I2C Bus Authentication Agent for Secure Multi-Master Transactions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
I2C bus communications lack standard security measures, making them vulnerable to attacks and tampering, as attackers can monitor and replicate transactions, and it is difficult to distinguish between legitimate and rogue transactions in multi-master environments.
Innovation Solution
Implementing an Authentication Agent with a shared secret key that performs cryptographic hashing on I2C transactions, allowing verification of transaction legitimacy and enhancing system reliability by using repeated start conditions and error detection mechanisms, with optional watchdog timers and public key cryptography for secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If I2C bus allows multiple masters to coexist for flexibility, then adaptability is improved, but security and transaction authenticity deteriorate
Solution Approach 1:
The patent introduces an Authentication Agent as an intermediary component on the I2C bus that mediates between multiple masters and slave devices. This agent monitors bus transactions, verifies their authenticity using cryptographic hash functions, and prevents unauthorized access, thereby maintaining security while preserving multi-master functionality
Solution Approach 2:
The system performs preliminary authentication actions by calculating cryptographic hash values of transactions before they are executed on the bus. The Authentication Agent pre-verifies transaction legitimacy using shared secret keys, ensuring that only authenticated transactions are processed, thus preventing security issues before they occur
2Ease of operation
If I2C bus remains unsecured for simplicity, then ease of operation is improved, but security and vulnerability to attacks worsen
Solution Approach 1:
The Authentication Agent serves as an unobtrusive intermediary that automatically performs security functions without requiring changes to existing I2C devices or complex configuration. It transparently monitors and authenticates transactions, maintaining ease of operation while providing robust security against attacks
Solution Approach 2:
The system implements self-service security where the Authentication Agent autonomously performs authentication operations using pre-shared secret keys. The agent independently calculates hash values, compares transactions, and detects anomalies without external intervention, providing security while maintaining system simplicity
3Reliability
If cryptographic authentication is implemented on I2C bus, then security is improved, but device complexity increases
Solution Approach 1:
The patent segments the security function into a separate Authentication Agent component distinct from existing I2C devices. This agent handles all cryptographic operations including hash calculations and authentication logic, while existing I2C masters and slaves continue to operate unchanged, thereby providing security without increasing overall system complexity
Solution Approach 2:
The Authentication Agent is designed as a universal component that can authenticate transactions between any I2C master and slave devices on the bus. It performs multiple functions including transaction monitoring, hash calculation, authentication verification, and error detection, consolidating security functionality into a single multi-functional element that simplifies integration
4Reliability
If transaction monitoring is added to detect rogue transactions, then security is improved, but processing time and productivity deteriorate
Solution Approach 1:
The Authentication Agent performs preliminary hashing of transaction data as it flows across the bus, allowing verification to occur in parallel with normal transaction processing. By pre-calculating and comparing hash values during transaction execution rather than after completion, the system maintains verification capability while minimizing impact on transaction speed
Data Source
AI summary
This invention enables authenticated communications (transactions) to take place on a standard I2C bus without requiring modification of existing I2C devices. Read and write transactions occurring on the bus are authenticated using an Authentication Agent and a shared secret key. In addition to allowing verification of the legitimacy of the transactions, the authentication of the I2C transactions enhances the reliability and serviceability of the bus and devices on the bus by allowing the Baseboard Management Controller (BMC) to quickly determine and pinpoint errors.