Dynamic Security Configuration in Automotive Microcontrollers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current micro-controllers in automotive applications face challenges in dynamically configuring security settings, as once security configurations are programmed, they become immutable, making it difficult to analyze malfunctions or temporarily activate/deactivate security features without replacing the entire system.
Innovation Solution
A processing system with a configuration module that allows dynamic configurability of security settings by enabling read and write access to configuration data stored in non-volatile memory, using a hardware configuration module to distribute configuration data to clients and manage access based on mode and life cycle data, with optional keyword verification for security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security configuration data are programmed into non-volatile memory, then security protection is enforced and reliability is improved, but the configuration becomes immutable and adaptability deteriorates
Solution Approach 1:
The configuration data is segmented into multiple blocks, each with different accessibility characteristics. Some blocks are read-only for security-critical parameters, while others are readable and writable for configurable parameters. This segmentation allows simultaneous enforcement of security protection and provision of configuration flexibility.
Solution Approach 2:
The system implements dynamic configurability by allowing certain configuration parameters to be modified during operation through a controlled interface. The configuration module enables runtime modification of non-security-critical parameters while maintaining immutability of security-critical parameters, thus providing adaptability without compromising security.
2Reliability
If debug interface is deactivated for security, then security protection is improved, but ease of operation deteriorates
Solution Approach 1:
The debug interface activation is made dynamic rather than static. The configuration module allows the debug interface to be selectively activated or deactivated based on operational mode. During normal operation, the interface remains deactivated for security. During diagnostic modes, the interface can be activated through controlled access, enabling troubleshooting while maintaining security during regular operation.
Solution Approach 2:
A configuration module acts as an intermediary between the debug interface and the processing system. This module controls access to the debug interface based on configuration parameters, allowing secure deactivation during normal operation while enabling controlled activation during diagnostic phases through a secure configuration interface.
3Adaptability or versatility
If configuration data are made readable and writable, then adaptability is improved, but security protection deteriorates
Solution Approach 1:
Configuration data are segmented into security-critical parameters and configurable parameters. Security-critical parameters are stored in read-only blocks that cannot be modified, while configurable parameters are stored in readable and writable blocks. This segmentation enables adaptability for non-critical parameters while maintaining security protection for critical parameters.
Solution Approach 2:
Different security properties are applied to different parts of the configuration data. Critical security parameters have read-only properties, while non-critical parameters have readable and writable properties. This local differentiation of quality allows the system to provide both security protection and configuration flexibility simultaneously.
Data Source
AI summary
A processing system includes a processing unit; a non-volatile memory storing configuration data; and a configuration data client including a register, wherein the configuration data client is configured to receive the configuration data and store the configuration data in the register. The processing system further includes a hardware configuration circuit configured to read the configuration data from the non-volatile memory and transmit the configuration data, read from the non-volatile memory, to the configuration data client. The hardware configuration circuit may be configured to receive a command, including an access request, from the processing unit and selectively execute the access request.