Secure Peripheral Interconnect with Hardware Filter Logic
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Peripheral interconnect systems in integrated-circuit devices pose a security risk as they can potentially allow non-secure peripherals to access and trigger tasks on secure peripherals, compromising sensitive information and resources.
Innovation Solution
A peripheral interconnect system with hardware filter logic that separates secure and non-secure channels, allowing only secure peripherals to send and receive event signals over secure channels, thereby preventing unauthorized access and ensuring secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If a peripheral interconnect system allows direct communication between peripherals, then communication efficiency is improved, but security is worsened as non-secure peripherals can access secure resources
Solution Approach 1:
The peripheral interconnect system is segmented into secure and non-secure channels. The patent divides the communication paths by implementing separate event signal routes: secure event signals travel through dedicated secure channels that are inaccessible to non-secure peripherals, while non-secure event signals use separate channels. This segmentation allows efficient direct peripheral-to-peripheral communication while maintaining security boundaries, resolving the contradiction between communication efficiency and security.
2Adaptability or versatility
If secure peripherals are made accessible via peripheral interconnect, then functionality is improved, but vulnerability to unauthorized access is worsened
Solution Approach 1:
The patent introduces secure channel event signals as intermediaries between secure peripherals and the peripheral interconnect system. These intermediary signals act as controlled access points that allow secure peripherals to participate in event-driven communication while preventing direct unauthorized access from non-secure peripherals. The secure channel event signals mediate all interactions involving secure resources, maintaining both functionality and security.
3Device complexity
If a single unified event signal system is used, then system complexity is reduced, but security control is worsened
Solution Approach 1:
The patent applies local quality by differentiating the security properties of different event signal channels rather than treating all channels uniformly. Secure event signal channels are assigned special security attributes that restrict access to secure peripherals only, while non-secure channels remain accessible to all peripherals. This localized security differentiation maintains relatively simple system architecture while providing granular security control over specific communication paths.
Data Source
AI summary
An integrated-circuit device comprises a bus system connected to a processor, a plurality of peripherals, each connected to the bus system, hardware filter logic; and a peripheral interconnect system, separate from the bus system and connected to the peripherals. For each peripheral, the hardware filter logic stores a respective value determining whether the peripheral is in a secure state. The peripheral interconnect system provides a set of one or more channels for signalling events between peripherals. At least one channel is a secure channel or is configurable to be a secure channel. The peripheral interconnect system is configured to allow an event signal from a peripheral in the secure state to be sent over a secure channel and to prevent an event signal from a peripheral that is not in the secure state from being sent over the secure channel.