Boundary Scan Interface Security via Key String Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current boundary scan technologies face challenges in ensuring secure access to sensitive information due to extensive hardware and software requirements, making it difficult to protect critical data from unauthorized access during testing and diagnostics of highly integrated circuit boards.
Innovation Solution
A method and apparatus that utilize a key string comparison logic, including a shift register, XNOR gates, and a multi-input AND gate to grant access to a boundary scan chain only when the input key string matches a stored key string, along with the implementation of an inhibit pin and an enhanced Test Access Port controller to prevent sensitive data exposure and sanitize chips before allowing interface access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If boundary scan interface is made accessible for testing and diagnostics, then testing capability is improved, but security of sensitive data deteriorates
Solution Approach 1:
The patent introduces an intermediary authentication mechanism (key string comparison logic) between the boundary scan interface and the sensitive data. This intermediary layer verifies authorization before allowing access to testing functions, thus enabling testing capability while preventing unauthorized access to sensitive information.
Solution Approach 2:
The patent implements preliminary authentication actions (key string input and comparison) before granting access to the boundary scan interface. By performing this security check in advance, the system ensures that only authorized users can access testing functions, resolving the contradiction between accessibility and security.
2Object-affected harmful factors
If key string authentication is implemented, then security of sensitive data is improved, but device complexity increases
Solution Approach 1:
The patent segments the authentication function into distinct modular components: a shift register for key input, XNOR gates for bit-by-bit comparison, and control logic for authentication state management. This segmentation allows the security feature to be implemented with discrete, manageable hardware elements rather than a monolithic complex system.
Solution Approach 2:
The patent changes the parameter of authentication from complex multi-factor authentication to simple key string comparison. By using basic digital logic components (shift registers, XNOR gates, AND gates) instead of sophisticated authentication protocols, the system achieves security through parameter simplification rather than increased complexity.
Data Source
AI summary
The present invention is a method including: receiving an input key string; comparing the input key string with a stored key string; and granting access to a boundary scan chain when the input key string matches the stored key string, the boundary scan chain being at least one of: a Boundary Data Register of at least one Joint Test Action Group (JTAG)-compliant device; or, a plurality of communicatively coupled JTAG-compliant devices.