Inter-Die MAC Tag Generation for Replay Protection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Signal transmission on the interconnect structure of semiconductor package devices poses a security risk due to potential data integrity and replay attacks, which existing technologies have not adequately addressed.

Innovation Solution

Integration of processing circuitry on electronic integrated circuits to implement data integrity and replay protection through cryptographic permutations, specifically using a Xoodoo module to generate and verify message authentication codes (MAC tags) over interconnects between dies in a semiconductor package.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic authentication is implemented on interconnect structures, then data security and integrity are improved, but device complexity increases

Engineering Contradiction:

Improvedata securityVSAvoidcircuit complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The cryptographic authentication function is segmented into separate dedicated circuits: a first processing circuit on the first die generates MAC tags, while a second processing circuit on the second die verifies them. This segmentation isolates security functions from main logic, improving security without significantly complicating the overall device architecture.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Message authentication code (MAC) tags serve as cryptographic intermediaries that enable secure verification between dies. The MAC tags are generated by the first processing circuit and transmitted through the interconnect structure to the second processing circuit for verification, providing security without requiring direct complex authentication protocols between the dies.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If message authentication codes are transmitted over interconnects, then replay attack protection is improved, but bandwidth consumption increases

Engineering Contradiction:

Improvereplay protectionVSAvoiddata volume

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent applies different transmission paths for different types of data with different security requirements. MAC tags are transmitted through dedicated secure interconnect paths, while other data can use standard paths. This local differentiation ensures replay protection where needed without unnecessarily consuming bandwidth across the entire interconnect structure.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The system implements authentication only for specific critical data transmissions between dies rather than all data. The MAC tags are generated and verified selectively for inter-die communications that require security, avoiding the overhead of universal authentication and reducing overall bandwidth consumption.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentEP4152299A1Post-quantum secure lighteight integrity and replay protection for multi-die connections

Publication Date: 2023.03.22 INTEL CORP

Figure 1~2
Figure 3~4
Figure 5~6

AI summary

An apparatus includes a first integrated circuit disposed on a first die, a second integrated circuit disposed on a second die, an interconnect to provide a communication connection between the first die and the second die. The first die comprises a processing circuitry to generate a first message authentication code (MAC) tag using a first message data to be communicated from the first die to the second die and a first cryptographic key, and transmit the first message data and the first MAC tag to the second die via the interconnect.