Secure Module Virtualization for Multi-Owner SoC Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Secure elements embedded in hardware hosts typically support only a single image owner's requirements, making it difficult for them to act as multiple virtual secure elements for multiple image owners, as they struggle to meet the diverse needs of different users.
Innovation Solution
A device and system on chip (SoC) configuration that includes stream ciphering means for real-time integrity checking and encryption/decryption of data between secure and non-secure modules, along with control mechanisms to manage key distribution and data transfer, allowing the secure module to function as multiple virtual secure elements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure element supports only a single image owner's requirements, then the security and reliability are ensured, but the adaptability and versatility are limited
Solution Approach 1:
The patent divides a single secure element into multiple virtual secure elements, each capable of supporting different image owners' requirements. This segmentation allows the secure element to serve multiple purposes while maintaining the security integrity of each virtual instance through isolated execution environments and dedicated cryptographic contexts.
Solution Approach 2:
The secure element is designed to perform multiple functions by supporting several image owners simultaneously. Through the introduction of virtualization mechanisms including virtual execution environments and configurable security policies, the secure element becomes a universal platform that can adapt to different service providers and application requirements.
2Adaptability or versatility
If a secure element acts as multiple virtual secure elements for multiple image owners, then the adaptability and versatility are improved, but the device complexity increases
Solution Approach 1:
The patent introduces a virtualization layer as an intermediary between the physical secure element hardware and multiple image owners. This virtualization layer manages the complexity of multi-tenant support by providing abstraction mechanisms including virtual execution environments, key management interfaces, and access control policies, thereby shielding image owners from underlying hardware complexity.
Solution Approach 2:
The secure element implements dynamic configuration capabilities that allow virtual execution environments to be created, modified, and terminated on-demand. This dynamic approach enables the system to adapt to different image owners' requirements without requiring static pre-configuration, reducing overall system complexity through flexible resource allocation.
3Reliability
If data transfer between secure and non-secure modules is performed with real-time encryption and integrity checking, then the security is improved, but the processing speed and productivity are reduced
Solution Approach 1:
The patent implements preliminary setup of cryptographic parameters and keys before actual data transfer operations. By pre-configuring security contexts, establishing trust relationships in advance, and preparing encryption/decryption pipelines beforehand, the system minimizes the overhead impact on real-time data transfer performance while maintaining strong security guarantees.
Solution Approach 2:
The patent combines multiple security operations including encryption, decryption, and integrity checking into unified data transfer pathways. By merging these security functions into integrated hardware acceleration units and optimizing the data flow to process multiple operations in parallel, the system reduces the cumulative performance impact of real-time security processing.
Data Source
AI summary
A device for managing multiple accesses to a secure module of a system on chip of an apparatus, and comprises a stream ciphering means arranged for computing on the fly and in a single pass an integrity check for data to be transferred between secure and non secure modules of the system on chip with a seed and an encryption key, and for encrypting/decrypting on the fly and in this single pass these data with the encryption key, and a control means for providing the encryption key and seed to the stream ciphering means and for requesting data transfer and retrieving status to the secure and non secure modules for allowing the transfer of encrypted/decrypted data between the secure and non secure modules.