Hardware Security Module Access Control via Segmentation and Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure storage technologies in hardware security modules (HSMs) face challenges in efficiently storing critical information, ensuring its integrity and confidentiality, and reducing unnecessary operations in host systems, particularly due to vulnerabilities in access control and data protection.
Innovation Solution
A method is introduced that generates access control request information by the host for secure data pieces associated with application programs, which is then authenticated and processed by a security module using an access table and electronic signatures, ensuring secure and efficient storage within the HSM.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If critical information is stored in the host system, then data accessibility is improved, but data security and integrity deteriorate due to potential hacking, unauthorized access, and deletion
Solution Approach 1:
The system separates the host system into two distinct components: a host region for general operations and a security module with a secure storage region for critical information. This segmentation isolates sensitive data from potential threats in the host system while maintaining controlled access through defined communication interfaces.
Solution Approach 2:
A security module acts as an intermediary between the host system and critical information storage. The module receives requests from the host, performs authentication and verification operations, and returns results without exposing the actual critical data to the host, thus maintaining both accessibility and security.
2Reliability
If data decoding, MAC verification, and electronic signature verification are performed after booting, then data integrity is ensured, but system startup time increases
Solution Approach 1:
The system performs data decoding, MAC verification, and electronic signature verification in advance during the data storage phase rather than waiting until after booting. This preliminary action ensures data integrity is established before the system starts, eliminating the time penalty during startup while maintaining security requirements.
3Speed
If the host system directly accesses storage regions, then operation speed is improved, but security control deteriorates due to unexpected access and reprogramming
Solution Approach 1:
The storage system is segmented into a host region accessible by the host system and a secure storage region within the security module that is physically or logically isolated. This segmentation prevents direct access to critical data while maintaining efficient communication through defined interfaces for authorized operations.
Solution Approach 2:
The security module serves as an intermediary that controls all access to the secure storage region. It receives access requests from the host, performs necessary verifications, and manages data transfer, thereby maintaining security control while enabling efficient authorized access operations.
Data Source
AI summary
Proposed is a method of efficiently storing critical information in a secure place within a hardware security module. The method includes: generating, by a host, access control request information for requesting control of access to a secure data piece associated with at least one application program when the at least one application program is executed; authenticating, by a security module, the at least one application program according to the access control request information; and processing, by the security module, the access control request information according to a result of the authenticating.