Security-Enhancing Chip for Tamper-Proof Data Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing solutions for securing data storage on computer processors are limited by non-volatile storage space and are not practical for external storage, posing security risks when loading data from outside the processor.
Innovation Solution
A system comprising a processor and a security-enhancing chip connected through a communication channel, where the processor calculates and signs hash values using a private key, and the security-enhancing chip verifies these values, ensuring secure data storage and authentication through a public key and certificate-based verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored on the computer processor chip, then security is improved, but storage space is limited
Solution Approach 1:
The system divides the storage function into two parts: a small secure non-volatile storage on the processor chip for storing security-critical data (hash values, certificates, public keys), and external storage for bulk data. This segmentation allows the chip to maintain high security while the external storage provides ample space.
Solution Approach 2:
The patent introduces an intermediary verification mechanism where the processor chip stores cryptographic credentials (hash values, certificates, public keys) that act as intermediaries to verify the integrity of data loaded from external storage. This allows secure verification without storing all data on the chip.
2Quantity of substance
If data is stored externally, then storage space is increased, but security risks increase due to potential tampering
Solution Approach 1:
The system performs preliminary actions by storing cryptographic verification data (hash values, certificates, public keys) on the secure processor chip before data is loaded from external storage. This allows verification of data integrity to be performed in advance or upon loading, preventing tampered data from being executed.
Solution Approach 2:
The patent implements a feedback mechanism where the processor chip continuously verifies the integrity of data loaded from external storage using stored cryptographic credentials. If verification fails (indicating tampering), the system can reject the data or trigger security responses, creating a closed-loop security system.
3Quantity of substance
If more non-volatile storage space is added to the chip, then more data can be stored securely, but the solution becomes less practical
Solution Approach 1:
The system segments storage functionality between a small secure non-volatile storage on the processor chip (for cryptographic credentials) and large external storage (for bulk data). This allows practical implementation with current chip technology while maintaining security for critical data.
Data Source
AI summary
A computer processor and a security enhancing chip may be provided. In one aspect, the computer processor may comprise a storage for storing an encryption key, a central processing unit (CPU) configured to execute one or more software programs, and a circuit configured to calculate a hash function to generate a hash value for data loaded into the computer processor and generate an authentication token for a request initiated by a software program running on the CPU. In another aspect, the security enhancing chip may comprise a first storage for storing an encryption key, a second storage for storing a certificate, a hash storage and circuit components configured to validate, using the first certificate, command(s) adding the encryption key to the first storage and storing a first hash to the hash storage, and to process a request if a second hash in the request is equal to the first hash.