Password Verification Circuit for Automotive Microcontroller Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing complexity of micro-controllers in automotive systems poses challenges in password management, particularly due to the dynamic access to reference passwords stored in non-volatile memory, which can lead to security risks and complexity in testing and ensuring the robustness of the security framework.
Innovation Solution
A processing system with a non-volatile memory for storing reference passwords and a temporary password repository, where reference passwords are loaded during startup and accessed by a password verification circuit to control access to hardware blocks, reducing exposure to dynamic access risks and simplifying the security framework.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If reference passwords are dynamically accessed from non-volatile memory during operation, then password verification flexibility is improved, but security risks increase due to potential unauthorized access and exposure
Solution Approach 1:
The patent divides the password storage system into two distinct segments: non-volatile memory for secure storage and temporary memory for operational use. This segmentation isolates the sensitive reference passwords from direct access during verification, reducing security risks while maintaining verification flexibility through the temporary memory buffer.
Solution Approach 2:
The patent introduces temporary memory as an intermediary component between the non-volatile memory and the password verification logic. This intermediary loads reference passwords during startup and provides them to the verification circuit without exposing the original storage location, thereby reducing security exposure while enabling flexible verification operations.
2Reliability
If dynamic access to reference passwords is implemented during operation, then password verification capability is improved, but testing complexity increases due to need to ensure robustness against various access scenarios
Solution Approach 1:
The patent performs preliminary action by loading reference passwords from non-volatile memory into temporary memory during system startup, before any password verification operations occur. This preliminary loading simplifies subsequent verification operations and reduces testing complexity, as the verification logic only needs to handle the simplified temporary memory access pattern rather than complex dynamic access scenarios.
3Adaptability or versatility
If reference passwords are stored in non-volatile memory and accessed during operation, then password management functionality is improved, but access path exposure increases creating security vulnerabilities
Solution Approach 1:
The patent extracts the reference passwords from their original location in non-volatile memory and places them in temporary memory for operational use. This extraction removes the passwords from the vulnerable access path during verification operations, reducing exposure to unauthorized access while maintaining full password management functionality through the temporary storage location.
Data Source
AI summary
In an embodiment, a processing system includes a non-volatile memory, a hardware block, a protection circuit associated with the hardware block, and a password verification circuit. The non-volatile memory stores at least one reference password. The password verification circuit is configured to receive a password verification command, obtain a reference password, and test whether the passwords correspond. In case the passwords correspond, the password verification circuit generate an overwrite signal. The protection circuit is configured to receive a control command and selectively forward the control command to the associated hardware block as a function of the overwrite signal.