Hardware Memory Access Policy Check for Smartcard Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern smartcard applications require robust data protection mechanisms that allow for high variability and flexible memory access control, ensuring that sensitive operations, such as key handling, are executed only under specific conditions.
Innovation Solution
Implementing a memory access policy check system that uses a processing unit to verify if the current program counter matches predefined conditions stored in a memory access policy resource, allowing or restricting access based on user-configured conditions, with modes for automatic or manual triggering of these checks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software countermeasures are used for data protection, then security can be implemented, but memory footprint increases and performance decreases
Solution Approach 1:
The patent replaces software-based security countermeasures with a hardware-level memory access policy check mechanism. The processing unit directly checks memory access policies in hardware, comparing program counter values against stored policy information, thereby eliminating the need for extensive software security layers and reducing memory footprint while maintaining or improving security reliability.
Solution Approach 2:
The patent introduces a hardware-based memory access policy check mechanism as an intermediary between the processing unit and memory access operations. This intermediary automatically enforces security policies by checking program counter values against stored policy information, providing security without requiring additional software overhead or increasing memory footprint.
2Reliability
If software countermeasures are used for data protection, then security can be implemented, but processing speed decreases
Solution Approach 1:
The patent replaces software-based security verification with hardware-level memory access policy checks executed directly by the processing unit. This substitution eliminates software interpretation overhead and enables security checks to be performed at hardware speed, maintaining data protection while preserving or improving processing speed.
Solution Approach 2:
The patent performs memory access policy checks as preliminary actions before executing memory operations. By pre-storing policy information and proactively checking program counter values against these policies, the system prevents unauthorized access before it can impact performance, enabling security to be enforced without slowing down legitimate processing operations.
3Reliability
If fixed memory access control is implemented, then security is provided, but flexibility and adaptability decrease
Solution Approach 1:
The patent implements dynamic memory access control where policy information is stored in writable memory regions, allowing the processing unit to modify access policies during runtime. This enables the system to adapt to different security requirements and application scenarios while maintaining hardware-level security enforcement, thus providing both security and flexibility.
Solution Approach 2:
The patent creates a universal memory access policy check mechanism that can enforce different security policies for various memory regions and access patterns. By storing configurable policy information in memory and using program counter comparison, the same hardware mechanism can adapt to diverse security requirements, providing both security and versatility across different smartcard applications.
Data Source
AI summary
A method for executing a program code is suggested, the method comprising: checking a memory access policy resource based on a trigger; and comparing a current program counter with a program counter information provided by the memory access policy resource and, in case the comparison of the current program counter and the program counter information fulfills a predefined condition, conducting a memory access policy check to allow permitted operations.