Secure FPGA Bitstream Authentication via Isolated Provisioner

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In a cloud computing environment, existing methods for securing FPGA bitstreams are cumbersome and impractical due to the need for frequent remote generation and updating of bitstream security keys, which can be vulnerable to snooping and tampering, especially in untrusted environments.

Innovation Solution

A secure FPGA configuration method is implemented using a secure memory area with a physically isolated communication channel and authentication identifier, where the bitstream security key is provisioned and encrypted, and an authentication identifier is embedded in the bitstream to ensure only authorized configurations can be applied to the FPGA, preventing faking key attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If frequent remote generation and updating of bitstream security keys is implemented, then security key management flexibility is improved, but vulnerability to snooping and tampering increases

Engineering Contradiction:

Improvesecurity key management flexibilityVSAvoidvulnerability to snooping and tampering

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

A secure element is introduced as an intermediary component to handle bitstream security key generation, storage, and authentication operations. This secure element acts as a trusted mediator between the bitstream and the FPGA, performing cryptographic operations in isolation to prevent snooping and tampering while maintaining remote management flexibility.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The security-sensitive operations (key generation, storage, and authentication) are extracted from the general-purpose processor and placed into a dedicated secure element. This separation isolates critical security functions from potential attacks on the main system, allowing frequent key updates without exposing the entire system to vulnerability.

Inventive Principle:

Principle #2Taking out (Extraction)

2Reliability

If existing methods for securing FPGA bitstreams are used, then security protection is provided, but operational complexity and impracticality increase

Engineering Contradiction:

Improvesecurity protectionVSAvoidoperational complexity

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The secure element autonomously performs security operations including generating security keys, encrypting bitstreams, and authenticating configurations without requiring external intervention for each operation. This self-service capability simplifies the overall system operation while maintaining strong security protection.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

Security keys are generated and bitstreams are encrypted in advance by the secure element before deployment to the FPGA. This preliminary preparation of security materials simplifies runtime operations, as the FPGA only needs to perform straightforward authentication and configuration without complex security management during operation.

Inventive Principle:

Principle #10Preliminary action

3Adaptability or versatility

If bitstream security keys are remotely generated and deployed, then key management flexibility is improved, but security vulnerabilities in untrusted environments increase

Engineering Contradiction:

Improveremote key managementVSAvoidsecurity vulnerability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The secure element serves as a trusted intermediary that receives remote key management commands but executes all cryptographic operations in isolation from untrusted environments. This mediator architecture enables remote key provisioning while preventing attacks from compromising the actual security keys.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The secure element pre-establishes security boundaries and cryptographic protections before any remote key operations occur. By setting up secure channels and authentication mechanisms in advance, the system cushions against potential attacks in untrusted environments while maintaining remote management capabilities.

Inventive Principle:

Principle #11Beforehand cushioning (Prior cushioning)

Data Source

PatentUS11494520B2Reconfigurable device bitstream key authentication

Publication Date: 2022.11.08 ALTERA CORP

AI summary

An embodiment of an electronic processing system may include a processor, persistent storage media communicatively coupled to the processor, a reconfigurable device communicatively coupled to the processor over a physically isolated trusted communication channel, a secure provisioner communicatively coupled to the processor and the reconfigurable device to provision a secure storage area and to securely store a remotely generated bitstream security key in the provisioned secure storage area, and a device configurer to configure the reconfigurable device with a remotely generated bitstream and the remotely generated bitstream security key. Other embodiments are disclosed and claimed.