Double Authenticated Encryption for Secure Element Data Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In constrained environments like IoT systems, secure elements face vulnerabilities to physical attacks such as side-channel and fault attacks, compromising the security of digital information stored in external non-volatile memory and during processing.
Innovation Solution
Implementing error-detection and error-correction codes for digital information within secure elements, combined with authenticated encryption, to ensure integrity and security during loading and processing, using a method like 'Encrypt-then-MAC' and segmenting data into words suitable for the secure processor's architecture.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If digital information is stored in external non-volatile memory to reduce secure element cost, then cost is reduced, but security against physical attacks deteriorates
Solution Approach 1:
The patent segments the digital information into words and associates error-detection codes with each word. This segmentation allows the secure element to maintain security by processing data in smaller units with individual protection, while still utilizing external memory for storage. The code associating unit creates separate error-detection code words that can be independently verified during processing.
Solution Approach 2:
The patent introduces error-detection codes as an intermediary between the digital information stored in external memory and the secure processor. These codes act as a mediator that verifies the integrity of data during transfer and processing, enabling the secure element to trust data from external sources without compromising security or requiring additional costly hardware in the secure element itself.
2Reliability
If error-detection codes are generated and associated with digital information words, then integrity is improved, but device complexity increases
Solution Approach 1:
The patent segments the digital information into words and generates error-detection codes for each word individually. This segmentation approach distributes the complexity across multiple small units rather than requiring a single complex system. The code associating unit processes data in manageable chunks, making the overall system more manageable while maintaining high integrity protection.
Solution Approach 2:
The secure element uses its existing processing resources to generate and verify error-detection codes without requiring external assistance. The code associating unit and secure processor work together to create and verify codes using the secure element's own computational capabilities, avoiding the need for additional external security devices or complex inter-system communication.
3Productivity
If digital information is loaded from external memory to internal memory for processing, then processing capability is improved, but vulnerability to fault attacks increases
Solution Approach 1:
The patent performs preliminary action by generating and associating error-detection codes with digital information before loading it into the secure element's internal memory. This preliminary protection ensures that when data is subsequently loaded and processed, the error-detection codes are already in place to verify integrity and detect faults, preventing attack vectors during the loading and processing phases.
Solution Approach 2:
The patent implements feedback mechanisms where the secure processor verifies error-detection codes during processing and can request re-transmission or correction of data if faults are detected. This feedback loop continuously monitors the processing operation and adjusts behavior based on detected anomalies, preventing fault attacks from compromising the processing capability.
Data Source
AI summary
A method if provided for securely processing digital information performed by a secure element having a secure processor. The method includes loading the digital information from an external memory into the secure element; segmenting the digital information into words of digital information (Wij,k), generating error-detection codes or error-correction codes from said words of digital information and associating said error-detection codes with the corresponding words; transferring the words of digital information and the associated error-detection codes or error-correction codes to the secure processor; and in the secure processor, verifying the words of digital information based on the associated error-detection codes or error-correction codes before processing the digital information contained in said words.