SoC Parameter Configuration via Public Key Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing system-on-a-chip (SoC) technologies lack secure mechanisms to prevent unauthorized access to critical information and configuration of parameters, particularly through JTAG functionalities, which can compromise design verification and testing.

Innovation Solution

A method involving public/private key pairs for authentication, where a system-on-a-chip (SoC) receives a public key, generates and authenticates a hash value, exchanges nonces with a host, and configures parameters only after successful authentication, ensuring secure access and configuration.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If JTAG functionalities are enabled for testing and debugging, then design verification capability is improved, but security against unauthorized access deteriorates

Engineering Contradiction:

Improvedesign verification capabilityVSAvoidunauthorized access risk

Core Design Contradiction:

Ease of manufactureVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary authentication actions before enabling JTAG functionalities. The host system must present valid credentials and undergo verification procedures before gaining access to configure or enable JTAG, preventing unauthorized access while allowing legitimate testing operations

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces an authentication mechanism as an intermediary between the host system and JTAG functionalities. This intermediary layer verifies credentials and controls access, allowing the system to maintain security while enabling testing when properly authorized

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If parameter configuration is made accessible for customization, then system adaptability is improved, but security against unauthorized configuration deteriorates

Engineering Contradiction:

Improveparameter configuration flexibilityVSAvoidunauthorized configuration risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent requires preliminary authentication before allowing parameter configuration. The system verifies the host's credentials and authorization level before permitting any parameter changes, ensuring that only authorized users can modify critical settings while maintaining system adaptability for legitimate use cases

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS10193694B1Method and apparatus for securely configuring parameters of a system-on-a-chip (SOC)

Publication Date: 2019.01.29 MARVELL ASIA PTE LTD

AI summary

Embodiments include a method comprising: receiving, by a system-on-a-chip (SOC) from a host, a public key of a public/private key pair; generating a first hash value of the public key; authenticating the first hash value; in response to authenticating the first hash value, transmitting, by the SOC, a first nonce to the host; receiving a signed nonce from the host, the signed nonce being signed using a private key of the public/private key pair; decrypting, using the received public key, the signed nonce to generate a second nonce; based on the first nonce and the second nonce, authenticating the host; in response to authenticating the host, receiving, from the host, a command to configure one or more parameters of the SOC; and configuring the one or more parameters of the SOC.