SOC Secure Module Scrambling External Memory Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional system on a chip (SOC) implementations do not encrypt data transferred outside the chip boundary, making it vulnerable to hackers who can observe and steal non-encrypted data, as standard encryption algorithms increase latency and are not accessible to secure components.
Innovation Solution
A secure module within the SOC uses a combination of static and dynamic encoding techniques to scramble data before external transfer, employing a key generated during the boot sequence and stored in a secure area, with address information dynamically selecting key portions for enhanced security, reducing latency by using scrambling instead of encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard encryption algorithms (AES, DES, RSA) are used to encrypt data transferred outside the chip boundary, then data security is improved, but latency increases for each data transfer
Solution Approach 1:
The encryption key is segmented into multiple key portions (first key portion, second key portion, etc.). Different key portions are used for different data segments or transactions, allowing parallel processing and reducing the time required for encryption operations while maintaining security.
Solution Approach 2:
The key portions are generated and stored in secure memory before data transfer operations begin. This preliminary preparation of cryptographic materials eliminates the need for time-consuming key generation during actual data transfers, thereby reducing latency while maintaining encryption security.
2Reliability
If encryption is performed on all data transfers, then data security is improved, but processing overhead increases
Solution Approach 1:
Different key portions are assigned to different data segments, address ranges, or transaction types. This localized approach allows the system to apply encryption selectively and efficiently, reducing overall processing overhead while maintaining security where most needed.
Solution Approach 2:
The system dynamically selects which key portion to use based on the specific data transfer requirements, address information, or transaction characteristics. This dynamic key selection optimizes processing efficiency while maintaining appropriate security levels for different data types.
Data Source
AI summary
The present disclosure includes apparatus, systems, digital logic circuitry and techniques relating to data encoding. A method performed by a system on a chip (SOC) includes receiving data to be output to a memory unit external to the SOC. Also a key for scrambling the received data is received. A proper subset of the key is identified and used to scramble the received data. The scrambled data is output to the memory unit external to the SOC.