Controller Matrix Bus Authentication Circuit for Startup Integrity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic systems lack effective authentication mechanisms to ensure that startup instructions and operands in memories are not modified by unauthorized entities, posing a security risk in connected objects like home automation systems.

Innovation Solution

An electronic system with a controller that uses a matrix bus to extract and authenticate instructions and operands by generating a representative word, comparing it to a reference word, and taking protective measures such as restarting or shutting down if the instructions are not authentic, ensuring the integrity of boot instructions and operands during system initialization.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If no authentication mechanism is implemented, then the system is simpler and easier to manufacture, but the security and reliability of startup instructions are compromised

Engineering Contradiction:
Improveauthenticity of startup instructionsVSAvoidcomplexity of controller circuits
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements authentication by performing preliminary actions: extracting startup instructions from memory before execution, generating a representative word from these instructions, and comparing this representative word against a reference word stored in the controller. This preliminary verification ensures authenticity before the instructions are executed, preventing unauthorized code from running while maintaining a relatively simple circuit architecture.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an intermediary authentication mechanism that acts as a mediator between the memory containing startup instructions and the execution circuit. The authentication circuit serves as an intermediary that extracts instructions, generates representative words, compares them against reference words, and only permits execution if authentication succeeds. This intermediary layer ensures security without requiring complete redesign of the entire system architecture.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If authentication is performed during system startup, then the security against pirating is improved, but the startup time and initialization duration increase

Engineering Contradiction:
Improveprotection against unauthorized modificationsVSAvoidsystem initialization time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies partial action by performing authentication only on the critical startup instructions extracted from memory, rather than authenticating all operations throughout system execution. The authentication circuit extracts only the necessary startup instructions, generates representative words for these specific instructions, and performs comparison. This selective approach provides adequate security protection while minimizing the time overhead compared to comprehensive authentication of all system operations.

Inventive Principle:
Principle #16Partial or excessive action

3Reliability

If the system shuts down or restarts upon authentication failure, then the security against executed pirate instructions is improved, but the availability and operational continuity decrease

Engineering Contradiction:
Improveprevention of executing unauthorized codeVSAvoidsystem availability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements preliminary anti-action by performing authentication checks before allowing startup instructions to be executed. If the representative word generated from extracted instructions does not match the reference word, the system prevents execution of potentially unauthorized code by shutting down or restarting. This preliminary protective action blocks pirate instructions before they can be executed, ensuring security while limiting system downtime to only when authentication failures occur.

Inventive Principle:
Principle #9Preliminary anti-action

Data Source

PatentUS12158941B2Electronic system and method for authenticating instructions and operands within a controller
Publication Date: 2024.12.03 STMICROELECTRONICS (GRAND OUEST) SAS
  • US12158941B2 patent drawing
  • US12158941B2 patent drawing

AI summary

The present disclosure relates to a method for authenticating instructions and operands in an electronic system comprising a controller. The method includes extracting instructions and operands via a first circuit of the controller from at least a first memory internal to the controller using a matrix bus of the controller, collecting, on the matrix bus, via a second circuit internal to the controller, instructions and operands during their transmission to the first circuit, and generating a word representative of the instructions and operands.