Memory security protocol

Abstract

An NVDIMM requests an authentication object in response to a detected command to initiate a save operation to copy first memory data located in volatile memory on the NVDIMM to non-volatile memory located on the NVDIMM. The NVDIMM determines based on the authentication object that authentication has failed. The NVDIMM implements, in response to determining that authentication has failed, a security measure to prevent recovery of the first memory data.

What is claimed is: 
     
         1 . A method for Non-Volatile Dual In-line Memory Module (NVDIMM) security, the method comprising:
 requesting, by an NVDIMM, a private key in response to a detected command to initiate a save operation to copy first memory data located in volatile memory on the NVDIMM to non-volatile memory located on the NVDIMM, the command to initiate a save operation occurring before detection of removal of power;   creating, by the NVDIMM, second memory data located in non-volatile memory on the NVDIMM, the second memory data being a copy of the first memory data located in the volatile memory on the NVDIMM;   detecting, by a computer, removal of power from the NVDIMM, and wherein the first memory data located in the volatile memory on the NVDIMM is erased when power to the NVDIMM is removed;   determining, by the NVDIMM, based on the private key, and based upon determining the computer does not contain a proper hardware authentication device, that authentication has failed;   encrypting, by the computer, the second memory data using an encryption key; and implementing, by the NVDIMM and in response to determining that authentication has failed, a security measure to prevent recovery of the first memory data, wherein the implementing the security measure further prevents recovery of the second memory data and wherein the implementing the security measure comprises deleting the encryption key.