Key Manager Circuit Segmentation for Secure On-Chip Encryption

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current encryption and decryption schemes in personal electronic devices are vulnerable to hacking techniques, necessitating the development of more secure methods to protect sensitive information.

Innovation Solution

A system on chip with a key manager that includes a random number generator, key memory, unique value storage, and a key derivation function, which generates and manages encryption keys using user setting values and unique values to enhance security by preventing unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional encryption schemes are used, then basic data protection is provided, but security is vulnerable to hacking techniques

Engineering Contradiction:

ImprovesecurityVSAvoidhacking vulnerability

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The encryption key is segmented into multiple components: a secret value stored in secure element, a unique value specific to the secure element, and a user-provided value. These segments are combined through a key derivation function to generate the final encryption key, ensuring that no single component alone can compromise security

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A key derivation function acts as an intermediary between the stored secret value and the final encryption key. This intermediary process transforms the secret value combined with unique and user values into the actual encryption key, adding an additional layer of security against hacking attempts

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If encryption keys are stored in memory, then decryption functionality is enabled, but security against unauthorized access is reduced

Engineering Contradiction:

Improvedecryption capabilityVSAvoidprotection against unauthorized access

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The decryption key is segmented and distributed: a secret value is stored in the secure element's memory, while unique values and user values are obtained from other sources. This segmentation ensures that even if memory is compromised, the complete key cannot be reconstructed without the other segments

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Different parts of the decryption system have different security properties: the secret value is stored with high security in the secure element, while other components (unique value, user value) are obtained from less secure but accessible sources. The key derivation function combines these locally optimized components into a secure final key

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS9935768B2Processors including key management circuits and methods of operating key management circuits

Publication Date: 2018.04.03 SAMSUNG ELECTRONICS CO LTD

AI summary

A system on chip includes a central processing unit and a key manager coupled to the central processing unit. The key manager includes a random number generator configured to generate a key and a key memory configured to store the key and a user setting value associated with the key.