Integrated Circuit Dual Security State Logic
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for integrated circuits face challenges in balancing security and testability, as enabling security measures restrict full testing capabilities, while reverting to a testable state for analyzing field returns compromises security.
Innovation Solution
Implementing a dual security operation state system where limited capabilities are available for testing without complex authentication, with logic circuitry controlling access to sensitive functions and information, ensuring no unauthorized access or data extraction during testing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security measures are enabled to protect against tampering and unauthorized access, then security is improved, but testing capabilities are restricted
Solution Approach 1:
The patent divides the operational states into distinct segments: a first security operation state for utility operation with full security protection, and a second security operation state for test operation with limited functionality. This segmentation allows the system to provide comprehensive security during normal operation while enabling testing capabilities when needed, resolving the contradiction between security and testing capabilities.
Solution Approach 2:
The patent implements dynamic state transitions between the first security operation state and the second security operation state. The system can transition from the secure utility operation state to the test operation state when testing is required, and back to the secure state when testing is complete. This dynamic adaptability allows the system to optimize both security and testing capabilities at different operational phases.
2Adaptability or versatility
If full testing capabilities are enabled to analyze field returns and detect defects, then testing coverage is improved, but security is compromised
Solution Approach 1:
The patent segments the operational states to separate testing functions from security-critical functions. The second security operation state provides limited functionality specifically for testing purposes, while the first security operation state maintains full security protection for utility operations. This segmentation enables comprehensive testing coverage without compromising security during normal operation.
Solution Approach 2:
The patent introduces a security mechanism as an intermediary that controls access between the two operational states. The security mechanism verifies authentication information before allowing transitions between states, ensuring that testing can be performed with full coverage while maintaining security through controlled access and state management.
3Reliability
If authentication mechanisms are added to verify software authenticity and enable security, then security is improved, but device complexity increases
Solution Approach 1:
The patent segments the operational states to simplify the authentication process. Instead of requiring continuous authentication throughout all operations, the system only performs authentication when transitioning between the first and second security operation states. This segmentation reduces the complexity of implementing and managing authentication mechanisms while maintaining security.
Solution Approach 2:
The patent implements self-service authentication where the security mechanism automatically verifies authentication information during state transitions without requiring manual intervention. The system autonomously manages the authentication process, reducing the complexity of user interaction and simplifying the overall device architecture while maintaining strong security.
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
An integrated circuit having a first security operation state arranged for utility operation, and a second security operation state arranged for test operation is disclosed. In the second security operation state, a first set and a second set of objects are available, while a third set of objects are unavailable. In the first security operation state, the third set of objects is available with authorization by a security mechanism of the first security operation state. The third set of objects is made unavailable by logic circuitry of the integrated circuit, when operating in the second security operation state, by the logic circuitry being arranged to control limited operation of parts of the integrated circuit comprising the third set of objects when operating in the second security operation state such that bypassing of the security mechanism of the first security operation state is disabled. An electronic apparatus utilising such an integrated circuit, and a method are also disclosed.