ROM Security Functions Mapping for Tamper-Proof Execution

Solution Overview

Problem

Existing electronic devices face challenges in securing multiple programs against malicious attacks, as each program individually implements security functions, leading to vulnerability and redundant storage usage due to modifiable memory storage.

Innovation Solution

Implementing security functions in a read-only memory (ROM) that is unalterable, allowing programs to access and execute these functions through a mapping, thereby securing them against alteration and consolidating storage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If security functions are implemented individually in each program using modifiable memory, then programs can access security functions, but the security functions become vulnerable to malicious alteration and storage space is wasted due to redundancy

Engineering Contradiction:

Improvesecurity function integrityVSAvoidstorage space usage

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent merges all security functions into a single shared library stored in read-only memory, rather than duplicating them in each program. This consolidation eliminates redundancy and ensures that all programs reference the same secure copy, resolving both the security vulnerability and storage waste issues simultaneously.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The security functions are pre-loaded into read-only memory during system initialization or manufacturing, before any programs execute. This preliminary placement ensures that the security functions are established in a tamper-proof location before any potential malicious activity can occur, preventing alteration while maintaining accessibility.

Inventive Principle:

Principle #10Preliminary action

2Adaptability or versatility

If security functions are stored in modifiable memory for program access, then programs can individually implement security functions, but the functions are vulnerable to malicious alteration

Engineering Contradiction:

Improveprogram access to security functionsVSAvoidsecurity function tamper-proof status

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent merges all security functions into a single shared library stored in read-only memory, rather than duplicating them in each program. This consolidation eliminates redundancy and ensures that all programs reference the same secure copy, resolving both the security vulnerability and storage waste issues simultaneously.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The read-only memory acts as an intermediary between the programs and the security functions. It provides a tamper-proof interface that allows programs to access and execute security functions while preventing any modification to the function code itself, thus maintaining both adaptability and reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If each program individually implements security functions, then programs have independent security capability, but extra storage space is consumed due to redundancy

Engineering Contradiction:

Improveprogram security capabilityVSAvoidstorage space consumption

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent merges all security functions into a single shared library stored in read-only memory, rather than duplicating them in each program. This consolidation eliminates redundancy and ensures that all programs reference the same secure copy, resolving both the security vulnerability and storage waste issues simultaneously.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The shared security library in read-only memory serves as a universal resource that all programs can access and utilize. This multi-functional approach allows any program to leverage the same proven security functions without needing individual copies, maintaining security capability while eliminating storage redundancy.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS9275196B2Implementing security functions using ROM

Publication Date: 2016.03.01 MARVELL ASIA PTE LTD

AI summary

Systems, methods, and other embodiments associated with implementing security functions in a read-only memory (ROM) are described. According to one embodiment, an device includes a read-only memory (ROM) that stores (i) a plurality of security functions and (ii) a mapping of locations of the plurality of security functions in the ROM. The device also includes a processing unit configured to, in response to a request by a process being executed by the processing unit, determine a location in the ROM of a security function using the mapping, and execute the security function for the process from the ROM.