Dual-Microcontroller Security Architecture for Wireless Programming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Microcontrollers in embedded systems often lack network connectivity and secure data transmission capabilities, making it difficult to update programming and secure data exchange, especially in devices without direct connections.
Innovation Solution
A system incorporating a wireless communication microcontroller with a secure element to manage secure data transmission and validation using cryptographic keys, enabling secure programming updates and data exchange.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a microcontroller is connected to a network for remote programming updates, then the ease of operation is improved, but the device complexity and security requirements increase
Solution Approach 1:
The system divides security functions into two parts: the second microcontroller handles wireless communication and basic validation, while the secure element handles cryptographic key storage and session key generation. This segmentation allows the main microcontroller to focus on programming updates without burdening it with complex security operations.
Solution Approach 2:
The secure element acts as an intermediary between the wireless communication module and the programming update process. It generates session keys that mediate the secure transmission of programming data, simplifying the security validation burden on the main microcontroller.
2Reliability
If cryptographic validation is performed for secure data transmission, then the reliability is improved, but the use of energy and computational resources increases
Solution Approach 1:
Session keys are generated in advance by the secure element before data transmission begins. This preliminary action allows the actual data transmission to use simple encryption/decryption operations rather than performing complex cryptographic validation in real-time, reducing energy consumption during the critical data transfer phase.
3Adaptability or versatility
If a wireless communication module is added to enable remote updates, then the adaptability is improved, but the device complexity increases
Solution Approach 1:
The second microcontroller serves multiple functions: it manages wireless communication, handles session key requests, validates programming data, and interfaces with both the secure element and the first microcontroller. This multi-functionality reduces the need for separate dedicated components for each function.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems, apparatuses, and methods that provide for a wireless communication microcontroller for use with a system microcontroller. A first microcontroller is configured to control aspects of a system in which the device can be embedded. A second microcontroller is operatively connected to the first microcontroller, with the second microcontroller including a wireless communication module for wireless communication. A secure element is operatively connected to the second microcontroller, with a cryptographic key being stored in the secure element. The second microcontroller is configured to receive instructions for programming the first microcontroller through the wireless communication module and request a session key from the secure element. The secure element is configured to generate the session key using the cryptographic key. The second microcontroller is further configured validate the instructions using the session key and send the validated instructions to the first microcontroller.