MCU Control Device Key Generation for Secure Certificate Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data transmission systems between micro control units (MCUs) and servers face security challenges due to the lack of key generation within the internal components, leading to potential key leakage and increased component costs when using additional smart cards.
Innovation Solution
A control device with a storage unit, key generation unit, and processing unit generates private and public keys, and performs authentication and encryption processes to securely transmit certificates and applications, using a data transmission system involving a programming device and server device to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an additional smart card is used to generate the key, then the key generation capability is improved, but the component cost increases and key leakage risk increases
Solution Approach 1:
The patent merges the key generation function into the MCU itself by integrating a random number generator module and cryptographic processing capabilities directly into the microcontroller. This eliminates the need for separate smart card components while maintaining secure key generation capabilities within the unified device architecture.
Solution Approach 2:
The MCU performs self-service for key generation by incorporating internal random number generation and cryptographic processing functions. The device generates and manages its own security keys without requiring external smart card assistance, reducing component dependencies and potential attack surfaces.
2Reliability
If an additional smart card is used to generate the key, then the key generation capability is improved, but the key leakage risk increases
Solution Approach 1:
By merging the key generation function into the MCU, the patent reduces the number of interfaces and communication channels between separate components. This minimizes potential attack vectors where keys could be intercepted or leaked during transmission between the MCU and smart card, thereby reducing key leakage risk.
Solution Approach 2:
The self-service key generation within the MCU eliminates the need for external smart card interaction, removing the communication interface that could potentially be exploited for key extraction. The key remains confined within the secure boundaries of the MCU throughout its generation and usage lifecycle.
3Object-affected harmful factors
If internal key generation is implemented in the MCU, then the key leakage risk is reduced, but the device complexity increases
Solution Approach 1:
The patent segments the MCU functionality into distinct modules, including a dedicated random number generator module and cryptographic processing module. This modular segmentation organizes the complex internal structure into manageable, functionally-separated units, making the design more systematic while achieving secure internal key generation.
Solution Approach 2:
The patent implements universal cryptographic processing capabilities within the MCU that can handle multiple cryptographic algorithms and operations (key generation, encryption, authentication). This multi-functionality consolidates what would otherwise require separate dedicated hardware components, reducing overall device complexity while providing comprehensive security functions.
Data Source
AI summary
A control device includes a storage unit, a key generation unit and a processing unit. The storage unit stores a control device certificate and a programming device certificate. The key generation unit generates a first private key. The key generation unit also generates a first public key according to the first private key. The processing unit receives the control device certificate and the programming device certificate according to the first public key and a device identification code. The processing unit stores the control device certificate and the programming device certificate in the storage unit.