IC Diagnostic Data Transmission via Dual Processing Units
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Integrated circuit devices with tamper-resistant features face challenges in diagnosing shutdown causes and verifying code integrity due to the inability to read internal non-volatile memory, complicating troubleshooting and intellectual property protection.
Innovation Solution
An integrated circuit device with a first and second processing unit, an external interface, and a control program that responds to a reset signal by transmitting diagnostic data after determining a shutdown state, including an integrity verification value of a predetermined code portion, allowing for hidden ATR transmission beyond the standard response time to distinguish from standard ATR signals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a tamper-resistant device feature is implemented to protect internal non-volatile memory, then intellectual property protection is improved, but the ability to diagnose shutdown causes and verify code integrity deteriorates
Solution Approach 1:
The system is divided into two processing units: a first processing unit that handles standard operations and a second processing unit that handles diagnostic functions. The diagnostic data is segmented and stored separately from the protected code, allowing diagnostic access without compromising the tamper-resistant protection of the main code.
Solution Approach 2:
A second processing unit acts as an intermediary that can read and transmit diagnostic data without requiring direct access to the protected non-volatile memory. This intermediary component enables diagnosis while maintaining the integrity of the tamper-resistant system.
2Speed
If diagnostic data is transmitted immediately after reset signal, then response time is improved, but compatibility with existing standards deteriorates
Solution Approach 1:
The system dynamically adjusts its response behavior based on the shutdown state flag. When the flag is not set, it follows the standard ATR response time. When the flag is set indicating a shutdown condition, it transmits diagnostic data after a predetermined period, making the response time adaptive to the situation while maintaining standard compatibility.
Solution Approach 2:
The response time parameter is changed based on the shutdown state. The control program monitors the shutdown state flag and adjusts the timing of diagnostic data transmission accordingly, allowing the system to maintain standard compatibility under normal conditions while providing rapid diagnostic response when needed.
3Adaptability or versatility
If standard ATR response time is maintained, then compatibility with existing standards is improved, but diagnostic information transmission capability deteriorates
Solution Approach 1:
The system performs preliminary actions by setting the shutdown state flag before actually shutting down. This allows the control program to detect the flag during initialization and prepare to transmit diagnostic data, ensuring that diagnostic information is available without compromising standard ATR response timing.
Solution Approach 2:
The system maintains continuous monitoring of the shutdown state flag during initialization. This continuous check ensures that diagnostic data is transmitted without delay when needed, while maintaining standard compatibility when the flag is not set, thus preserving both information availability and standard adherence.
Data Source
AI summary
An integrated circuit device has a first processing unit, a second processing unit, an external interface, and a control program controlling the first processing unit and the second processing unit, and in communication with the external interface. The first processing unit is configured to respond to a reset signal from the external interface by transmitting an answer-to-reset (ATR) to the external interface. When the first processing unit implements an initialization process, the control program makes a determination as to whether a shutdown state flag is set. In response to detecting the shutdown state flag set, the control program controls the second processing unit to transmit to the external interface diagnostic data of the integrated circuit device.