Pluggable Security Card with Detection Circuit for Secure Computing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Permanently attached security modules on computing systems complicate monitoring and replacement, making it difficult to manage manufacturing flexibility and security key management, especially when orders are canceled or modified.

Innovation Solution

A pluggable security card with a detection circuit that monitors the physical connection to the motherboard, preventing system operation if the card is removed, allowing for flexible reprogramming and secure key management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the security module is permanently attached via solder, then system security is improved, but manufacturing flexibility and ease of replacement deteriorate

Engineering Contradiction:
Improvesystem securityVSAvoidmanufacturing flexibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The security module is segmented from the motherboard by using a pluggable connector instead of permanent soldering. This allows the security module to be a separate, removable component while maintaining secure connection during operation, resolving the contradiction between security and manufacturing flexibility.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The connection between the security module and motherboard transitions from static (soldered) to dynamic (pluggable with detection). The system can adapt its state based on whether the module is connected or removed, enabling both secure operation and flexible manufacturing/replacement.

Inventive Principle:
Principle #15Dynamics

2Reliability

If the security module is permanently attached via solder, then system security is improved, but ease of monitoring and replacement deteriorates

Engineering Contradiction:
Improvesystem securityVSAvoidease of monitoring and replacement
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The detection circuit provides continuous feedback about the physical connection status between the security module and motherboard. This automatic monitoring eliminates the need for manual checking and enables the system to respond appropriately when the module is removed or tampered with.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system performs self-monitoring through the detection circuit that automatically tracks the connection status of the security module. This eliminates the need for external monitoring tools or specialized skills to verify module presence and integrity.

Inventive Principle:
Principle #25Self-service

3Adaptability or versatility

If the security module is made pluggable, then manufacturing flexibility and ease of replacement are improved, but system security may deteriorate due to potential unauthorized removal

Engineering Contradiction:
Improvemanufacturing flexibilityVSAvoidsystem security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The detection circuit is activated before any potential security breach can occur. It proactively monitors the connection status and triggers security responses (setting tamper flags, preventing operation) before unauthorized access or removal can compromise the system.

Inventive Principle:
Principle #9Preliminary anti-action

Solution Approach 2:

The detection circuit acts as an intermediary between the pluggable security module and the system security mechanism. It translates physical connection status into security-relevant signals, enabling the system to maintain security despite the pluggable nature of the module.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS12008101B2Secure enablement of a removable security module on a logic board
Publication Date: 2024.06.11 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US12008101B2 patent drawing
  • US12008101B2 patent drawing
  • US12008101B2 patent drawing

AI summary

Methods and systems for protecting a secure computing system. Aspects include connecting a pluggable security card to a motherboard of the secure computing system. Aspects also include activating a detection circuit to monitor a physical connection between the pluggable security card and the motherboard. Based on detecting that the physical connection between the pluggable security card and the motherboard has been interrupted, aspects include setting a tamper event flag, wherein the secure computing system is prevented from being operated when the tamper event flag is set.