MPSoC Secret Provisioning Using True Random Number Generator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for secure provisioning of sensitive data in industrial control systems are prone to man-in-the-middle attacks and data leakage, especially when using Diffie-Hellman key exchanges over insecure channels, which risks exposure and loss of sensitive information.
Innovation Solution
The approach involves generating sensitive data locally within a multiprocessor system-on-chip (MPSoC) device using a true random number generator, storing it in on-chip secure storage, and encrypting it with public key encryption before transmission to a third-party system, ensuring that the data remains encrypted and never exposed in plaintext.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If Diffie-Hellman key exchange is used to provision sensitive data over insecure channels, then key establishment between parties is enabled, but the system becomes vulnerable to man-in-the-middle attacks and data interception
Solution Approach 1:
The patent extracts the sensitive secret data generation and storage functions from the external communication channel and places them entirely within the trusted boundaries of the MPSoC device. The TRNG and secure storage are hardware components that generate and hold secret keys locally, eliminating the need to transmit sensitive data over insecure channels for key establishment
Solution Approach 2:
The patent introduces public key infrastructure as an intermediary mechanism. Instead of directly exchanging sensitive secret keys over insecure channels, the system uses public key encryption where only non-sensitive public keys are transmitted. The sensitive private keys never leave the device, and the public key acts as a safe mediator for establishing secure communication
2Ease of manufacture
If sensitive data is transmitted in plaintext to third-party systems for device provisioning, then device configuration is enabled, but security is compromised due to potential data leakage
Solution Approach 1:
The patent performs preliminary action by generating and storing secret keys within the MPSoC device before any external communication or provisioning activities. The TRNG generates random secret data that is immediately stored in secure on-chip storage, establishing security credentials in advance without requiring plaintext transmission to third parties
Solution Approach 2:
The patent uses public key cryptography where a public key (a safe copy) is transmitted to third-party systems instead of the sensitive private key. The public key serves as a functional copy for encryption and verification purposes, while the original sensitive private key remains securely stored in the device and never leaves its boundaries
3Adaptability or versatility
If third-party systems are used for device provisioning, then manufacturing flexibility is improved, but trust requirements increase security costs
Solution Approach 1:
The patent implements self-service by enabling the MPSoC device to autonomously generate its own secret keys using the integrated TRNG and store them in secure on-chip storage. The device provisions itself with security credentials during initialization without requiring trusted third-party intervention, eliminating the need for expensive trust infrastructure at external facilities
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This method provides secure and controlled asset management, reducing reliance on the trustworthiness of third-party systems, supporting unique device-specific data, and mitigating bulk-compromise risks, while eliminating the need for a trusted third-party for device provisioning, thereby reducing security costs.
Implementation Method 1
generating a random number sequence from a true random number generator to produce secret information
Implementation Method 2
encrypting, in a device and using public key encryption, the secret information to generate an encrypted message
Data Source
AI summary
The example embodiments are directed to a system and method for secure provisioning of secrets into MPSoC devices using untrusted third-party systems. In one example, the method includes generating a random number sequence from a true random number generator to produce secret information, storing the secret information in an on-chip secure storage, encrypting, in a device and using public key encryption, the secret information to generate an encrypted message, and transmitting the encrypted message to a third-party system.