Control chip, sensing chip and sensing system control method
By using keys to encrypt and decrypt information in the control chip and sensor chip respectively, the problem of insecure information transmission between chips is solved, and secure information transmission is achieved.
Patent Information
- Application Number
- CN202510136853.6
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Priority Date
- 2024-08-05
- Filing Date
- 2025-02-07
- Publication Date
- 2026-02-06
AI Technical Summary
Existing information security mechanisms are unable to effectively protect the security of information transmission between different chips within electronic devices, making it easy for information between chips to be stolen.
The control chip and sensor chip use separate keys to encrypt and decrypt the output information, and transmit the encrypted information through an independent transmission path to ensure information security.
It enhances the security of information transmission between different chips within electronic devices, preventing information leakage.
Smart Images
Figure CN121479846A_ABST
Abstract
Description
TECHNICAL FIELD
[0001] The present application relates to a control chip, a sensor chip and a sensor system control method, and in particular, to a control chip, a sensor chip and a sensor system control method with information security mechanism. BACKGROUND
[0002] An electronic device can include multiple chips disposed therein. Existing information security mechanism can only provide protection for information transmitted between different electronic devices, but cannot provide information protection for information transmitted between different chips in a single electronic device. Information transmitted between chips can be easily stolen.
[0003] Therefore, appropriate information security mechanism is needed. SUMMARY
[0004] One object of the present application is to disclose a control chip with appropriate information security mechanism.
[0005] Another object of the present application is to disclose a sensor chip with appropriate information security mechanism.
[0006] Still another object of the present application is to disclose a sensor system with appropriate information security mechanism.
[0007] One embodiment of the present application discloses a control chip, comprising: a control circuit, configured to encrypt output information by a key to generate encrypted information, and to output the encrypted information to a sensor through a transmission path, wherein the transmission path and the sensor are located outside the control chip.
[0008] Still another embodiment of the present application discloses a sensor chip, comprising: a sensor, configured to encrypt output information by a key to generate encrypted information, and to output the encrypted information to a control circuit through a transmission path, wherein the control circuit and the transmission path are located outside the sensor chip.
[0009] Still another embodiment of the present application discloses a sensor system control method, applied to a sensor system including a sensor in a sensor chip, a transmission path and a control circuit in a control chip, comprising: the control circuit encrypting first output information by a first key to generate first encrypted information; the control circuit outputting the first encrypted information to the transmission path; and the sensor receiving the first encrypted information through the transmission path; wherein the sensor chip and the control chip are independent of each other, and the transmission path is located outside the sensor chip and the control chip.
[0010] According to the above-mentioned embodiments, appropriate information security mechanism can be provided to enhance the security of information transmitted between different chips in an electronic device. BRIEF DESCRIPTION OF DRAWINGS
[0011] Figure 1 A block diagram of a control chip with an information security mechanism according to an embodiment of the present invention is shown.
[0012] Figure 2 A block diagram of a sensor chip with an information security mechanism according to an embodiment of the present invention is shown.
[0013] Figure 3 A block diagram of a sensing system with an information security mechanism according to an embodiment of the present invention is shown.
[0014] Figure 4 A flowchart illustrating a sensing system control method according to an embodiment of the present invention is shown.
[0015] The reference numerals in the attached figures are explained as follows:
[0016] 100 sensor system
[0017] 101 control chip
[0018] 103 sensor chip
[0019] 105 transmission path
[0020] 107 control circuit
[0021] 109 sensor
[0022] It_1 and It_2 I / O interfaces
[0023] SD_1 and SD_2 storage devices
[0024] Keys K_1, K_1', K_2, K_2'
[0025] OI_1 and OI_2 output information
[0026] EI_1 and EI_2 encrypted information
[0027] Steps 401, 403, and 405 Detailed Implementation
[0028] The present invention will now be described with reference to several embodiments. The terms "first," "second," and similar descriptions used in the following description are merely for defining different elements, parameters, data, signals, or steps, and are not intended to limit their order. For example, the first device and the second device may be devices having the same structure but being different devices.
[0029] Figure 1 A block diagram of a control chip with an information security mechanism according to an embodiment of the present invention is shown. Figure 1As shown, the sensing system 100 includes a control chip 101, a sensing chip 103, and a transmission path 105. The control chip 101 and the sensing chip 103 are different chips. In other words, the control chip 101 and the sensing chip 103 are independent of each other. In addition, the transmission path 105 is located outside the control chip 101 and the sensing chip 103, and is coupled between the control chip 101 and the sensing chip 103.
