OTP-Configured SoC Security Device for Adaptive Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security methods for system-on-chip (SoC) devices face a trade-off between user convenience and security strength, with password-based authentication offering higher convenience but lower security, and digital signature-based authentication providing stronger security but less convenience.
Innovation Solution
A security device that utilizes a one-time programmable (OTP) value to set a security mode, allowing for multiple authentication methods, including password, digital signature, and random value, to balance convenience and security based on user needs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If password-based authentication is used, then user convenience is improved, but security strength deteriorates
Solution Approach 1:
The patent implements dynamic authentication mode selection where the security device can switch between password-based authentication (higher convenience) and digital signature-based authentication (higher security) based on operational context. The mode controller dynamically adjusts the authentication method required, allowing the system to adapt its security posture to the current usage scenario rather than being fixed in one approach.
Solution Approach 2:
The patent changes the authentication parameter (method type) based on the operational stage of the SoC. During development/debugging phases, password authentication is permitted for convenience. In production or sensitive operational modes, the system requires digital signature authentication for enhanced security. This parameter change resolves the contradiction by allowing both methods to coexist in different contexts.
2Reliability
If digital signature-based authentication is used, then security strength is improved, but user convenience deteriorates
Solution Approach 1:
The system dynamically selects the authentication method based on the current operational context. Digital signature authentication is required only when high security is needed (e.g., production mode, sensitive operations), while password authentication is sufficient for development and debugging phases. This dynamic selection eliminates the need to always use the more complex digital signature method.
Solution Approach 2:
The authentication complexity parameter is adjusted according to the SoC's operational stage. In development mode, the system accepts simpler password authentication. In production mode, it requires the more secure but cumbersome digital signature authentication. This contextual parameter adjustment resolves the contradiction by matching authentication complexity to actual security needs.
3Adaptability or versatility
If multiple authentication methods are supported, then adaptability is improved, but device complexity increases
Solution Approach 1:
The patent segments the authentication functionality into distinct modules: a password authentication module and a digital signature authentication module. Each module handles its specific authentication type independently. The mode controller selects which module to activate based on the current security mode, preventing the need to maintain both fully operational simultaneously and reducing overall system complexity.
Solution Approach 2:
The security device is designed with multi-functionality to support both password and digital signature authentication methods within a single unified architecture. The authentication controller can operate in different modes depending on the security requirements, making the device universally applicable to various security scenarios without requiring separate hardware for each authentication type.
Data Source
AI summary
An example security device for controlling access authority of a user device includes a mode controller, an authentication controller, and an access controller. The mode controller is configured to set, based on a one-time programmable (OTP) value, a security mode indicating a method of authenticating the access authority of the user device. The authentication controller is configured to determine, based on the security mode, whether to allow access of the user device. The access controller is configured to activate or deactivate the access of the user device based on a result of the determination of the authentication controller.