Abstract: Methods, systems, and devices for out-of-band authentication for multi-port memory systems are described. A multi-port memory system may grant host systems access to multiple ports of the memory system based on attestation with an authentication management controller that uses out of band (OOB) signaling to communicate with the memory system. For example, upon power up of the memory system, access to the memory system via the multiple ports may be limited, and some commands requested from host systems via the multiple ports may be denied. Increased access to the memory system via the multiple ports may be granted based on OOB signaling from the authentication management controller that attests each host system that is coupled with a respective port of the memory system. After a host system has been attested, the host system may be granted full access to a command set of the memory system.

Abstract: Methods, systems, and devices for port resource management within a multi-port memory system are described. A memory system may include multiple ports each coupled with one or more host systems. The memory system may receive a command defining a secure management port via an interface with a management controller or via another port. In some cases, the defined management port may be a dedicated port, or may be selected during one or more power-on procedures. The command may also indicate a quantity of ports to be activated, and may be based on an attestation of one or more host systems. In some examples, the memory system may use the management port to receive additional communications and commands. For example, the management port may receive and execute commands for resource allocation, additional configurations, sub-system operations including power management and reset, or for diagnostic functions, among other operations.

Abstract: Methods, systems, and devices for security function management within a multi-port memory system are described. A memory system may include multiple ports each coupled with one or more host systems. The memory system may receive a namespace configuration indicating an allocation of one or more logical block addresses (LBAs) to one or more of the ports. The memory system may further receive one or more requests for access to one or more LBA ranges, and may perform an authorization procedure to authorize a single entity to provision and unlock corresponding LBA ranges. In some examples, LBA ranges may be locked by default on bootup of the memory system. In some cases, host systems may request a management controller to coordinate authorization, or may request authorization from a memory system directly using one or more credentials or identifiers. Further, a management port may be indicated via one or more commands.

Abstract: Methods, systems, and devices for security management modes of a multi-port memory system are described. A multi-port memory system may be configured to operate according to one or more security modes that adjust access by host systems to the multiple ports of the memory system. For example, in a first mode, which may be referred to herein as a port security management mode, the memory system may restrict access by unauthenticated host systems to ports of the memory system, such that any unauthenticated host systems have no access to the memory system via the ports or are limited to a relatively primitive set of commands until the host systems are authenticated. In a second mode, which may be referred to herein as an operational mode, any host systems coupled with ports of the memory system are granted, without authentication, full access to a command set supported by the memory system.