Hypervisor-Based Security Module for Automotive Cryptographic Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In security-relevant areas, such as automotive control units, existing technologies fail to provide a secure environment for cryptographic keys and sensitive data, as they are vulnerable to unauthorized access and manipulation, lacking effective separation of applications and resources.
Innovation Solution
A hypervisor is implemented within an electronic hardware security module (HSM) to strictly separate applications and data from system resources, using a memory protection unit (MPU) to regulate access and execute software, ensuring all operations occur in user mode with restricted access, and employing secure boot features to prevent manipulation of the hypervisor code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If applications and cryptographic functionalities are executed in the same environment without strict separation, then device complexity is reduced, but security is compromised due to unauthorized access and mutual interference
Solution Approach 1:
The patent divides the HSM into multiple isolated virtual machines, each running applications or cryptographic functionalities in separate execution environments. The hypervisor creates distinct virtual address spaces and memory regions for each VM, preventing unauthorized access between applications and ensuring that cryptographic keys and sensitive data remain protected from application-level attacks.
Solution Approach 2:
The hypervisor serves as an intermediary layer between applications and hardware resources, including cryptographic functionalities. It mediates all access requests, enforcing security policies and controlling resource allocation. This intermediary prevents direct access to sensitive areas while maintaining controlled communication through defined interfaces.
2Ease of operation
If applications have direct access to hardware resources and cryptographic functionalities, then ease of operation is improved, but security is worsened due to vulnerability to unauthorized access and manipulation
Solution Approach 1:
The hypervisor acts as a controlled intermediary that manages all access to hardware resources and cryptographic functionalities. Applications interact with resources through hypervisor-enforced interfaces, which log and control access patterns. This maintains ease of operation through standardized APIs while preventing unauthorized access and manipulation.
Solution Approach 2:
Different virtual machines are assigned different access rights and permissions based on their specific needs. Cryptographic VMs have access to security-critical resources, while application VMs have restricted access to user data and processing resources. This localized access control maintains operational efficiency while enhancing security.
Data Source
AI summary
A method and a computer program are provided for implementing memory accesses. A hypervisor is used for this purpose, via which the memory access takes place.