Key Controller Block Secure Serial Link Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional encryption systems for data security, particularly in personal video recording (PVR) systems, face issues with unencrypted data being accessible at the interface between the ATA host adapter and the external encryption/decryption chip, leading to potential data interception and compromised integrity due to weak encryption and shared bus interfaces.
Innovation Solution
A method and system for secure access and processing of encryption/decryption keys, where keys are generated within a key controller block of a chip and transferred via a secure serial link to an on-chip bus interface block, with only the key controller block able to write and read the keys, ensuring secure storage and processing, and integrating encryption/decryption functions into the IDE host interface to eliminate unencrypted data on external buses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate external encryption/decryption chips are used, then encryption/decryption functions can be implemented, but unencrypted data becomes accessible at the interface between the ATA host adapter and the external chip
Solution Approach 1:
The patent integrates the encryption/decryption functions directly into the ATA host adapter chip, eliminating the separate external encryption chip. This merging removes the external interface where unencrypted data was previously exposed, as encryption now occurs internally within the same chip that handles data transfer to the storage device.
Solution Approach 2:
The patent extracts the encryption/decryption functionality from the external domain and incorporates it into the internal architecture of the ATA host adapter. By taking out the vulnerable external interface and integrating encryption internally, the system eliminates the exposure point where data could be intercepted.
2Reliability
If conventional encryption algorithms are used, then encryption can be implemented, but the encryption is not strong and can be broken relatively easily
Solution Approach 1:
The patent implements 3DES (Triple Data Encryption Standard) which applies the DES encryption algorithm three times with different keys. This parameter change from single DES to triple DES significantly increases the effective key length and cryptographic strength, making the encryption much more resistant to brute-force attacks while maintaining compatibility with the existing DES algorithm structure.
3Reliability
If shared bus interfaces are used, then system compatibility is maintained, but data integrity is compromised by other components that may gain access to encryption/decryption keys
Solution Approach 1:
The patent segments the key management functionality by providing separate key registers for different bus interfaces (IDE key register, PCI key register, SCSI key register, USB key register). Each interface has its own dedicated key storage, preventing other components connected to different buses from accessing encryption keys, thereby maintaining data integrity while preserving multi-interface compatibility.
4Ease of operation
If keys are stored in accessible registers, then key access is simplified, but security is reduced as multiple blocks can access the keys
Solution Approach 1:
The patent divides key storage into multiple separate, interface-specific key registers (IDE key register, PCI key register, SCSI key register, USB key register) rather than using a single shared register. Each register is accessible only by its corresponding interface controller, maintaining ease of access for each interface while ensuring that other interfaces cannot access those keys.
Solution Approach 2:
The patent implements localized key storage where each bus interface has its own dedicated key register with access permissions restricted to that specific interface. This local quality approach ensures that keys are easily accessible by their intended interface while being secure from other interfaces, creating a distributed security model.
Data Source
AI summary
Secure access and processing of an encryption/decryption key may include generating one or more keys within a key controller block of a chip. The generated keys may be transferred from the key controller block of the chip to an on-chip bus interface block via a secure serial link. The transferred keys may be stored in registers which may be accessible by only the key controller block of the chip. In this regard, the generated keys may be written to one or more of the key registers only by the key controller block. Furthermore, a written key may be read from a key register only by the key controller block. During the transfer of a generated key, a data valid signal may be used to indicate valid keys in a data signal used to transfer the keys via the secure serial link.