Security Manager Isolating Malfunctioning Sub-Systems in Interconnect Architectures

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In interconnect-centric device architectures, where multiple intelligent sub-systems communicate directly without a central application engine, there is a risk of security threats and energy wastage due to malfunctioning sub-systems, which can cause financial losses and data breaches.

Innovation Solution

A method and apparatus that detect malfunctioning sub-systems and reduce their resources by switching off processing elements, using a security manager to send control signals and manage power/clock signals, thereby isolating the faulty sub-systems and preventing misuse or energy wastage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If multiple intelligent sub-systems communicate directly without a central application engine, then device complexity and processing capability are improved, but security risks and energy wastage increase due to malfunctioning sub-systems

Engineering Contradiction:
Improvesystem architecture complexityVSAvoidsystem security
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent introduces a security manager as an intermediary component that monitors sub-system integrity and controls resource allocation. The security manager receives integrity information from sub-systems, determines whether they are malfunctioning, and sends control signals to interconnect nodes to restrict or terminate resource access, thereby resolving the security risk in interconnect-centric architectures

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements preliminary integrity checking mechanisms where sub-systems continuously provide integrity information (such as hash values or status signals) to the security manager before potential malfunctions can cause harm. This allows the system to proactively identify and isolate problematic sub-systems before they can flood power or steal confidential information

Inventive Principle:
Principle #10Preliminary action

2Duration of action of moving object

If resources of malfunctioning sub-systems are not reduced, then continuous operation is maintained, but energy wastage and potential damage increase

Engineering Contradiction:
Improvesub-system operation continuityVSAvoidenergy wastage
Core Design Contradiction:
Duration of action of moving objectVSLoss of energy

Solution Approach 1:

The patent implements dynamic resource allocation where the system can adjust resource availability to sub-systems based on their operational status. The security manager dynamically determines whether to restrict, reduce, or terminate resources based on integrity assessments, allowing the system to maintain operation of healthy sub-systems while isolating malfunctioning ones to prevent energy wastage

Inventive Principle:
Principle #15Dynamics

3Reliability

If resources are reduced for detected sub-systems, then security and energy efficiency are improved, but device functionality is limited

Engineering Contradiction:
Improvesystem securityVSAvoiddevice functionality
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent applies resource restriction locally to only those sub-systems that are determined to be malfunctioning, while other healthy sub-systems continue to operate with full resources. The security manager sends targeted control signals to specific interconnect nodes regarding specific problematic sub-systems, ensuring that security measures are applied precisely where needed without affecting overall device functionality

Inventive Principle:
Principle #3Local quality

Data Source

PatentEP2082322B1Security features in interconnect centric architectures
Publication Date: 2014.12.17 NOKIA CORP
  • EP2082322B1 patent drawingFigure 1~2
  • EP2082322B1 patent drawingFigure 3
  • EP2082322B1 patent drawingFigure 4

AI summary

A method comprising: detecting a sub-system to be controlled in a reduced resource mode in a device having an interconnecting system architecture; sending a resource reducing request to an interconnect node of the sub-system, the interconnect node belonging to a first power/clock signal domain; and reducing resources of processing elements of the sub-system belonging to a second power/clock signal domain.