Autonomous Supervision Module for Secure System-on-Chip Data Flow
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure system-on-chip technologies lack a comprehensive and autonomous supervision mechanism to ensure secure data processing and transmission, particularly in managing normal and abnormal operating conditions, and protecting against unauthorized access and data tampering.
Innovation Solution
An autonomous supervision module within the system-on-chip that monitors and controls data flow and processing activities, enabling or disabling channels based on predefined conditions, using encryption and decryption engines to secure data, and employing a unique key for encryption and decryption processes, with optional signature verification for added security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an autonomous supervision module is added to monitor and control data flow, then data security and integrity are improved, but device complexity increases
Solution Approach 1:
The system is divided into distinct functional modules: an autonomous supervision module for security monitoring, a central processing unit for data processing, and encryption/decryption engines for data protection. Each module operates independently with specific responsibilities, allowing the supervision function to be added without completely redesigning the entire system architecture.
Solution Approach 2:
The supervision module acts as an intermediary between the central processing unit and the encryption/decryption engines, monitoring data flow and controlling access. It enables or disables channels based on predefined conditions without directly processing the data itself, thus providing security oversight while maintaining system modularity.
2Reliability
If real-time monitoring and dynamic channel control are implemented, then unauthorized access prevention is improved, but processing speed decreases
Solution Approach 1:
Normal working conditions are defined in advance, including timing diagrams and data flow patterns. The supervision module loads these predefined conditions into its memory before operation, allowing it to compare real-time data against pre-established security criteria without performing complex analysis during data processing, thus minimizing speed impact.
Solution Approach 2:
The supervision module uses deterministic logic based on predefined conditions rather than complex real-time analysis algorithms. By replacing potential complex monitoring mechanisms with straightforward comparison operations against stored timing and data flow patterns, the system achieves effective security monitoring with minimal processing overhead.
3Reliability
If encryption and decryption engines are used for all data, then data confidentiality is improved, but energy consumption increases
Solution Approach 1:
The supervision module dynamically controls when encryption and decryption operations are performed based on the current operating mode. In secure mode, encryption/decryption is applied to protect data confidentiality. In unsecure mode (used for development or debugging), the supervision module disables these operations to reduce energy consumption while maintaining data protection through alternative means.
Solution Approach 2:
The system changes its security parameters based on operational context. The supervision module can switch between different security levels by modifying the activation state of encryption/decryption engines, allowing the system to adapt energy consumption to the actual security requirements of the current task or development phase.
4Ease of operation
If the system operates in unsecure mode for development purposes, then ease of debugging is improved, but security protection deteriorates
Solution Approach 1:
The system proactively prevents security risks during development by physically blocking access to secure memory when in unsecure mode through a disable signal. This preliminary protective action ensures that even though security protection is reduced for debugging purposes, the most critical security boundary (secure memory access) remains protected against unauthorized or accidental modifications.
Solution Approach 2:
The supervision module enables flexible switching between secure and unsecure modes, allowing developers to easily transition to unsecure mode for debugging when needed, and then switch back to secure mode for normal operation. This dynamic mode switching capability provides both debugging ease and security protection at different operational stages without permanent compromise.
Data Source
AI summary
The aim of the present invention is to provide a secure system-on-chip for processing data, this system-on-chip comprising at least a central processing unit, an input and an output channel, an encryption/decryption engine and a memory, characterized in that, said system-on-chip comprises an autonomous supervision module which is preprogrammed with normal working conditions definitions of at least the input and/or output data flow, and means to disable the input and/or output channel if the current conditions exceed the normal conditions definitions.