Secure Message Authentication Using Segmented Registers and Hardware Comparator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing message authentication code (MAC) systems in communication devices face challenges in balancing security and efficiency, particularly in safety-critical applications like vehicle control systems, where secure MAC computation and comparison are needed without excessive area and power consumption.
Innovation Solution
A communication device with separate secure and safe domains, utilizing a hardware comparator to securely compare computed and received MAC values, while preventing access between processors to maintain security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If MAC computation and comparison are performed using conventional processors, then authentication functionality is achieved, but area and power consumption increase excessively
Solution Approach 1:
The system divides the authentication process into two separate domains: a secure domain for MAC computation (using a secure processor) and a safe domain for MAC comparison (using a safe processor). This segmentation allows each domain to be optimized independently, reducing overall power consumption while maintaining security requirements.
Solution Approach 2:
A dedicated comparing circuit acts as an intermediary between the secure and safe domains. It receives MAC values from both processors and performs the comparison operation, enabling secure authentication without requiring both processors to perform all operations, thus reducing power consumption.
2Reliability
If access control circuitry is implemented to prevent processor access to registers, then security is improved, but device complexity increases
Solution Approach 1:
The register file is segmented into two separate register files: one accessible only to the secure processor and another accessible only to the safe processor. This physical segmentation simplifies the access control mechanism compared to a single register file with complex access control logic, while still providing the necessary security isolation.
3Reliability
If separate secure and safe domains are implemented, then authentication security is improved, but area consumption increases
Solution Approach 1:
The comparing circuit is merged with the register file structure, sharing physical resources. The secure and safe processors both access the same comparing circuit through different interfaces, reducing the total area required compared to having completely separate processing units for both domains.
Data Source
AI summary
A communication device is described including a receiver configured to receive a message including message data and a message authentication code, a first register for storing a received message authentication code and a second register for storing a computed message authentication code. The device also includes a first processor configured to extract the message authentication code from the message and to store the message authentication code in the first register, a second processor configured to compute a message authentication code based on the message data and to store the computed message authentication code in the second register, and a comparing circuit configured to compare the contents of the first register and the second register and to provide a comparison result. The device includes access control circuitry configured to prevent access by the second processor to the first register and to allow access by the first processor to the first register and to prevent access by the first processor to the second register and to allow access by the second processor to the second register.