Autonomous Memory Checker for Runtime Integrity Assurance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for ensuring code integrity in embedded systems during runtime are inadequate, as they only provide one-time authentication and fail to address the risk of tampering with instruction memory contents after initial validation, making them vulnerable to 'piggy-back' attacks and memory corruption.
Innovation Solution
An autonomous memory checker is implemented that generates and stores memory reference values during boot-time, which are then proactively compared during runtime using various monitoring schemes such as point checks, block checks, and write-read checks to ensure the integrity of trusted information, and can operate independently without host processor intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If one-time authentication is performed during boot-time, then system initialization and trusted environment setup is achieved, but runtime memory integrity is vulnerable to tampering and piggy-back attacks
Solution Approach 1:
The patent performs preliminary actions by generating and storing memory reference values during boot-time before runtime operations begin. These reference values are saved in non-volatile memory or a secure storage area, enabling subsequent runtime integrity checks without requiring complex continuous validation mechanisms during operation.
Solution Approach 2:
The patent implements feedback by periodically comparing current memory contents against the stored memory reference values during runtime. This feedback mechanism detects any modifications to memory contents, allowing the system to respond to integrity violations through error signals or hardware actions while maintaining relatively simple implementation.
2Reliability
If continuous memory monitoring is implemented, then runtime security assurance is improved, but system performance and energy consumption are impacted
Solution Approach 1:
The patent applies periodic action by implementing memory integrity checks at specific intervals or triggered by particular events during runtime, rather than continuously monitoring. This periodic monitoring approach maintains security assurance while significantly reducing energy consumption compared to continuous monitoring, as the memory checker only activates when needed based on the periodic schedule or event triggers.
3Reliability
If autonomous memory checking is implemented, then runtime security is improved, but device complexity and hardware resources are increased
Solution Approach 1:
The patent implements self-service by designing the memory checker to operate autonomously during runtime without requiring intervention from the host processor or external control systems. The memory checker independently compares memory contents against stored reference values and generates error signals when discrepancies are detected, providing runtime security assurance while minimizing the hardware resources needed by eliminating the need for complex centralized control mechanisms.
Data Source
AI summary
Methods and apparatus are provided for an electronic device having an autonomous memory checker for runtime security assurance. The autonomous memory checker comprises a controller, a memory reference file coupled to the controller, and an authentication engine coupled to the controller. A check is performed during runtime operation of the electronic device. The autonomous memory checker generates runtime reference values corresponding to trusted information stored in memory. The runtime reference values are compared against memory reference values stored in the memory reference file. The memory reference values are generated from the trusted information stored in memory. An error signal is generated when the runtime reference values are not identical to the memory reference values thereby indicating that the trusted information has been modified.