Integrated Circuit Security Authentication via Random Number Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security authentication methods for integrated circuits face challenges in balancing key management and security, as using the same key across all circuits leads to technical leakage, while using unique keys increases complexity, and existing solutions do not adequately protect private keys from exposure.
Innovation Solution
A security authentication method involving an integrated circuit that generates and manages random numbers, using a JTAG hardware security authentication engine to encrypt and decrypt these numbers with asymmetric keys, ensuring that only authorized access is granted by comparing hash values of public keys, thereby preventing key leakage and improving reliability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the same key is stored in all integrated circuits, then key management is simplified, but internal logic leaks when the key is leaked
Solution Approach 1:
The authentication system is segmented into multiple components: the integrated circuit generates a random number, the test platform transmits it to an encryption platform, and the results are verified. This segmentation allows different systems to have different security roles, resolving the contradiction between simplified key management and security.
Solution Approach 2:
An encryption platform is introduced as an intermediary between the integrated circuit and the test platform. The encryption platform holds the private key and performs encryption/decryption operations, preventing direct exposure of private keys while maintaining secure authentication. This intermediary resolves the security risk of key leakage.
2Reliability
If different keys are stored in all integrated circuits, then security is improved, but quantity of keys is increased causing inconvenience to key management
Solution Approach 1:
The encryption platform serves as a centralized intermediary that manages cryptographic operations for multiple integrated circuits. Each circuit uses the same public key for authentication requests, while the encryption platform handles private key operations centrally. This approach maintains security through unique cryptographic operations while simplifying key management through centralized control.
Solution Approach 2:
The encryption platform provides universal cryptographic services to multiple integrated circuits, handling encryption, decryption, and key management for the entire system. This multi-functionality allows different circuits to be authenticated without each needing to manage its own private key, resolving the contradiction between security and key management convenience.
3Reliability
If private key is stored in the encryption platform, then privacy of the private key is ensured and leakage is prevented, but device complexity is increased
Solution Approach 1:
The encryption platform is designed as a dedicated intermediary system whose primary function is to protect and manage private keys. By concentrating key management functions in this specialized intermediary, the overall system complexity is managed through clear separation of concerns, while private key privacy is ensured through centralized secure storage and controlled access.
Solution Approach 2:
The private key management function is extracted from the integrated circuits and placed in the encryption platform. This extraction removes the security risk of private key exposure from individual circuits while centralizing key management in a controlled environment. The complexity is redistributed to a specialized system designed for key management rather than general-purpose circuits.
Data Source
Figure 1A~1B
Figure 2
Figure 3
AI summary
A security authentication method and system, and an integrated circuit are provided, and relate to the field of electronic technologies. The method includes: receiving, by the integrated circuit, an authentication request sent by a test platform, and generating a first random number (201); sending the first random number to the test platform, so that the test platform sends the first random number to an encryption platform (202); receiving a random number ciphertext sent by the test platform, where the random number ciphertext is obtained after the encryption platform encrypts the first random number (203); decrypting the random number ciphertext to obtain a second random number (204); and performing security authentication on the test platform based on the first random number and the second random number (205). A random number generated by the integrated circuit each time is different, and a random number ciphertext received by the integrated circuit is also different. Therefore, an unauthorized user is prevented from cracking the random number ciphertext of the integrated circuit, thereby improving security and reliability of the security authentication.