PCIe Side Channel Communication for Secure Data Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing data transfer systems lack secure mechanisms for accessing non-public information, as they rely on open communication methods that can be undiscoverable and vulnerable to unauthorized access.

Innovation Solution

The implementation of a target device with a standard communication circuit and a side channel communication system, utilizing multiple PCIe communication approaches (configuration space, extended capability structure, and stack) to selectively enable secure side channel communications, ensuring access to non-public locations without disclosing the access mechanism to unauthorized users.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If open communication methods are used in PCIe systems, then ease of operation and accessibility are improved, but security and protection of non-public information deteriorate

Engineering Contradiction:

Improveaccessibility to deviceVSAvoidsecurity of communication

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The PCIe communication interface is segmented into multiple independent channels: a first channel for standard public communication and a second channel for secure side-channel communication. This segmentation allows the system to maintain both open accessibility and secure protected communication paths simultaneously, resolving the contradiction between ease of operation and security.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A side-channel communication interface acts as an intermediary between the PCIe device and secure information storage locations. This intermediary provides controlled access to non-public information without exposing the underlying access mechanisms, thereby maintaining security while enabling authorized access.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Device complexity

If standard communication channels are used for all access, then device complexity is reduced, but adaptability for secure communication deteriorates

Engineering Contradiction:

Improvecommunication mechanismVSAvoidsecure access capability

Core Design Contradiction:

Device complexityVSAdaptability or versatility

Solution Approach 1:

The PCIe device is designed with multi-functionality, supporting both standard public communication and secure side-channel communication through a unified device architecture. This allows the device to adapt to different communication requirements without requiring separate dedicated hardware systems, maintaining reasonable complexity while providing versatile secure access capabilities.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS10223322B2Systems and methods for channel information exchange in a PCIe environment

Publication Date: 2019.03.05 AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE LTD

AI summary

Embodiments are related to systems and methods for data transfer, and more particularly to systems and methods for providing non-standard bus information.