Protection Circuits for Unauthorized Access Prevention in Integrated Circuits
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Integrated circuit systems face challenges in preventing unauthorized access, particularly in heterogeneous sub-systems where compromised data can lead to adverse effects, and existing protection mechanisms are inadequate in ensuring the security of data transfers between circuits.
Innovation Solution
The implementation of protection circuits within integrated circuits that monitor system-on-chip interconnections between masters and slaves, checking access permissions and 'poisoning' unauthorized transactions by altering addresses or adding attributes, thereby isolating devices and partitioning system memory to prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If protection circuits are added to monitor and control access between circuit blocks, then security against unauthorized access is improved, but device complexity increases
Solution Approach 1:
The system is divided into multiple secure regions with defined boundaries. Each region has its own protection circuit that independently monitors access requests. This segmentation allows security to be implemented in a modular fashion, where each protection circuit handles only its specific region's access control, reducing the complexity burden on any single component while providing comprehensive system-wide security.
Solution Approach 2:
Protection circuits are introduced as intermediary components between master devices and slave devices. These intermediaries intercept access requests, verify authorization using region information, and either permit or block the requests. This mediator approach centralizes security logic in dedicated protection circuits rather than distributing complex security checks across all circuit blocks, improving security while managing complexity through specialization.
2Reliability
If access requests are monitored and unauthorized requests are poisoned by altering addresses or adding attributes, then data integrity is improved, but processing time increases
Solution Approach 1:
Region information is embedded in access requests at the source before the requests reach protection circuits. This preliminary tagging of requests with region identifiers allows protection circuits to perform rapid lookup-based authorization checks rather than complex analysis. Unauthorized requests are identified and poisoned early in the access path, minimizing the time delay introduced by security checks while ensuring data integrity through proactive request validation.
Solution Approach 2:
The system changes the state of access requests by adding region information parameters and authorization status attributes. Protection circuits modify request parameters by poisoning unauthorized requests (altering addresses or adding blocking attributes) to prevent unauthorized access. This parameter-based control mechanism enables efficient security enforcement through simple parameter comparison and transformation rather than complex processing, reducing time loss while maintaining data integrity.
3Adaptability or versatility
If multiple heterogeneous sub-systems are connected with interconnections, then system functionality and adaptability are improved, but vulnerability to unauthorized access increases
Solution Approach 1:
The heterogeneous system is segmented into distinct secure regions, each corresponding to a sub-system or functional block. Protection circuits are placed at the boundaries of these regions to monitor and control interconnections. This segmentation maintains the functional connectivity and adaptability of multiple sub-systems while introducing security boundaries that prevent unauthorized access across heterogeneous interfaces, thus reducing vulnerability without sacrificing functionality.
Solution Approach 2:
Different security policies and protection mechanisms are applied to different regions based on their specific security requirements. Each protection circuit is configured with region-specific authorization rules that match the local security needs of each sub-system. This local quality approach allows highly secure regions to have stricter access control while less sensitive regions maintain easier access, preserving system functionality and adaptability while addressing vulnerability concerns targeted to specific areas.
Data Source
AI summary
A circuit for preventing unauthorized access in an integrated circuit includes a plurality of circuit block and a plurality of protection circuits. Each protection circuit is coupled to an input of a corresponding circuit block of the plurality of circuit blocks. Each protection circuit determines whether an access request to the corresponding circuit block is authorized. The protection circuits could be implemented to monitor system-on-chip interconnections of master and slave circuits, for example. A method of preventing unauthorized access in an integrated circuit could be implemented using the circuit.