Microcontroller Secure Boot Firewall Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing financial transaction devices, such as ATMs, are vulnerable to data theft due to their architecture and electronic components, with the security relying heavily on self-protection devices that can fail, compromising the entire system's integrity.
Innovation Solution
A microcontroller with a processor having secure and non-secure memory zones, executing a Linux operating system, and equipped with a hardware firewall to manage peripheral access, ensuring secure data processing and exchange by switching operations between zones based on data sensitivity, and featuring a self-protection control circuit with sensors to detect vulnerabilities and prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If self-protection control circuits are used to detect vulnerability conditions, then security detection capability is improved, but system reliability deteriorates because the entire system security depends entirely on the proper functioning of the self-protection device
Solution Approach 1:
The system is divided into multiple independent security zones (secure area and non-secure area) with separate control circuits. The secure area contains critical security functions and authentication data, while the non-secure area handles general operations. This segmentation ensures that a failure in one zone does not compromise the entire system, directly resolving the reliability issue while maintaining detection capability through distributed sensors.
Solution Approach 2:
The patent implements redundant protection mechanisms where the hardware firewall provides a baseline security barrier that functions independently of the self-protection control circuits. Additionally, secure memory regions are designed to automatically erase sensitive data upon detecting vulnerability conditions, providing a pre-planned safety cushion that activates regardless of the primary control circuit's status.
2Reliability
If memory is separated into secure and non-secure zones, then data security is improved, but device complexity increases
Solution Approach 1:
The memory is segmented into distinct secure and non-secure zones with defined access boundaries. The secure zone stores authentication data and critical security parameters, while the non-secure zone holds application data. This segmentation provides strong security isolation while the complexity is managed through standardized access protocols and hardware-enforced boundaries.
Solution Approach 2:
A hardware firewall acts as an intermediary layer between the secure and non-secure memory zones. It enforces access control policies and mediates data transfers between zones, providing a standardized interface that simplifies the complexity of direct zone interactions while maintaining rigorous security boundaries.
3Reliability
If hardware firewall is added to manage peripheral access, then access control security is improved, but device complexity increases
Solution Approach 1:
The hardware firewall is designed as a multi-functional security module that handles multiple peripheral access control functions simultaneously. It manages authentication, authorization, and data filtering for various peripherals (display, keyboard, communication interfaces) through a unified control mechanism, providing comprehensive access control without proportionally increasing overall system complexity.
Solution Approach 2:
The hardware firewall serves as an intermediary security layer between the processor and peripheral devices. It intercepts and filters access requests to peripherals, enforcing security policies without requiring complex modifications to each peripheral's control logic. This mediation approach centralizes security management while maintaining simple peripheral interfaces.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a microcontroller comprising a processor and memory divided into different areas which are secure, insecure or shared, for implementing a secure boot including a self-protection control circuit to detect vulnerability conditions and the processor running a Linux operating system, said processor including a monitor to switch operations either in a secure area of memory to run at least authentication processes or in an insecure area for other operations and to determine whether devices connected to or accessing, or accessed by, the microcontroller should be managed by the secure area or by the insecure area using a hardware firewall to determine whether information or commands from an application are allowed to access the secure area or not.