ECID Exchange for Interconnect Chip Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need for an effective method and circuit to implement network security in an interconnect system that confirms the validity and trust of multiple interconnect chips, as existing systems are vulnerable to software attacks and lack efficient security measures.
Innovation Solution
A method and circuit for electronic chip identification (ECID) exchange, where each interconnect chip has a unique ECID permanently stored on-chip, sends predefined EXID messages across links, and compares received EXIDs with a system list to verify validity, enabling or disabling ports based on validation, with ECIDs stored in electrically-programmable fuses for added security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software-based security measures are used in the interconnect system, then the system is vulnerable to software attacks, but implementing hardware-based security measures increases device complexity
Solution Approach 1:
The patent replaces software-based security mechanisms with hardware-based security mechanisms. Specifically, it substitutes software identification and authentication processes with hardware-implemented ECID exchange, where the network manager circuitry directly handles security operations in hardware, making the system resistant to software attacks while maintaining manageable complexity through dedicated security circuitry.
Solution Approach 2:
The patent introduces an intermediary ECID (Electronic Chip Identification) mechanism that acts as a hardware-based mediator between interconnect chips. This ECID exchange serves as an intermediate security layer that validates chip identities before allowing communication, preventing unauthorized access without requiring complex software security protocols.
2Reliability
If ECID exchange is implemented on all interconnect chips, then network security is enhanced, but the manufacturing cost and complexity increase
Solution Approach 1:
The patent implements self-service security where each interconnect chip autonomously performs ECID exchange and validation with its neighbors. The network manager on each chip independently manages its own security credentials and validates incoming connections without requiring centralized security management, simplifying manufacturing while enhancing security.
Solution Approach 2:
The ECID (Electronic Chip Identification) is permanently programmed into each interconnect chip during the manufacturing process before the chip is deployed. This preliminary action of pre-provisioning unique security identifiers simplifies subsequent security operations, as the chips arrive ready-to-use with embedded security credentials, reducing post-manufacturing complexity.
3Ease of operation
If ports remain enabled without validation, then network connectivity is maintained, but unauthorized access and security risks increase
Solution Approach 1:
The patent applies preliminary anti-action by disabling ports before they can be exploited for unauthorized access. The network manager automatically disables ports that fail ECID validation, preventing potential security breaches before they occur. This proactive approach maintains connectivity for legitimate devices while blocking unauthorized access attempts.
Solution Approach 2:
The patent implements feedback mechanisms where the network manager continuously monitors ECID exchange outcomes and dynamically adjusts port states based on validation results. When a chip successfully validates its ECID, the port remains enabled; when validation fails, the port is disabled. This feedback loop maintains network connectivity for authorized devices while automatically preventing unauthorized access.
Data Source
AI summary
A method and circuit for implementing electronic chip identification (ECID) exchange for network security in an interconnect system, and a design structure on which the subject circuit resides are provided. Each interconnect chip includes an ECID for the interconnect chip, each ECID is unique and is permanently stored on each interconnect chip. Each interconnect chip sends predefined exchange identification (EXID) messages including the ECID across links to other interconnect chips in the interconnect system. Each interconnect chip compares a received EXID with a system list for the interconnect system to verify validity of the sending interconnect chip.