Semiconductor Exclusive Control Unit for Unauthorized Access Prevention

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing access control technologies for communication-enabled devices are vulnerable to unauthorized software installations and data breaches, as they rely on software measures that can be circumvented by malicious software, and do not effectively prevent unauthorized access during communication operations.

Innovation Solution

A semiconductor device with an exclusive control unit that manages communication and access to storage units based on the state of a communication clock, restricting access when the device is actively communicating and allowing access when it is not, thereby preventing unauthorized installations and data breaches.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If software-based access control measures are used to prevent unauthorized installations, then ease of operation is improved, but reliability deteriorates because malicious software can circumvent these measures

Engineering Contradiction:
Improveaccess control operationVSAvoidprotection against unauthorized access
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent replaces software-based access control with a hardware-based control mechanism. The semiconductor device includes a control unit that uses hardware logic to detect communication states and control access to the storage unit, rather than relying on software authentication that can be bypassed by malicious code. This hardware-level enforcement ensures that even if the system is compromised by malware, unauthorized access to the storage unit cannot occur.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Productivity

If communication operations are allowed to run in the background automatically, then productivity is improved, but security deteriorates as unauthorized functions can be installed without user notice

Engineering Contradiction:
Improveautomatic background communicationVSAvoidunauthorized software installation
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary protective action by establishing hardware-based access control before any communication operations occur. The control unit is pre-configured to detect when the communication unit is in a communication state and automatically restrict access to the storage unit during that time. This prevents unauthorized functions from being installed in the first place, rather than attempting to detect or respond to threats after they occur.

Inventive Principle:
Principle #9Preliminary anti-action

3Reliability

If access to storage unit is restricted during communication, then security is improved, but productivity deteriorates due to inability to perform maintenance operations

Engineering Contradiction:
Improvesecurity during communicationVSAvoidsoftware maintenance capability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements dynamic access control where the permissions to access the storage unit change based on the communication state. When the communication unit is not in a communication state, the control unit allows read/write access for maintenance operations. When communication is detected, access is automatically restricted. This dynamic adjustment ensures both security during communication and productivity during maintenance windows.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS10289851B2Semiconductor device and access restriction method
Publication Date: 2019.05.14 RENESAS ELECTRONICS CORP
  • US10289851B2 patent drawing
  • US10289851B2 patent drawing
  • US10289851B2 patent drawing

AI summary

The present invention prevents unauthorized functions from being installed to a predetermined storage unit in the background through a communication function that is being used for authorized communication operations and further prevents confidential information from being read out and stolen from the predetermined storage unit. A semiconductor device adopts an exclusive control unit that exclusively controls communication performed by a communication unit capable of communicating with the outside and access to a predetermined storage unit. For example, the communication status of the communication unit is determined based on whether a communication clock is active or inactive, and the exclusive control is exercised based on the determination result.