Automotive Processor Security Engine for Multi-Scheme Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing embedded systems lack flexibility to accommodate multiple security schemes without requiring firmware updates or hardware extensions, leading to logistical difficulties and increased costs due to the need for different part numbers for each security scheme.
Innovation Solution
A mechanism is provided in a single embedded system to enable multiple security schemes by storing parameters for each scheme and allowing selection through a security engine, which includes a control logic to manage key access and lifecycle stages, preventing unauthorized changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a single security scheme is implemented in embedded systems, then the system structure remains simple and cost-effective, but the system lacks flexibility to accommodate different security requirements from manufacturers
Solution Approach 1:
The patent implements a universal security engine that can execute multiple different security schemes (such as Secure Hardware Extension and other cryptographic standards) within a single embedded system. The security engine is designed with a configurable architecture that loads and executes different security algorithms and parameters based on manufacturer requirements, eliminating the need for multiple specialized security modules while maintaining support for diverse security standards.
2Adaptability or versatility
If different security schemes are implemented through firmware updates or hardware extensions, then multiple security requirements can be satisfied, but logistical difficulties and increased costs occur due to different part numbers
Solution Approach 1:
The patent employs a dynamic security configuration approach where the security engine can be reconfigured at runtime or during initialization to support different security schemes. The system includes configurable parameters and lookup tables that can be programmed with different security algorithm sets, allowing the same hardware platform to adapt to various security requirements without requiring physical hardware changes or firmware updates, thereby simplifying manufacturing logistics.
3Adaptability or versatility
If multiple security schemes are supported with configurable parameters, then flexibility is improved, but the complexity of managing and securing the configuration increases
Solution Approach 1:
The patent pre-configures the security engine with multiple sets of security parameters, algorithms, and cryptographic keys during manufacturing or initial setup. Configuration lookup tables and parameter sets are prepared in advance for different security schemes, allowing the system to quickly switch between security modes by simply selecting from pre-prepared configurations rather than managing complex real-time configuration parameters, thereby reducing the burden on system operators.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
A mechanism for making multiple security schemes available in a single embedded system without requiring a firmware update or a hardware extension is provided. Embodiments provide firmware support for storing parameters related to each available security scheme and a selection mechanism to select the desired security scheme for the application utilizing the embedded system. Embodiments can also provide a status register to provide to a user an identification of the security scheme that is presently enabled on the embedded system. Embodiments can further prevent a malicious user from selecting an invalid security scheme.