Control Circuit Authorization for Secure Peripheral Commands
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Connected objects with insecure command circuits are vulnerable to remote attacks, allowing malicious entities to transmit unauthorized commands to peripherals, compromising the security and integrity of the system.
Innovation Solution
A method and control circuit that authorize or refuse command signal transmission based on authenticity checks, implement protection measures such as blocking or deactivating the peripheral, and inform the server of potential attacks, ensuring only authenticated commands are processed by the peripheral.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the command circuit is made secure with authentication mechanisms, then the security against remote attacks is improved, but the device complexity increases
Solution Approach 1:
The patent introduces a control circuit as an intermediary component between the command circuit and the peripheral. This control circuit monitors and validates command signals, acting as a mediator that prevents unauthorized commands from reaching the peripheral while maintaining the existing command circuit architecture. The control circuit implements security functions without requiring fundamental changes to the command circuit design.
Solution Approach 2:
The patent segments the control system into distinct functional components: the command circuit that receives orders, the control circuit that validates and monitors commands, and the peripheral that executes actions. This segmentation allows security functions to be isolated in the control circuit, enabling security improvements without increasing the complexity of the entire system uniformly.
2Reliability
If authentication verification is performed for each command, then the security against unauthorized commands is improved, but the processing time increases
Solution Approach 1:
The control circuit performs preliminary validation of command signals by comparing them against stored reference values before allowing execution. This preliminary action ensures that authentication verification is completed in advance, preventing unauthorized commands from proceeding to the peripheral while maintaining efficient processing of authenticated commands.
Solution Approach 2:
The patent uses copying by storing reference command signals in the control circuit that match legitimate commands. Instead of performing complex authentication algorithms for each command, the system copies and compares command patterns against these pre-stored references, significantly reducing processing time while maintaining security.
3Reliability
If the control circuit monitors all command signals, then the detection of unauthorized commands is improved, but the loss of information increases due to potential false positives
Solution Approach 1:
The control circuit applies local quality by implementing selective monitoring strategies. Instead of treating all command signals uniformly, the system applies different validation levels based on the specific command characteristics and context. This allows accurate detection of unauthorized commands while minimizing false positives that would lead to loss of legitimate command information.
Data Source
AI summary
Method for controlling commands suitable to be processed by a peripheral (2) comprising the following steps implemented by a control circuit (6) connected to a communication bus (8), a command circuit (4) and the peripheral (3) also being connected to the communication bus (8): granting or refusing authorization to the command circuit (4) to transmit a command signal of the peripheral via the bus (8), detecting the possible transmission of the command signal for the peripheral by the command circuit via the bus (8), implementing protection measures (614) when the control circuit detects that the command signal has been transmitted as the control circuit has not granted authorization, or that the command signal has not been transmitted as the control circuit has granted authorization.