SoC Bridge Control Circuit for IoT Command Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The increasing use of IoT devices poses significant security challenges due to the need for secure management and access control of connected products, with existing systems struggling to effectively authenticate and authorize commands between master circuits and peripheral circuits, leading to potential illegal access and data tampering.

Innovation Solution

A System on Chip (SoC) architecture that includes a master circuit, routing circuit, bridge control circuit, and peripheral circuits, where the bridge control circuit stores attribute setting values and determines whether incoming commands match these values to authorize access to specific peripheral circuits, preventing illegal access by decoding and comparing attribute information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a bridge control circuit with attribute verification is implemented, then security against illegal access is improved, but device complexity increases

Engineering Contradiction:
ImprovesecurityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The bridge control circuit acts as an intermediary component between master circuits and peripheral circuits. It receives commands from master circuits, verifies attribute information against stored attribute setting values, and selectively forwards or blocks commands. This intermediary structure provides security without requiring complex verification logic in every master or peripheral circuit, thus improving security while controlling overall device complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If attribute verification is performed for every command, then access control security is improved, but command processing time increases

Engineering Contradiction:
Improveaccess controlVSAvoidcommand processing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

Attribute setting values are pre-stored in the bridge control circuit during system initialization or manufacturing. This preliminary action allows the bridge control circuit to perform rapid comparison operations during runtime without requiring complex real-time verification algorithms, thus maintaining fast command processing while ensuring secure access control.

Inventive Principle:
Principle #10Preliminary action

3Adaptability or versatility

If multiple attribute setting values are stored for different peripheral circuits, then access control versatility is improved, but memory requirements increase

Engineering Contradiction:
Improveaccess control versatilityVSAvoidmemory requirements
Core Design Contradiction:
Adaptability or versatilityVSQuantity of substance

Solution Approach 1:

The bridge control circuit stores attribute setting values specifically tailored to each peripheral circuit's security requirements. Each peripheral circuit has its own configured attribute settings, allowing customized access control policies. This local quality approach ensures that memory is used efficiently by storing only the necessary attribute values for each specific peripheral circuit rather than universal or excessive security parameters.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS11698880B2System on chip and device layer
Publication Date: 2023.07.11 NUVOTON
  • US11698880B2 patent drawing
  • US11698880B2 patent drawing
  • US11698880B2 patent drawing

AI summary

A system on chip including a first master circuit, a second master circuit, a routing circuit, a bridge control circuit, and a peripheral circuit is provided. The first master circuit provides a first command. The second master circuit provides a second command. The routing circuit receives the first command and the second command and provides an output command. The bridge control circuit receives the output command and stores an attribute setting value. In response to the routing circuit receiving the first command and the first command pointing to the peripheral circuit, the routing circuit uses the first command as the output command and the bridge control circuit determines whether attribute information of the output command matches the attribute setting value. In response to the attribute information of the output command matching the attribute setting value, the bridge control circuit provides the output command to the peripheral circuit.