Connected Dice Authentication Using Asymmetric Key Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Inter-dice communications in multi-chip packages are vulnerable to hardware and software attacks, compromising security and integrity, as existing protocols fail to consider threat actors exploiting gaps in communication.
Innovation Solution
Implementing asymmetric cryptography to secure communications amongst connected dice by using public-key cryptography, where each die generates and validates its public key through a certificate, and a master die manages a chain of identity composition, ensuring only valid messages are recognized and processed, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If inter-dice communications protocols are implemented without cryptographic security, then communication simplicity and ease of operation are maintained, but security and reliability are compromised due to vulnerability to hardware and software attacks
Solution Approach 1:
The patent applies preliminary action by generating and storing cryptographic keys (master key, intermediate keys, leaf keys) and certificates during the manufacturing and initialization phase before the dice begin operational communication. This pre-establishment of security credentials allows the dice to automatically authenticate each other without requiring complex runtime key management, thus improving security while keeping the operational protocol relatively simple
Solution Approach 2:
The patent introduces certificates as an intermediary mechanism that mediates authentication between dice. Instead of requiring direct complex cryptographic handshakes, each die presents a certificate that serves as verified proof of its identity and authority, simplifying the authentication process while maintaining strong security through the certificate validation chain
2Reliability
If asymmetric cryptography is implemented to secure inter-dice communications, then security and reliability are improved, but device complexity and manufacturing complexity increase due to key generation and validation requirements
Solution Approach 1:
The patent segments the cryptographic key hierarchy into distinct levels: a master key stored in a secure element, intermediate keys for different communication contexts, and leaf keys for specific dice identities. This segmentation allows each die to be manufactured with only the necessary portion of the cryptographic hierarchy, reducing manufacturing complexity while maintaining overall system security through the structured key relationships
Solution Approach 2:
The patent implements self-service by enabling each die to autonomously generate its own cryptographic credentials and validate certificates from other dice using the pre-established key hierarchy. This self-service capability eliminates the need for complex external key management infrastructure during manufacturing and operation, reducing manufacturing complexity while ensuring security through consistent cryptographic validation
Data Source
AI summary
A plurality of dice having at least a first die and a second die. The first die can generate a measure of the first die using a cryptographic algorithm, a public key and a private key, and a digital signature according to the measure and the private key. The digital signature can include a digest encrypted by the private key. The digest can include the measure. The first die can communicate the measure, the digital signature, and the public key to the second die. The second die can store a validation code representative of a measure of the first die and validate the digital signature using the public key as well validate the measure by comparing the measure to the validation code.