On-Board Bus Transaction Security via Write-Once Key Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Securing computing systems against unauthorized access is challenging when attackers have physical access, as they can probe or inject data through electrical signals due to standard transmission protocols.
Innovation Solution
A shared key is generated and programmed into write-once, read-only non-volatile storage on two on-board components during manufacturing, enabling encryption of transactions between them without exposing the key on external buses, using crypto-engines for encryption and decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If standard transmission protocols are used for data transmission across buses, then ease of operation and compatibility are improved, but security against physical access attacks deteriorates
Solution Approach 1:
The patent extracts the security-critical key material from the transmission path by storing it in write-once non-volatile memory within each component. The actual data transmission occurs encrypted, separating the key from the communication channel and preventing attackers from obtaining keys through bus probing.
Solution Approach 2:
The patent introduces encryption as an intermediary layer between the transmitting and receiving components. A shared secret key, established through secure out-of-band communication, mediates the transformation of plaintext into ciphertext, protecting the actual data values from interception while allowing legitimate communication to proceed.
2Object-affected harmful factors
If encryption is implemented for bus transactions, then security is improved, but device complexity increases
Solution Approach 1:
The patent performs the complex key establishment and encryption setup in advance, during manufacturing or initial system initialization. The shared secret is established through secure out-of-band communication before normal operation begins, so that during regular transactions, only the relatively simple encryption/decryption operations are needed, not the full key management complexity.
Solution Approach 2:
Each component independently performs encryption of outgoing data and decryption of incoming data using its stored shared key. The system distributes the security workload across components rather than requiring a centralized security module, reducing the complexity burden on any single device while maintaining overall system security.
Data Source
AI summary
A technique for securing on-board bus transactions in a computing device is discussed. A shared key is generated and then programmed into the read-only non-volatile write-once storage of two on-board components. The shared key may be generated during the manufacturing process. Once complete, all transactions between the two on-board components are encrypted by the components using the shared key without exposing the key on any external bus.