Security Module Segmentation for Fault Detection and Power Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Security modules face challenges in balancing low power consumption with sufficient computational power to protect secret information, and they are vulnerable to physical tampering and unauthorized access.
Innovation Solution
The security processor is divided into a monitoring circuit and a microcontroller, where the microcontroller can be placed in a lower power state when idle, while the monitoring circuit remains active to detect fault conditions, activating the microcontroller to perform security actions as needed, and includes features like penetration detection and fault management to protect secret information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the security processor operates continuously with full computational power to protect secret information, then security response capability is improved, but power consumption increases
Solution Approach 1:
The security processor dynamically adjusts its operational state based on system conditions. The microcontroller transitions between active and low-power states, while the monitoring circuit maintains continuous operation. This dynamic state management allows the system to maintain security responsiveness when needed while reducing power consumption during normal operation.
Solution Approach 2:
The security processor is segmented into two functional parts: a monitoring circuit that operates continuously with full power to detect faults and security threats, and a microcontroller that operates in low-power state during idle periods and activates only when security actions are required. This segmentation resolves the contradiction by assigning different power operational modes to different functional components.
2Use of energy by moving object
If the microcontroller is placed in lower power state to reduce power consumption, then power efficiency is improved, but response time to detect and respond to faults deteriorates
Solution Approach 1:
The monitoring circuit performs preliminary continuous monitoring of fault conditions even when the microcontroller is in low-power state. This preliminary action ensures that security threats are detected immediately, and the microcontroller can be rapidly activated to respond, thus maintaining fast response times while allowing the microcontroller to operate in power-efficient mode during idle periods.
3Reliability
If continuous monitoring is implemented to detect physical tampering, then security detection capability is improved, but power consumption increases
Solution Approach 1:
Continuous security monitoring is implemented through the dedicated monitoring circuit that operates independently and continuously, while the microcontroller operates in low-power state during idle periods. This segmentation allows continuous security detection capability to be maintained without requiring the entire security processor to operate at full power continuously, thus resolving the contradiction between detection capability and power consumption.
Data Source
AI summary
A microcontroller is awakened from a lower power state in response to a trigger indication indicative of a fault condition. After the awakening, the microcontroller performs a security action with respect to secret information in the security module in response to the fault condition.