[0030] The control chip 101 can include a control circuit 107, an I / O interface It_1, and a storage device SD_1. The control circuit 107 is a circuit having an operation function, such as a MCU (Micro Controller Unit), a CPU (Central Processing Unit), or the like. The I / O interface It_1 is an interface that can comply with various communication protocols. For example, the I / O interface It_1 can comply with a communication protocol SPI (Serial Peripheral Interface Bus), UART (Universal Asynchronous Receiver / Transmitter), I2C (Inter-Integrated Circuit), or I3C (Improved Inter Integrated Circuit), but is not limited thereto. In addition, the transmission path 105 is a path having a transmission function, such as a transmission line or a bus bar.
[0031] The sensing chip 103 includes a sensor 109, an I / O interface It_2, and a storage device SD_2. The I / O interface It_2 is an interface that can comply with various communication protocols. For example, the I / O interface It_2 can comply with a communication protocol SPI, UART, I2C, or I3C, but is not limited thereto. In the following embodiments, the transmission path 105 is coupled between the I / O interface It_1 and the I / O interface It_2. However, the transmission path 105 can be coupled to the control chip 101 and the sensing chip 103 in other ways. In an embodiment, the control chip 101 is used to control an optical navigation system, such as an optical mouse, and the sensor 109 is an optical sensor. It is noted that the scope of the present application is not limited to such an example. In an embodiment, the sensor 109 is a touch sensor.
[0032] In Figure 1In an embodiment, the control circuit 107 encrypts the output information OI_1 (first output information) by the key K_1 (first key) to generate the encrypted information EI_1 (first encrypted information), and outputs the encrypted information EI_1 to the sensor 109 through the transmission path 105. The output information OI_1 can be information generated by the control circuit 107 or information received by the control circuit 107. In an embodiment, the output information OI_1 is information used to set the action parameters of the sensor 109. For example, the output information OI_1 includes the address or parameters used to set the exposure time, gain, or action clock signal of the sensor 109. In another embodiment, the control chip 101 or the sensing chip 103 can include an address, buffer, or register, and the output information OI_1 includes the address of the sensing chip 103, or the access address of the buffer or register (i.e., the value of the register). These action parameters or access parameters are also encrypted by the key K_1.
[0033] In an embodiment, the key K_1 is recorded in a storage device SD_1 inside the control chip 101. When the key K_1 is recorded in the storage device SD_1, the control chip 101 does not output the key K_1, nor receive the key K_1 from the outside. In an embodiment, the key K_1 is recorded in the storage device SD_1 when the control chip 101 is manufactured. When the control chip 101 is completed and starts to operate, the control chip 101 does not output the key K_1 to any other device, nor receive the key K_1 again. However, in an embodiment, the key stored in the control chip 101 can be updated to another key. The update function of the key K_1 can be enabled or disabled. For example, the update function of the key K_1 can be enabled or disabled by an electric fuse provided in the control chip 101 or other setting method that can be performed by the control circuit 107.
[0034] In an embodiment, the update is performed by a circuit inside the control chip 101 (e.g., the control circuit 107) according to a rule recorded in the control chip 101. For example, if the recorded rule includes 10 keys, the update can mean changing the current key to another one of the 10 keys. Such an action can be controlled by another element in the same electronic device. For example, the control circuit 107 can be controlled by the sensor 109 to perform the update. In an embodiment, the update cannot be controlled by a signal from the outside of the control chip 101, and thus the information security mechanism can be further enhanced.
[0035] After the sensor 109 receives the encrypted information El l, the sensor 109 can decrypt the encrypted information El l by using the key K l'. The key K l' can be a key corresponding to the key K l, and is used to decrypt the encrypted information encrypted by the key K l. In one embodiment, the key K l and the key K l' can have the same content. However, in another embodiment, the key K l and the key K l' can have different content. In one embodiment, the key K l' is recorded in the storage device SD 2 when the sensor chip 103 is manufactured.
[0036] Figure 1 The encryption and decryption algorithm used in the embodiments can be selected according to different requirements. For example, if a simple encryption and decryption is required, the encryption and decryption algorithm can be a bit exchange, a bit inversion, or an exclusive OR (XOR) operation. If a higher security is required, the encryption and decryption algorithm can be an Advanced Encryption Standard (AES). However, the scope of the present application is not limited to these algorithms.
