Secure Key Forwarding Controller for CPU-Free Key Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing key management systems in electronic devices are vulnerable to tampering and theft due to CPU intervention and software control during key transmission, compromising system security.
Innovation Solution
A programmable secure management device with a forwarding controller circuit that facilitates key forwarding between secure devices, reducing CPU intervention and software exposure by using a secure forwarding controller to manage key transfers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If CPU reads key from first secure device and transmits to second secure device through software control, then key transmission can be performed, but key security is compromised due to exposure in software layer
Solution Approach 1:
A dedicated key forwarding device is introduced as an intermediary component between the first and second secure devices. This device includes a receiving unit that receives the key from the first secure device and a transmitting unit that transmits the key to the second secure device, eliminating the need for CPU software intervention in the key transmission path and preventing key exposure in the software layer.
Solution Approach 2:
The key transmission function is segmented from the CPU system into a separate, dedicated key forwarding device. This segmentation isolates the sensitive key transmission operation from the general-purpose CPU and its software environment, creating a secure hardware-only path for key transmission that does not involve software layers where keys could be exposed.
2Reliability
If CPU intervention is reduced in key transmission process, then key security is improved, but system complexity increases
Solution Approach 1:
The key forwarding device is designed with multi-functional capabilities, including key reception, key transmission, and the ability to forward commands between secure devices. By consolidating these related functions into a single universal component, the system achieves enhanced security without proportionally increasing overall system complexity.
Data Source
AI summary
A programmable secure management device and a control method for performing key forwarding between secure devices are provided. The programmable secure management device includes a key generating device, a key accepting device and a forwarding controller circuit, wherein the forwarding controller circuit is electrically coupled to the key generating device and the key accepting device. The key generating device is configured to output a source key, and the key accepting device is configured to accept a destination key, wherein the forwarding controller circuit is configured to receive a forwarding command from a host device outside the programmable secure management device, to allow the host device to request the forwarding controller circuit via the forwarding command for taking the source key as the destination key to be loaded in the key accepting device.