Hardware and Embedded Software Authentication via Electromagnetic Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods fail to guarantee the authenticity of hardware and embedded software sets, particularly when moved between suppliers and customers, and cannot detect tampering or eavesdropping without modifying the hardware or software, leading to potential corruption or unauthorized data transmission.
Innovation Solution
A method and device that authenticate hardware and embedded software by comparing unique records, including hashes, signal correspondences, and electromagnetic signatures, ensuring no design changes are needed, and detecting tampering or eavesdropping.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing authentication methods are used, then hardware or software can be authenticated separately, but the authenticity of the integrated hardware and software set cannot be guaranteed
Solution Approach 1:
The patent merges hardware authentication and software authentication into a single integrated system. The authentication server receives both hardware identification data and software identification data, combines them into a unified authentication process, and issues a single authentication result that validates the entire hardware-software set as an integrated system, thereby guaranteeing authenticity without requiring separate authentication processes.
Solution Approach 2:
The authentication server performs multiple functions within a single system: it authenticates hardware components, authenticates software components, validates the integration between hardware and software, and issues unified authentication certificates. This multi-functional approach ensures comprehensive authenticity guarantee while avoiding the complexity of multiple separate authentication systems.
2Ease of operation
If no modifications are made to hardware or software, then authentication should be non-intrusive, but tampering and eavesdropping cannot be detected
Solution Approach 1:
The system performs preliminary authentication actions by establishing baseline characteristics of the hardware and software before any potential tampering occurs. The authentication server records the initial hardware identification data and software identification data, creating a reference profile that can be used to detect future changes, tampering, or eavesdropping attempts without requiring continuous modification of the system.
Solution Approach 2:
The authentication system provides feedback mechanisms that continuously monitor the hardware and software for unauthorized changes. When authentication requests are made, the server compares current hardware and software characteristics against the stored baseline profiles, providing immediate feedback on any deviations that indicate tampering or eavesdropping, all without modifying the original system components.
3Adaptability or versatility
If hardware is moved between supplier and customer, then authentication should remain valid, but tampering during transport cannot be detected
Solution Approach 1:
The authentication server establishes a baseline profile of the hardware and software immediately after delivery from the supplier. This preliminary authentication creates a reference state that can be compared against future measurements, enabling the system to detect any tampering that occurs during transport or storage while maintaining continuous authentication validity throughout the product lifecycle.
Solution Approach 2:
The system implements continuous feedback monitoring that compares current hardware and software characteristics against the baseline profile established at delivery. Any deviations detected during transport or subsequent use provide immediate feedback on potential tampering, ensuring integrity verification without requiring physical re-authentication or system modifications.
4Measurement precision
If electromagnetic signature comparison is used, then authentication can be performed, but small variations cause false positives
Solution Approach 1:
The system changes the parameters used for comparison from raw electromagnetic signature values to normalized and standardized identification data. The authentication server processes electromagnetic characteristics through transformation functions that convert them into standardized hardware identification data and software identification data, which can be reliably compared without being affected by minor electromagnetic variations, thereby eliminating false positives while maintaining measurement precision.
Data Source
AI summary
A device and a method for verifying the authenticity of hardware and its embedded software. The method of the invention includes the steps of: a) obtaining an identified record of each unique hardware and software device; b) subsequently interrogating this same unique hardware and software device to compare said identified record obtained in the interrogation with that previously recorded; and c) identify corruption, tampering and/or intrusion/eavesdropping of the hardware/embedded software set when comparing the records does not result in a match. The device is structured and configured to carry out the method.