[0037] Figure 2 A block diagram of a sensor chip with an information security mechanism according to one embodiment of the present application is shown in FIG. 1. In Figure 2 The sensor system 100 also includes a control chip 101, a sensor chip 103, and a transmission path 105. The control chip 101 and the sensor chip 103 are different chips. In other words, the control chip 101 and the sensor chip 103 are independent of each other. In addition, the transmission path 105 is located outside the control chip 101 and the sensor chip 103, and is coupled between the control chip 101 and the sensor chip 103. The other elements and Figure 1 The other elements and
[0038] In Figure 2 In one embodiment of the present application, the sensor 109 encrypts the output information OI 2 (second output information) by using a key K 2 (second key) to generate encrypted information El 2 (second encrypted information), and outputs the encrypted information El 2 to the control circuit 107 through the transmission path 105. In one embodiment, the output information OI 2 includes sensing data generated by the sensor 103. For example, as described above, the sensor chip 103 can be used in an optical navigation system, and the sensor 109 is an optical sensor. In this case, the output information OI 2 includes motion data generated by the optical sensor. These sensing data are also encrypted to generate the encrypted information El 2.
[0039] In one embodiment, the key K_2 is recorded in a storage device SD_2 inside the sensor chip 103. When the key K_2 is recorded in the storage device SD_2, the sensor chip 103 does not output the key K_2 nor receive the key K_2 from the outside. In one embodiment, the key K_2 is recorded in the storage device SD_2 at the time of manufacturing the sensor chip 103. When the sensor chip 103 is manufactured and starts to operate, the sensor chip 103 does not output the key K_2 to any other device nor receive the key K_2 again. However, in one embodiment, the key stored in the sensor chip 103 can be updated to another key. The update function of the key K_2 can be enabled or disabled. For example, the update function of the key K_2 can be enabled or disabled by an electric fuse provided in the sensor chip 103 or other setting method that can be performed by the sensor 109.
[0040] In one embodiment, the update is performed by a circuit inside the sensor chip 103 (e.g., the sensor 109) according to a rule recorded in the sensor chip 103. For example, if the recorded rule includes 10 keys, the update can mean changing the current key to another one of the 10 keys. Such an action can be controlled by another element in the same electronic device. For example, the sensor 109 can be controlled by the control circuit 107 to perform the update. In one embodiment, the update cannot be controlled by a signal from the outside of the sensor chip 103, and thus the information security mechanism can be further enhanced.
[0041] After receiving the encrypted information EI_2, the control circuit 107 can decrypt the encrypted information EI_2 by the key K_2'. The key K_2' can be a key corresponding to the key K_2 to decrypt the encrypted information encrypted by the key K_2. In one embodiment, the key K_2 and the key K_2' can have the same content. However, in another embodiment, the key K_2 and the key K_2' can have different contents. In one embodiment, the key K_2' is recorded in the storage device SD_1 at the time of manufacturing the control chip 101.
[0042] Figure 2 The encryption and decryption algorithm employed in the embodiments can be selected according to different needs. For example, if a simple encryption and decryption is needed, the encryption and decryption algorithm can be a bit exchange, a bit inversion, or an XOR operation. If higher security is needed, the encryption and decryption algorithm can be an advanced encryption standard. However, the scope of the present application is not limited to these algorithms.
[0043] In Figure 1 and Figure 2In one embodiment, only one of the control chip 101 and the sensing chip 103 has the encryption function, and the other of the control chip 101 and the sensing chip 103 has the decryption function. However, the control chip 101 or the sensing chip 103 can have both the encryption and decryption functions. Figure 3 A block diagram of a sensing system with information security mechanism according to one embodiment of the present application is shown. Figure 3 The illustrated embodiment can be considered as Figure 1 and Figure 2 a combined embodiment of the illustrated embodiments.
[0044] In Figure 3 , the sensing system 300 also includes a control chip 101, a sensing chip 103, and a transmission path 105. The control chip 101 and the sensing chip 103 are different chips. In other words, the control chip 101 and the sensing chip 103 are independent of each other. In addition, the transmission path 105 is external to the control chip 101 and the sensing chip 103, and is coupled between the control chip 101 and the sensing chip 103. The other elements and Figure 1 of the sensing system 300 are the same as those of the sensing system 100, and thus are not described again here.
