PLD Kill Switch for Clearing Configuration Data on Security Threats
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Programmable logic devices using SRAM for configuration data face security threats as nonvolatile storage can be monitored by competitors, and existing security features can be circumvented, allowing unauthorized access to sensitive information.
Innovation Solution
Implementing a kill switch, such as a kill fuse or volatile battery-backed memory, that resets or disables parts of the device upon detecting a security threat, including executing a user-defined kill sequence to clear configuration data and decryption keys, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Duration of action of stationary object
If nonvolatile storage is used to retain configuration data, then data retention during power loss is improved, but security against monitoring and unauthorized access deteriorates
Solution Approach 1:
The patent extracts the security function from the normal configuration storage system by implementing a separate kill switch mechanism. This kill switch is specifically designed to detect security threats and independently trigger protective actions (clearing configuration data, disabling decryption) without affecting the normal operation of the configuration storage during legitimate use.
Solution Approach 2:
The patent applies preliminary anti-action by pre-positioning a kill switch that can detect security threats and preemptively clear configuration data or disable decryption capabilities before an attacker can successfully extract or misuse the sensitive information. The kill switch is configured to respond to various threat indicators, proactively neutralizing the security vulnerability.
2Object-affected harmful factors
If security features like encryption are implemented, then protection of sensitive data is improved, but vulnerability to circumvention and unauthorized access worsens
Solution Approach 1:
The patent applies preliminary action by pre-positioning a kill switch mechanism that can detect security threats and preemptively clear configuration data or disable decryption capabilities before an attacker can successfully extract or misuse the sensitive information. The kill switch is configured to respond to various threat indicators, proactively neutralizing security vulnerabilities rather than relying solely on passive encryption.
Solution Approach 2:
The kill switch acts as an intermediary between the configuration storage system and potential security threats. It monitors for abnormal conditions and intervenes by clearing data or disabling decryption when threats are detected, serving as a mediating protective layer that enhances the reliability of the overall security system.
3Adaptability or versatility
If configuration data is stored in accessible memory, then device functionality and reconfigurability are improved, but security against data extraction and monitoring deteriorates
Solution Approach 1:
The patent extracts the security function from the normal configuration storage system by implementing a separate kill switch mechanism. This kill switch is specifically designed to detect security threats and independently trigger protective actions (clearing configuration data, disabling decryption) without affecting the normal operation of the configuration storage during legitimate use.
Solution Approach 2:
The patent applies the disposable principle to configuration data security by implementing a kill switch that can clear configuration data when threats are detected. The configuration data is treated as a temporary resource that can be discarded (cleared) to protect the system, rather than attempting to make the storage itself permanently secure against all attack vectors.
Data Source
AI summary
A kill switch is provided that, when triggered, may cause the programmable logic device (PLD) to become at least partially reset, disabled, or both. The kill switch may be implemented as a fuse or a volatile battery-backed memory bit. When, for example, a security threat is detected, the switch may be blown, and a reconfiguration of the device initiated in order to zero or clear some or all of the memory and programmable logic of the PLD.