PLD Self-Verification via Image-Defined Management Interface
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing systems face challenges in verifying programmable logic devices (PLDs) in a manner that is fast, reliable, efficient, and immune to tampering, due to the limitations of standard interfaces and the complexity of implementing management processors for various PLD models.
Innovation Solution
A data processing system with a management processor and PLD featuring a custom, image-defined management interface for communication, which includes self-verification logic and a cryptographic signature, allowing for secure and efficient verification of the PLD configuration image through a high-speed, image-defined management interface.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a standard interface (SPI, I2C, JTAG) is used to retrieve information from the PLD, then the PLD can be accessed using existing protocols, but the verification process becomes slow and vulnerable to interception
Solution Approach 1:
The patent introduces an image-defined management interface as an intermediary communication channel between the management processor and PLD. This dedicated interface acts as a mediator that provides both high-speed data transfer and secure verification capabilities, resolving the contradiction between using standard slow interfaces and achieving fast secure verification.
Solution Approach 2:
The management interface is designed to serve multiple functions: it enables high-speed communication, provides secure verification through cryptographic operations, and allows configuration transfer. This multi-functional interface eliminates the need to choose between speed and security by integrating both capabilities into a single universal interface.
2Adaptability or versatility
If a standard interface with complex protocol is used, then existing devices can be utilized, but the interface becomes inefficient with many signal wires and complex communication protocols
Solution Approach 1:
The patent extracts the management interface functionality from the standard PLD interfaces (SPI, I2C, JTAG) and creates a dedicated image-defined management interface. This separation removes the complexity of supporting multiple standard protocols while maintaining adaptability through the configurable nature of the interface definition stored in the configuration image.
Solution Approach 2:
The management interface parameters (signal definitions, communication protocols, timing characteristics) are defined by the configuration image itself rather than being fixed by hardware design. This allows the interface to adapt to different PLD models and vendor requirements while maintaining a consistent level of complexity through parameterization rather than structural variation.
3Reliability
If verification logic is added to verify PLD configuration images, then security and reliability are enhanced, but the system complexity and engineering efforts increase
Solution Approach 1:
The PLD performs self-verification by containing verification logic within its own configuration image and using its own management interface to communicate verification status to the management processor. This self-service approach eliminates the need for external verification hardware or complex external verification protocols, reducing overall system complexity while maintaining high reliability.
Solution Approach 2:
The verification logic and cryptographic keys are embedded within the PLD's configuration image before the PLD is deployed. This preliminary preparation allows the PLD to perform verification operations autonomously without requiring external verification infrastructure, reducing system complexity while ensuring reliable verification.
4Productivity
If a custom image-defined management interface is implemented, then verification becomes fast and secure, but the implementation complexity for different PLD models increases
Solution Approach 1:
The management interface is defined by parameters stored in the configuration image rather than fixed hardware design. This allows the same basic interface structure to be adapted to different PLD models and vendors by changing interface parameters (signal definitions, timing, protocols) defined in the configuration image, maintaining both high performance and broad compatibility.
Solution Approach 2:
The image-defined management interface serves as a universal communication mechanism that can be configured to work with any PLD model. By defining the interface characteristics in the configuration image rather than hardcoding them, the system achieves both high verification efficiency through optimized custom interfaces and broad adaptability across different PLD vendors and models.
Data Source
AI summary
A data processing system comprises a management processor, a programmable logic device (PLD) coupled to the management processor, and a machine-readable medium (MRM). The MRM comprises a PLD configuration image to configure the PLD with image-defined logic that comprises self-verification logic and an image-defined management interface to enable the management processor to communicate with the self-verification logic. The MRM also comprises a cryptographic signature based on the PLD configuration image. The MR also comprises PLD authentication instructions which, when executed by the management processor, cause the management processor to retrieve an address for the PLD configuration image from the PLD via the management interface, use the address to retrieve the PLD configuration image from the PLD via the management interface, retrieve the cryptographic signature from the PLD via the management interface, and use the cryptographic signature and a cryptographic key of a trusted entity to authenticate the PLD configuration image.