MIPI Camera Secure I/O via Channel Identifier Filter
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current processors, such as those with Intel® Software Guard Extensions (SGX), provide secure enclaves for protecting data within the chip but do not secure I/O data moving across the on-chip boundary, leaving it vulnerable to attacks.
Innovation Solution
A computing device with a channel identifier filter and a camera controller generates DMA transactions with secure and non-secure CIDs, ensuring that sensitive data is protected within a trusted execution environment, while allowing non-sensitive data to access ordinary memory without encryption or alignment checks, thus providing secure I/O operations for camera devices using the MIPI interface.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic protection is applied to all I/O data moving across the on-chip boundary, then security is improved, but processing overhead and system complexity increase significantly
Solution Approach 1:
The patent applies cryptographic protection selectively rather than universally. The channel identifier filter examines DMA transactions and applies encryption only to those marked with secure channel identifiers, while allowing non-secure channels to bypass cryptographic processing. This local differentiation resolves the contradiction by providing security where needed without incurring overhead everywhere.
Solution Approach 2:
The patent segments I/O data traffic into secure and non-secure channels using channel identifiers. By dividing the data flow into distinct categories, the system can apply different security policies to different segments, protecting sensitive data while allowing non-sensitive data to flow freely without encryption overhead.
2Reliability
If cryptographic protection is applied to I/O data, then security is improved, but processing speed decreases due to encryption/decryption operations
Solution Approach 1:
The channel identifier filter enables selective cryptographic processing by examining channel identifiers on each DMA transaction. Only transactions requiring security undergo encryption/decryption, while others pass through at full speed, thus maintaining processing speed for non-critical data while securing sensitive data.
Solution Approach 2:
The patent applies cryptographic protection partially rather than excessively. By using the channel identifier filter to identify only those transactions requiring security, the system applies encryption only when necessary, avoiding the performance penalty of encrypting all I/O data while still providing adequate security protection.
3Reliability
If inline cryptographic engines are used to protect DMA data, then security is improved, but device complexity and cost increase
Solution Approach 1:
The channel identifier filter serves as an intermediary between the DMA controller and cryptographic engines. It examines transaction metadata to determine which DMA transfers require cryptographic protection, acting as a smart router that directs only secure transactions to encryption/decryption resources, thereby reducing the burden on cryptographic engines and simplifying the overall system architecture.
Solution Approach 2:
The channel identifier filter provides a universal mechanism that works across different DMA channels and transaction types. By using a single filter structure that can identify secure channels through standardized channel identifiers, the system achieves security without requiring separate cryptographic processing paths for different data types, reducing overall device complexity.
Data Source
AI summary
Technologies for secure I/O with MIPI camera devices include a computing device having a camera controller coupled to a camera and a channel identifier filter. The channel identifier filter detects DMA transactions issued by the camera controller and related to the camera. The channel identifier filter determines whether a DMA transaction includes a secure channel identifier or a non-secure channel identifier. If the DMA transaction includes the non-secure channel identifier, the channel identifier filter allows the DMA transaction. If the DMA transaction includes the secure channel identifier, the channel identifier filter determines whether the DMA transaction is targeted to a memory address in a protected memory range associated with the secure channel identifier. If so, the channel identifier filter allows the DMA transaction. If not, the channel identifier filter blocks the DMA transaction. Other embodiments are described and claimed.