Processor-Software Mutual Key Verification for Device Locking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security systems fail to prevent hardware devices from executing unauthorized software applications and vice versa, leading to potential misuse and loss of revenue for manufacturers and developers.

Innovation Solution

A security system that requires both a software access key encrypted on a processor and a processor access key embedded in a software application, ensuring that the electronic device operates only with a specific software application and the software application functions only on a particular hardware device, through a mutual verification process.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional software licensing is used, then software can be distributed widely, but hardware manufacturers cannot prevent their devices from running unauthorized software

Engineering Contradiction:
Improvesoftware licensing securityVSAvoiddevice software compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The access control mechanism is segmented into two independent parts: a hardware access key stored in the device and a software access key embedded in the application. Both keys must be present and match for execution to occur, creating a distributed security model where neither component alone can bypass the restriction.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary verification process where the hardware key and software key interact through a mutual authentication mechanism. The processor verifies the software key against the hardware key, and the software verifies the hardware key, creating a mediated security check that prevents unauthorized execution.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If hardware is designed to run specific software, then software execution is secured, but the device cannot be used for other purposes

Engineering Contradiction:
Improvedevice software bindingVSAvoiddevice functionality
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The access keys are embedded at specific local locations: the hardware key is stored in a dedicated memory region of the processor, and the software key is embedded in the application code. This localized embedding ensures that the keys can only be accessed and verified in their designated contexts, maintaining security while allowing the device to potentially run other authorized software with different keys.

Inventive Principle:
Principle #3Local quality

3Reliability

If access keys are encrypted on the processor and in software, then unauthorized execution is prevented, but system complexity increases

Engineering Contradiction:
Improveaccess control securityVSAvoidkey encryption and verification system
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The processor and software application perform self-verification through mutual authentication. The processor automatically verifies the software key against its stored hardware key, and the software verifies the hardware key, without requiring external authentication services. This self-service mechanism reduces operational complexity while maintaining strong security.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS8516605B2Electronic device and software interlocking security system
Publication Date: 2013.08.20 VERISILICON HLDGCO LTD
  • US8516605B2 patent drawing
  • US8516605B2 patent drawing
  • US8516605B2 patent drawing

AI summary

The present invention provides for a security system for an electronic device that, in one embodiment, includes a processor with a software access key encrypted thereon and a software application with a processor access key encoded therein so that operation of the electronic device and execution of the software application requires both the software access key and the processor access key.