Cryptographic Processor Segmentation for FIPS Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The process of obtaining FIPS 140-2 certification for hardware devices is time-consuming and inflexible, making it difficult to accommodate changing application requirements, especially since hardware design has long lead times and requires extensive certification for modifications.
Innovation Solution
A cryptographic processing system that includes a cryptographic processor and a general-purpose processor, where the cryptographic processor is FIPS-compliant and executes a limited instruction set, allowing it to perform secure cryptographic operations while the general-purpose processor is not subject to stringent FIPS certification requirements, enabling flexible and secure transaction processing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a hardware device is designed to be FIPS 140-2 certified, then security compliance is improved, but flexibility and adaptability to changing requirements deteriorate due to long certification lead times and strict modification constraints
Solution Approach 1:
The system is divided into two distinct processing units: a cryptographic processor that handles FIPS 140-2 certified cryptographic operations, and a general-purpose processor that handles application logic and can be modified without re-certification. This segmentation allows the certified portion to maintain security compliance while the uncertified portion provides flexibility for adapting to changing requirements.
Solution Approach 2:
The cryptographic processing functions are extracted from the general-purpose processor and placed into a separate cryptographic processor that is specifically designed for FIPS 140-2 certification. This extraction allows the general-purpose processor to be modified freely while the cryptographic processor maintains its certified status, resolving the contradiction between security compliance and adaptability.
2Adaptability or versatility
If hardware design is modified to accommodate new application requirements, then adaptability is improved, but FIPS certification is invalidated and must be updated, increasing time and complexity
Solution Approach 1:
By segmenting the system into certified and uncertified portions, modifications can be made to the general-purpose processor without triggering re-certification requirements for the cryptographic processor, thereby eliminating certification update time for routine adaptations.
Solution Approach 2:
Cryptographic operations are extracted into a separate certified module, isolating the certification burden to only that module. This allows the rest of the system to evolve and adapt to new requirements without affecting the certified portion, preventing time loss from certification updates.
3Adaptability or versatility
If a general purpose operating system is used to provide flexibility, then adaptability is improved, but extensive additional FIPS certification is required, increasing complexity and time
Solution Approach 1:
The system segments functionality so that the general-purpose operating system runs on an uncertified processor for flexible application execution, while a separate cryptographic processor handles all FIPS 140-2 certified operations. This segmentation reduces certification complexity by limiting the certified scope to only the cryptographic functions.
Solution Approach 2:
Cryptographic functions are extracted from the general-purpose operating system environment and placed in a dedicated cryptographic processor. This extraction allows the operating system to provide flexibility without requiring extensive FIPS certification, as only the cryptographic processor needs to be certified.
Data Source
AI summary
Processor system with a general purpose processor and a cryptographic processor dedicated to performing cryptographic operations and enforcing the security of critical security parameters. The cryptographic processor prevents exposure of critical security parameters outside the cryptographic processor itself, and instead implements a limited scripting engine, which can be used by the general purpose processor to execute operations that require the critical security parameters.