Bus Security Controller for LPC Peripheral Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Legacy peripherals connected to a shared bus, such as the LPC bus, face security issues due to data snooping and modification, which compromises sensitive information like security keys and passwords, and existing standards like USB are not suitable for low-level on-board communication.
Innovation Solution
A bus security controller is positioned between the central processing unit and peripherals to isolate data, ensuring only targeted peripherals receive active data while others receive masked data, with a configurable LPC router exposing the peripheral interface only to the host CPU and detecting and recovering from bus stalls without system restarts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a shared LPC bus is used to connect multiple LPC peripherals to a central processing unit, then device complexity is reduced and ease of manufacture is improved, but security is compromised because any peripheral can snoop or modify data being communicated by another peripheral
Solution Approach 1:
A bus security controller is introduced as an intermediary device between the LPC bus and individual peripherals. This controller intercepts and inspects data traffic, preventing unauthorized snooping and modification while maintaining the simplicity of the shared bus architecture. The security controller acts as a gatekeeper that allows legitimate communication while blocking malicious actions.
Solution Approach 2:
The system segments data protection by creating isolated communication channels through the security controller. Each peripheral's data communications are segmented and protected individually, allowing the shared bus to maintain its simple structure while providing per-peripheral security isolation.
2Object-affected harmful factors
If USB or other alternative standards are used to protect sensitive data, then security is improved, but adaptability is reduced because these standards are not appropriate for low-level on-board communication
Solution Approach 1:
The bus security controller provides multi-functional security protection that works across different communication scenarios. It maintains compatibility with the existing LPC bus protocol while adding security capabilities, making it adaptable to low-level on-board communication without requiring a complete standard change.
Solution Approach 2:
The system changes the security parameters of the existing LPC bus communication rather than changing the communication standard itself. The security controller modifies data parameters (masking, encryption) while preserving the original LPC protocol structure, ensuring adaptability to low-level communication requirements.
3Ease of operation
If all LPC peripherals receive the same control data on a shared bus, then ease of operation is improved and device complexity is reduced, but loss of information occurs because untargeted peripherals receive unnecessary data
Solution Approach 1:
The bus security controller serves as an intermediary that selectively distributes control data. It receives control data from the CPU and intelligently routes it only to the intended target peripheral, preventing untargeted peripherals from receiving unnecessary information while maintaining simple control data distribution mechanisms.
Solution Approach 2:
The system applies local quality by providing different data treatment to different peripherals. The security controller identifies the target peripheral and applies appropriate data masking or routing specific to each peripheral's needs, ensuring that only the intended recipient receives the actual data while others receive masked or no data.
Data Source
AI summary
Embodiments disclosed herein describe systems and for isolating data communicated to and from peripherals coupled to an LPC bus or similar shared bus. In embodiments, the isolated data may be communicated to only a targeted peripheral while other peripherals receive masked data.