Electronic Lock Trusted Core Isolation Against Malicious Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic locks are vulnerable to malicious code that can compromise the security of the lock hardware, allowing unauthorized access.
Innovation Solution
Implement a trusted lock-core software module within a secure execution environment, verified by public key infrastructure, to control access and lock hardware, while isolating untrusted software from direct interaction with the lock hardware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If untrusted software is allowed to run on the electronic lock, then functionality and flexibility are improved, but security is worsened due to potential malicious code execution
Solution Approach 1:
The system is divided into two distinct execution environments: a trusted execution environment for the lock-core software module that has exclusive access to lock hardware, and an untrusted execution environment for other software. This segmentation allows untrusted software to run with limited permissions while the critical lock control functions remain isolated and secure in the trusted environment.
Solution Approach 2:
The lock-core software module acts as an intermediary between the untrusted software and the lock hardware. All requests from untrusted software must pass through this module, which verifies trust credentials and enforces security policies before allowing hardware access. This mediator approach enables functionality while maintaining security boundaries.
2Reliability
If software isolation mechanisms are implemented, then security is improved, but device complexity increases
Solution Approach 1:
The trusted execution environment, secure data storage, and lock-core software module are merged into a single integrated system-on-chip (SoC) component. This consolidation reduces overall system complexity by combining multiple security functions into one unified module, while still maintaining the necessary isolation and security boundaries.
Data Source
AI summary
An electronic lock for controlling access to a restricted physical space. The electronic lock comprises: electronically-controllable lock hardware; and a system-on-chip, SoC, comprising a processor and memory. The SoC comprises: a trusted environment comprising a secure data storage and a lock-core software module comprising instructions that, when executed by the processor, cause the electronic lock to: evaluate access for a user based on data stored in the secure data storage and control the lock hardware based on the evaluation; and an untrusted environment comprising untrusted software that is prevented from bypassing the lock-core software module to control the electronically-controllable lock hardware.