[0045] In Figure 3 , the control circuit 107 encrypts the output information OI_1 by the key K_1 to generate encrypted information EI_1, and outputs the output information OI_1 to the sensor 109 through the transmission path 105. The sensor 109 can decrypt the encrypted information EI_1 by the key K_1'. Similarly, the sensor 109 encrypts the output information OI_2 by the key K_2 to generate encrypted information EI_2, and outputs the output information OI_2 to the control circuit 107 through the transmission path 105. The control circuit 107 can decrypt the encrypted information EI_2 by the key K_2'.
[0046] As mentioned before, in one embodiment, the output information OI_1 is information used to set the action parameters of the sensor 109. For example, the output information OI_1 includes parameters used to set the exposure time, the gain, or the action clock signal of the sensor 109. In another embodiment, the control chip 101 or the sensing chip 103 can include a buffer or a register, and the output information OI_1 includes the access address of the buffer or the register. These action parameters or access parameters are also encrypted by the key K_1. In one embodiment, the output information OI_2 includes the sensing data generated by the sensor 103. For example, as mentioned above, the sensing chip 103 can be used in an optical navigation system, and the sensor 109 is an optical sensor. In this case, the output information OI_2 includes the movement data generated by the optical sensor. These sensing data are also encrypted to generate the encrypted data EI_2.
[0047] In Figure 3 Embodiments, the keys K_1 and K_2' can be stored in a storage device SD_1 provided inside the control chip 101. In addition, the keys K_1' and K_2 can be stored in a storage device SD_2 provided inside the sensor chip 103. In such embodiments, the keys K_1 and K_2 can be the same, but can also be different. Other details of the keys K_1, K_2, K_1', K_2', the encryption algorithm, and the decryption algorithm have been detailed in Figure 1 and Figure 2 Embodiments, and will not be repeated here.
[0048] In the above embodiments, the sensor 109 directly receives the output information EI_1 and decrypts the output information EI_1. However, the output information EI_1 can be stored to a register or buffer inside the sensor chip 103, and then the sensor 109 decrypts the output information EI_1 stored in the register or buffer. Similarly, the output information EI_2 can be stored to a register or buffer inside the control chip 101, and then the control circuit 107 decrypts the output information EI_2 stored in the register or buffer.
[0049] As mentioned above, the key K_1 can be recorded in the storage device SD_1 of the control chip 101 at the time of manufacturing the control chip 101, and the key K_2 can be recorded in the storage device SD_2 of the control chip 103 at the time of manufacturing the control chip 103. The keys K_1, K_2 can also be recorded in the control chip 101 and the sensor chip 103, respectively, by other methods.
[0050] For example, the control chip 101 and the sensor chip 103 can be sent to a downstream manufacturer for further processing after being manufactured in a factory and before being sold to an end consumer. The downstream manufacturer can record the keys K_1, K_2 to the control chip 101 or the sensor chip 103 as in the following examples.
[0051] Example 1:
[0052] Write the initial encryption keys before the control chip 101 and the sensor chip 103 are mounted on a printed circuit board.
[0053] a. Control chip 101: Write the key through the control circuit 107, which downloads firmware through its debug port or through a dedicated firmware download path.
[0054] b. Sensor chip 103: Write the key through the sensor communication interface, such as I2C / I3C / SPI / UART. The initial key is one-time programmable and unreadable to prevent hacking after the key is written.
[0055] In one example, the initial key needs to be handled carefully during the manufacturing process of the control chip 101 and the sensor chip 103 to prevent key leakage.
[0056] Example 2:
[0057] The initial key is embedded in the firmware of the control circuit 107. When the printed circuit board is first powered on in the factory of the downstream manufacturer, the initial key will be written to the sensor chip 103.
[0058] a. Control chip 101: The initial key is embedded in the firmware of the control circuit 107, so the initial key can be obtained by downloading the firmware to the control circuit 107 without the need for an additional key writing process.
[0059] b. Sensor chip 103: The key is written through the sensor communication interface, such as I2C / I3C / SPI / UART. The initial key is one-time programmable and unreadable to prevent hacking after the key is written.
[0060] In this case, the key can be controlled by the control circuit firmware developer, and there is no need to provide the key to others to download the firmware or the key.
[0061] According to the above-mentioned embodiments, a sensor system control method can be obtained. Figure 4 A flowchart of a sensor system control method with an information security mechanism according to an embodiment of the present application is illustrated. The sensor system control method is applied to a sensor system including a sensor in a sensor chip, a transmission path, and a control circuit in a control chip, such as the control chip 101, the sensor chip 103, and the transmission path 105 in Figure 1 、 Figure 2 and Figure 3 . The control chip and the sensor chip are independent of each other, and the transmission path is outside the sensor chip and the control chip. The sensor system control method includes:
[0062] Step 401
[0063] The control circuit encrypts the first output information through a first key (for example, the key K_1 of the control circuit 107 in Figure 1 to generate first encrypted information (for example, the encrypted information EI_1 in Figure 1 ).
