Microcontroller Power Supply Authentication Against Tampering

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Microcontrollers, such as system on a chip (SoC) devices, are vulnerable to malicious attacks through tampering with the power supply, which can lead to unauthorized access or misbehavior, as existing security measures do not effectively authenticate the power source.

Innovation Solution

A microcontroller with an integrated circuit configured for encrypted communication with a power supply using a pre-shared encryption key, authenticating the power supply and entering a tamper mode if authentication fails, thereby restricting its operation until the power supply is validated, ensuring secure communication and preventing unauthorized access.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the microcontroller operates without power supply authentication, then the ease of operation is improved, but the security against malicious attacks deteriorates

Engineering Contradiction:
Improveease of operationVSAvoidsecurity against malicious attacks
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The microcontroller performs authentication of the power supply before allowing normal operation. The authentication process is executed in advance during system initialization, verifying the identity of the power supply through encrypted communication and challenge-response protocols. Only after successful authentication does the microcontroller transition from a restricted state to normal operational mode, preventing unauthorized or malicious power supplies from causing harm.

Inventive Principle:
Principle #10Preliminary action

2Object-affected harmful factors

If encrypted communication and authentication protocols are implemented, then the security against malicious attacks is improved, but the device complexity increases

Engineering Contradiction:
Improvesecurity against malicious attacksVSAvoiddevice complexity
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The patent employs an intermediary authentication protocol that mediates between the microcontroller and power supply. This intermediary mechanism uses pre-shared secret keys and challenge-response authentication to verify identities without requiring complex continuous encryption during normal operation. The authentication layer acts as a mediator that establishes trust before operational communication begins, reducing overall system complexity while maintaining security.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Object-affected harmful factors

If the microcontroller enters tamper mode upon authentication failure, then the security against malicious attacks is improved, but the productivity decreases

Engineering Contradiction:
Improvesecurity against malicious attacksVSAvoidproductivity
Core Design Contradiction:
Object-affected harmful factorsVSProductivity

Solution Approach 1:

The authentication process is implemented as a periodic action that occurs at specific intervals - initially during system startup and then optionally at regular intervals during operation. The microcontroller transitions to tamper mode only when authentication fails, but can return to normal operational mode after successful re-authentication. This periodic authentication approach balances security requirements with productivity by not permanently disabling the system after a single failed attempt.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS11250168B2Microcontroller and power supply
Publication Date: 2022.02.15 NXP BV
  • US11250168B2 patent drawing
  • US11250168B2 patent drawing

AI summary

A microcontroller comprising a first integrated circuit configured to receive power from a power supply comprising a second integrated circuit via at least one power input terminal and wherein at least one communication terminal provides for communication between the microcontroller and the power supply, wherein the microcontroller is configured to provide for encrypted communication between the power supply and the microcontroller based on a pre-shared encryption key, the encrypted communication configured to provide for authentication of the identity of the power supply and, if the power supply passes the authentication, the microcontroller is configured to operate in a normal mode and receive said power from the power supply, and if the power supply fails authentication, the microcontroller is configured to enter a tamper mode.