Sensor State Controller Architecture for Secure Fault Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing devices lack secure and efficient methods to control the sensing state of sensors, particularly in scenarios where the processor may be compromised, and fail to effectively manage faults and power glitches, leading to unintended sensor enabling or disabling.
Innovation Solution
A controller separate from the processor is used to manage the sensing state of sensors, interfacing with buttons and other components via I2C, and monitors light source voltage to detect faults, preventing false disabling of sensors during brownouts and ensuring secure operation even if the processor is compromised.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If the processor controls the sensing state of sensors, then the device can operate with a simpler architecture, but security is compromised if the processor is compromised
Solution Approach 1:
The patent divides the control architecture into two independent parts: a processor for high-level operations and a separate controller for sensor management. This segmentation isolates the sensor control function from the processor, so that even if the processor is compromised, the sensor state remains secure under the controller's protection.
Solution Approach 2:
The controller acts as an intermediary between the processor and sensors. It receives requests from the processor but maintains independent authority over sensor enabling/disabling decisions. The controller verifies requests against stored sensing state data, preventing unauthorized sensor re-enabling even when the processor is compromised.
2Speed
If the processor manages sensor control directly, then the response time is faster, but the system cannot effectively prevent false disabling during power glitches
Solution Approach 1:
The controller stores sensing state data in non-volatile memory before power failures can occur. This preliminary action preserves the sensor state information across power glitches, allowing the controller to restore proper sensor control after brownouts without false disabling.
Solution Approach 2:
The controller continuously monitors light source voltage and compares it against expected values. When a brownout condition is detected, the controller uses the stored sensing state data to determine the correct sensor state, providing feedback that prevents false disabling during power anomalies.
3Adaptability or versatility
If different devices use customized controller designs, then each device can be optimized for its specific requirements, but the overall design complexity increases
Solution Approach 1:
The patent designs a universal controller architecture that can be applied across multiple device types (smart speakers, cameras, displays). The controller uses a standardized interface (I2C) and a common state management approach, allowing the same design to serve different devices without requiring customization, thereby reducing overall design complexity.
Data Source
AI summary
Techniques are described for controlling a sensing state of a device. In an example, a controller of the device receives, at a first time, first input data indicating a first request to disable a sensor of the device. The controller causes the sensor to be disabled and stores first data indicating that the sensor is disabled. The device can also include a processor. The controller sends, to the processor, first output data that causes the processor to read the first data from the controller. At a second time, the controller receives second input data indicating a second request for an operation of the device. The controller stores second data associated with the second request and sends, to the processor, second output data that causes the processor to read the second data from the controller.