performing block-erasure on the block 202.

[0036] With the stored first data set 200 on the addressable locations 110- 2 and 110-4, the page frame counter 206 is incremented by one. Thereafter, the value of the page frame counter 206 may be compared to a threshold value of 500, which is the total number of page frames that can be written with data set as described herein.

[0037] In a case where the page frame counter 206 is lesser than the threshold value, then updating of the block 202 for subsequent storing of data set is performed. The updating may include setting the binary value of the addressable location 110 from 1 to 0. [0038] For example, referencing the addressable locations 110-2 and 110-4 that include addressable location bits "11111101" and "00010100," respectively, each addressable location bit that has a "1" value can still be changed to 0 for updating purposes. As depicted, the addressable location bit 210-10 is set from the first binary value of 1 to the second binary value of 0. Similarly, the other addressable location bit with "1" value may be changed to "0" when the updating is performed. In this example, the change in bit value indicates that the stored first data set 200 is invalid and altered.

[0039] With the updated block 202, the second data set 208 may be written on available page frame 204 and without overwriting the addressable locations 110-2 and 110-4. For example, the second data set 208 may be written on the addressable locations 110-22 and 110-24.

[0040] In a scenario where the incremented page frame counter 206 is at least equal to the threshold value, then the block-erasure is performed before the second data set 208 is written into the block 202. Optionally, the second data set 208 may be written into another block 202 if the previous block has reached its erasing cycle peak.

[0041] In an embodiment, the EC 104 may append a message authentication code (MAC) to the stored data set on the block 202. For example, EC 104 appends an HMAC, which is a type of MAC that is based on keyed cryptographic hash function. In this example, the HMAC may include a fixed size value or "tag" that may be used to verify correctness and origin of the associated data set. Based on this tag, the EC 104 may detect whether changes were made to the stored data set. This is true regardless of whether the stored data is encrypted.

[0042] For example, the EC 104 may calculate a n initial value of the appended HMAC using an algorithm that utilizes data set name; data set size, and data value. During a read operation, the EC 104 may verify the appended HMAC by calculating current values in the block 202, and comparing these current values with the initial value of the appended HMAC. This comparison may indicate the integrity of the associated data set as described herein.

[0043] Fig. 3 shows a flowchart of an example process 300 for protecting data through use of non-volatile memory features. The example process 300 may be performed by, for example, the computer system 100. For the purposes of discussion, an example device like the computer system 100 is described as performing the operations of the example process 300.

[0044] At block 302, the example device generates a first data set with a portion thereof including a tag that indicates that the first data set is valid. For example, the computer system 100 and particularly, the EC 104 generates the first data set 200 that includes the addressable locations 110-2 and 110-4 as the tag.

[0045] At block 304, the example device writes the first data set into a block of memory. Before this write operation is performed, this block of memory is considered to be a fresh block. A fresh block is a block of memory having multiple addressable locations set to a common first binary value before the write. The common first binary value before the write is, for example, a logic 1. In other words, a fresh block is one that has never been written to or has been blocking erased.

[0046] For example, the computer system 100 and particularly, the EC 104 write the data set 200 into the block 202. In this example, the binary value of all addressable locations 110 is initially set to "one" to have a fresh block that is ready to be written with the first data set. With the fresh block, the data set 200 is written into the block 202.

[0047] A suitable memory which may be the subject of this example process B00 is a solid-state non-volatile computer storage medium that employs NOR logic gates. That is, a NOR flash memory.

[0048] At block 306, the example device generates a second data set including a tag that indicates that the second data set is valid. For example, the EC 104generates the subsequent data set 208 that includes an indicating a valid second data set 208.

[0049] At block 308, the example device updates the tag of the first data set to indicate that the first data set is invalid. The updating the tag to invalidate the first data set includes setting addressable locations of the tag of the first data set to a second binary value, which is different from the first binary value. For example, the first binary value of the addressable location bit 210-10 is initially a logic one after initialization or block-erasure. In this example, the updating of the tag includes setting a second binary value that is different from the first binary value. For example, the first binary value is changed or set to "zero." In this example, the change indicates invalid data set 200.

[0050] At block B10, the example device writes the second data set to addressable locations in the block of memory other than the addressable locations of the first data set. It does not attempt to write over the already written data sets.

[0051] Of course, this can be repeated for a third, fourth, and any subsequent data sets. Once the block is full, this process can begin again with another block. Alternatively, once the block is full, the process can be repeated with original block after it is block erased.

[0052] Also, the update of the tag of the first data set to invalid also indicates that the first data set has been altered since written in the block. In addition, the update the tag to invalidate the first data set includes setting one of the addressable locations corresponding to the tag (i.e., the addressable locations storing the tag) to the opposite binary value as that the binary value of the addressable locations of the fresh block (e.g., from a logic one to a logic zero or vice versa). [0053] The blocks 302-310 described above may represent instructions stored on computer-readable storage media that, when executed by at least one processor, may perform the recited operations.