[0064] Step 403
[0065] The control circuit outputs the first encrypted information to the transmission path.
[0066] Step 405
[0067] The sensor receives the first encrypted information through the transmission path.
[0068] Steps 401, 403 and 405 correspond to Figure 1 the embodiment of FIG. 1. If the sensor system control method corresponds to the embodiment of FIG. 2, the following steps can be included: the sensor encrypts the second output information by a second key (e.g. Figure 2 K_2) to generate second encrypted information (e.g. Figure 2 EI_2) of FIG. 2; and outputs the second encrypted information to the control circuit through the transmission path. Figure 2
[0069] According to the above-described embodiments, appropriate information security mechanisms can be provided to enhance the security of information transmitted between different chips within an electronic device.
[0070] The above-described embodiments are merely preferred embodiments of the present application and are not used to limit the present application. The present application can have various modifications and changes for those skilled in the art. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present application shall be included in the protection scope of the present application.
Claims
1. A control chip, characterized by comprising: The control circuit encrypts output information with a key to generate encrypted information, and outputs the encrypted information to a sensor via a transmission path, the transmission path and the sensor being external to the control chip. The control chip is used to control an optical navigation system, and the sensor is an optical sensor.
2. The control chip of claim 1, wherein, The output information is information for setting an action parameter of the sensor, wherein the action parameter includes an address or a value of a register.
3. The control chip of claim 1, wherein, The output information includes an access address.
4. The control chip of claim 1, wherein, The key is recorded in a storage device inside the control chip, and after the key is recorded in the storage device, the control chip does not output the key nor receive the key from outside.
5. The control chip of claim 1, wherein, The sensor encrypts output information with a key to generate encrypted information, and outputs the encrypted information to a control circuit via a transmission path, the control circuit and the transmission path being external to the sensor chip.
6. A sensor chip, characterized by The output information includes sensing data generated by the sensor. The sensor chip is used in an optical navigation system, and the sensor is an optical sensor.
7. The sensor chip of claim 6, wherein, The output information includes movement data generated by the optical sensor.
8. The sensor chip of claim 6, wherein, The key is recorded in a storage device inside the sensor chip, and after the key is recorded in the storage device, the sensor chip does not output the key nor receive the key from outside.
9. The sensor chip of claim 8, wherein, The control circuit encrypts first output information with a first key to generate first encrypted information; 10. The sensor chip of claim 6, wherein, The control circuit outputs the first encrypted information to the transmission path; 11. A sensing system control method applied to a sensing system including a sensor in a sensing chip, a transmission path, and a control circuit in a control chip, characterized by, The sensor receives the first encrypted information via the transmission path; The sensor chip and the control chip are independent of each other, and the transmission path is external to the sensor chip and the control chip. The sensor system is an optical navigation system, and the sensor is an optical sensor. The first output information is information for setting an action parameter of the sensor, wherein the action parameter includes an address or a value of a register. The first output information includes an access address. The first key is recorded in a storage device inside the control chip, and after the storage device stores the first key, the control chip does not output the first key nor receive the first key from outside.
12. The sensing system control method of claim 11, wherein, Further comprising:
13. The sensing system control method of claim 11, wherein, The sensor encrypts second output information with a second key to generate second encrypted information; 14. The sensing system control method of claim 11, wherein, The second encrypted information is output to the control circuit via the transmission path.
15. The sensing system control method of claim 11, wherein, The second output information includes sensing data generated by the sensor.
16. The sensing system control method of claim 11, wherein, The sensor system is an optical navigation system, and the sensor is an optical sensor, and the second output information includes movement data generated by the optical sensor. The second key of the sensor is stored when the sensor chip is manufactured. The second key is recorded in a storage device inside the sensor chip, and after the storage device stores the second key, the sensor chip does not output the second key nor receive the second key from outside. 17. The sensing system control method of claim 16, wherein, 18. The method of claim 16, wherein the step of determining the presence of the object comprises the step of: determining the presence of the object based on the sensed signal. 19. The method of claim 16, wherein the step of determining the presence of the object comprises the step of: determining the presence of the object based on the sensed signal. 20. The sensing system control method of claim 16, wherein,