Time-Based Access Control for System-on-Chip Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional static access control systems in System on Chip (SOC) technologies lack a mechanism to dynamically limit the access time of masters, allowing potential attackers prolonged access to slave devices, which can lead to data leaks from secure memory.
Innovation Solution
A time-based secure access control system is introduced, where master devices generate time-based access requests including a requested access time, and a central access control circuit, coupled with slave access control circuits and dedicated timers, dynamically limits access by checking if the requested time has expired, thereby preventing unauthorized prolonged access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If static access control methods are used to manage access permission, then the system structure is simple and easy to implement, but the access time cannot be dynamically limited, allowing prolonged access that may lead to data leaks
Solution Approach 1:
The access time control circuit is integrated within the slave access control circuit, forming a nested structure where the timer and control logic are embedded inside the existing access control framework. This nesting approach adds time-based security functionality without requiring a completely separate system, thus improving security while controlling complexity growth
Solution Approach 2:
The access time control circuit acts as an intermediary between the master device and the slave device, intercepting and validating access requests based on time parameters. This mediator component enforces time-based access limits without requiring complex changes to the master or slave devices themselves, resolving the contradiction between security enhancement and system complexity
2Reliability
If static access control is implemented, then the implementation is straightforward, but the allowed access time is unlimited, providing attackers sufficient time to access slave devices
Solution Approach 1:
The access time control circuit includes an automated timer that self-manages the access time validation process. When an access request is received, the timer automatically checks whether the requested time has expired and denies access if so, without requiring manual intervention or complex external control logic. This self-service mechanism improves security while maintaining ease of implementation
Solution Approach 2:
The system implements periodic time checking through the timer circuit, which continuously monitors the current time against the requested access time. This periodic validation mechanism ensures that access permissions are automatically revoked after the specified time period, providing security through routine temporal checks rather than complex continuous monitoring
Data Source
AI summary
In a System on a Chip (SOC) having multiple masters and multiple slaves connected to a bus via a crossbar switch, a time-based secure access control system of the SOC includes a central access control (CAC) circuit coupled to the master devices through respective channels to receive time-based access requests from the masters. Each slave is connected to a slave access control (SAC) circuit and each SAC circuit includes an access time control (ATC) circuit in communication with the CAC circuit and a dedicated timer. The CAC circuit controls the ATC circuits to limit the access permission from the masters to the slaves by checking whether a requested access time has expired.