Secure Element Frequency Control Against SoC Fault Injection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing system-on-a-chip (SoC) architectures face security risks due to attackers manipulating voltage and frequency to cause hardware errors in processor cores, compromising data security and authentication mechanisms.

Innovation Solution

Implement a secure element subsystem with a power management module and register, allowing only the secure element subsystem to access and adjust frequency adjustments, using either software or hardware methods based on the register's state to ensure secure and stable frequency modulation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If frequency modulation is made accessible to multiple subsystems for dynamic adjustment, then system adaptability and performance optimization are improved, but security vulnerabilities increase allowing unauthorized manipulation and hardware errors

Engineering Contradiction:
Improvefrequency adjustment accessibilityVSAvoidsystem security
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments the SoC into multiple security zones with a secure element subsystem acting as a gateway. The power management module and register are placed within the secure element subsystem, creating a hierarchical structure where only authorized subsystems can access frequency modulation functions. This segmentation isolates the critical frequency control mechanisms from unauthorized access while maintaining system-wide adaptability through controlled interfaces.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The secure element subsystem serves as an intermediary between subsystems requesting frequency adjustments and the actual power management module. Any frequency modulation request must pass through this secure gateway, which verifies authorization before allowing access. This intermediary layer prevents direct manipulation of frequency controls by unauthorized subsystems while still enabling dynamic adjustment when properly authenticated.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If a secure element subsystem is introduced to control frequency modulation, then system security is improved, but device complexity increases

Engineering Contradiction:
Improvesystem securityVSAvoidarchitecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the power management module and frequency control register within the secure element subsystem boundary, combining multiple functions into a single integrated security zone. This consolidation reduces the need for separate security mechanisms for each function and simplifies the overall architecture by creating a unified gatekeeping structure rather than multiple distributed security checks.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The secure element subsystem is designed to handle multiple functions including power management, frequency modulation control, and security authorization. By making this subsystem multi-functional, the patent avoids creating separate dedicated structures for each function, thereby reducing overall device complexity while maintaining comprehensive security coverage across all frequency-related operations.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentEP4187358B1Data processing method, security architecture system, and computing device
Publication Date: 2026.03.25 PHYTIUM TECH CO LTD
  • EP4187358B1 patent drawingFigure 1~2
  • EP4187358B1 patent drawingFigure 3~4
  • EP4187358B1 patent drawingFigure 5~6

AI summary

A data processing method applicable to a security architecture system. The security architecture system includes a secure element subsystem, the secure element subsystem includes a power management module and a register, and a communication connection is established between the power management module and the register. The method includes: obtaining, by the power management module, a state of the register through the power management module, and selecting a first adjustment method or a second adjustment method based on the state of the register to adjust a frequency of a target component.