Secure Enclave Countermeasures for Chip Compromise Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing chip protection methods, such as secure boot and secure enclaves, fail to effectively prevent modifications of software loaded in memory after validation, and require significant chip area or lack control over other components, leaving systems vulnerable to malicious actions.
Innovation Solution
An electronic system with a secure enclave and a protection system that monitors behavior, detects compromises, and applies countermeasures like resets, memory erasure, or alerts to prevent further malicious actions, with minimal impact on chip size.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an additional integrated circuit is included to continuously monitor chip behavior, then detection capability is improved, but chip area is significantly increased
Solution Approach 1:
A protection system acts as an intermediary between the secure enclave and additional units. The secure enclave monitors behavior and communicates findings to the protection system, which then executes countermeasures on additional units. This mediator approach allows the secure enclave to remain small while still enabling comprehensive monitoring and protection through coordinated action with the protection system.
Solution Approach 2:
The protection system is divided into distinct functional components: the secure enclave dedicated to monitoring and detection, and the protection system dedicated to executing countermeasures. This segmentation allows each component to be optimized for its specific function with minimal resource requirements, rather than requiring a single large circuit to perform all functions.
2Reliability
If a secure enclave is used to monitor chip behavior, then detection capability is improved, but control over other components is lost
Solution Approach 1:
The protection system serves as an intermediary that receives detection information from the secure enclave and translates it into actionable countermeasures on additional units. This intermediary structure enables the secure enclave to maintain its security and isolation while still exercising effective control over other chip components through the protection system's execution of countermeasures.
Solution Approach 2:
The system implements a feedback loop where the secure enclave continuously monitors behavior, detects anomalies, and communicates findings to the protection system, which then applies countermeasures. This closed-loop feedback mechanism ensures that detection capability is maintained while enabling effective control responses to detected threats.
3Reliability
If comprehensive monitoring is implemented to detect compromises, then detection capability is improved, but device complexity is increased
Solution Approach 1:
The monitoring and protection functions are segmented into distinct components: the secure enclave handles monitoring and detection, while the protection system handles countermeasure execution. This segmentation reduces overall system complexity by distributing functions across specialized components rather than requiring a single complex system to perform all functions.
Solution Approach 2:
The protection system acts as an intermediary that simplifies the interaction between the secure enclave and additional units. Rather than requiring direct complex interactions between all components, the protection system mediates these interactions, reducing overall system complexity while maintaining comprehensive monitoring and control capabilities.
Data Source
AI summary
An electronic system having a processing system with a hardware processor and at least one additional unit the hardware processor having a CPU register and the additional unit having a processing system memory. A secure enclave of the system is configured to monitor the behavior of the processing system and detect a compromise of the processing system. A protection system of the electronic system is configured, upon detection of a compromise of the processing system by the secure enclave, to perform at least one dedicated action on at least one additional unit among the additional units for raising an alert or for applying countermeasures, or on the hardware processor modifying a CPU register of the hardware processor, the protection system and the secure enclave being connected to the additional units.