Dual-Chip Security Authentication Key Distribution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security chips in IoT and communication systems face vulnerabilities in encryption protection, allowing external attackers to extract key information and break encryption, compromising information security, especially in the context of IoT, home automation, industrial networking, and medical care.
Innovation Solution
A dual-chip design where a security chip and an auxiliary chip work together, with the security key stored on the auxiliary chip and code table data on the security chip, using symmetric encryption and a random number-based key construction to enhance encryption security and reduce calculation costs, even if one chip is compromised.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single security chip stores both security key and code table data, then the device complexity is low, but the information security is compromised because attackers can extract all key data from one chip
Solution Approach 1:
The patent divides the security storage function into two separate chips: a first security chip storing code table data and a second security chip storing security key data. This segmentation ensures that even if one chip is compromised, attackers cannot obtain both key elements needed to break the encryption, thus resolving the contradiction between security and complexity by distributing risk across multiple components.
2Speed
If the security chip performs all security authentication calculations locally, then the authentication speed is fast, but the power consumption increases and the chip becomes more vulnerable to attacks
Solution Approach 1:
The patent introduces an auxiliary chip as an intermediary that performs the security authentication calculations. The first security chip provides code table data, the auxiliary chip performs the cryptographic operations, and the second security chip provides security key data for verification. This distributes the computational load and reduces power consumption in any single chip while maintaining authentication speed.
3Ease of operation
If the security key is stored in plaintext in the security chip, then the authentication process is simple, but the security is compromised because the key can be directly extracted
Solution Approach 1:
The patent applies preliminary encryption to the security key data before storage. The second security chip stores security key data that has been encrypted using a preset algorithm, and the code table data in the first security chip contains the corresponding decryption information. This preliminary action ensures that even if the chips are physically accessed, the key data remains protected, resolving the contradiction between operational simplicity and security.
Data Source
AI summary
A security chip-based security authentication method and system, a security chip, and a readable storage medium are provided. The security authentication method includes: a security chip sending a key acquisition request to an auxiliary chip in response to a security authentication request sent by an upper computer; the auxiliary chip sending, to the security chip, first ciphertext data formed by encrypting a security key in response to the key acquisition request; the security chip decrypting the first ciphertext data to obtain the security key, and performing security authentication with the upper computer in combination with code table data stored on the chip. The security key and the code table data required for security authentication are respectively stored into the security chip and the auxiliary chip.