Secure SoC Peripheral Gating for Post-Manufacturing Configuration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing System-on-Chip (SoC) technologies lack flexibility in enabling/disabling peripherals, as the configuration is fixed during the design phase and cannot be changed by users.
Innovation Solution
A SoC device with selectively enabled or disabled peripherals, featuring peripheral enabling/disabling electronics and circuitry that allow secure, on-demand operation, using One Time Programmable memory and cryptography for access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If peripheral configuration is hard-wired and defined during the design phase, then manufacturing simplicity is improved, but adaptability deteriorates
Solution Approach 1:
The patent applies preliminary action by pre-configuring all peripherals to be enabled during manufacturing, then using a security mechanism with cryptographic authentication to allow selective disabling of peripherals after manufacturing. This resolves the contradiction by maintaining manufacturing simplicity while enabling post-manufacturing adaptability through the preliminary establishment of security controls.
Solution Approach 2:
The patent implements dynamics by transitioning from a static, hard-wired peripheral configuration to a dynamic configuration system where peripherals can be selectively enabled or disabled through cryptographic authentication. The system allows the configuration state to change based on authenticated requests, resolving the contradiction between manufacturing simplicity and configuration adaptability.
2Adaptability or versatility
If peripheral configuration can be changed by user after manufacturing, then adaptability is improved, but security risks worsen
Solution Approach 1:
The patent introduces a security mechanism as an intermediary between the user and the peripheral configuration system. This intermediary uses cryptographic authentication (secret keys, cryptographic operations) to verify and control configuration changes, allowing adaptability while maintaining security by filtering and validating all configuration requests.
Solution Approach 2:
The patent changes the security parameter from traditional access control to cryptographic authentication. By using secret keys and cryptographic operations to control peripheral enabling/disabling, the system achieves both user-requested adaptability and enhanced security, as the cryptographic mechanism provides strong authentication and authorization controls.
3Reliability
If cryptographic authentication is implemented for peripheral access control, then security is improved, but device complexity worsens
Solution Approach 1:
The patent applies universality by implementing a centralized security mechanism that handles authentication and authorization for all peripherals through a unified cryptographic system. Rather than implementing separate security controls for each peripheral, the system uses a universal security layer that manages all peripheral access control, reducing overall complexity while maintaining strong security.
Data Source
AI summary
A SOC includes a core, peripherals, and a bus for interconnecting the core and peripherals. Some peripherals can be selectively enabled or disabled on-demand. The SoC further includes peripheral enabling/disabling electronics and peripheral enabling/disabling circuitry coupled to the peripherals. The peripheral enabling/disabling electronics are directly connected to the peripheral enabling/disabling circuitry and are configured to store information items related to an enabled/disabled peripheral configuration, indicate the peripherals that are enabled and the peripherals that are disabled according to the enabled/disabled peripheral configuration, and provide the peripheral enabling/disabling circuitry with signals based on the stored information items. The peripheral enabling/disabling circuitry allows operation of the enabled peripherals and prevents operation of the disabled peripherals based on the signals received from the peripheral enabling/disabling electronics. The peripheral enabling/disabling electronics implement a secure mechanism allowing access to the peripheral enabling/disabling electronics and modification of the stored information items if security criteria are met.


