SPI Command Filtering for Fault Injection Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing fault injection attacks can bypass system security features, alter command execution, and compromise the security of computing devices by executing unauthorized commands, particularly in SPI peripheral components like Flash memory devices.
Innovation Solution
A secure SPI communication module monitors and filters unauthorized commands by comparing them against an exclusion list, altering the chip select line and clock line to prevent execution, thereby protecting SPI peripheral components.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional SPI communication is used without command filtering, then device complexity is reduced and ease of operation is improved, but security reliability deteriorates as fault injection attacks can execute unauthorized commands
Solution Approach 1:
The patent introduces a secure boot processor as an intermediary component between the host processor and the SPI peripheral device. This mediator intercepts and filters commands before they reach the peripheral, comparing each command against an exclusion list of unauthorized commands. By placing this intermediary layer, the system achieves enhanced security reliability without significantly increasing the complexity of the existing SPI communication protocol, as the filtering mechanism operates transparently in the background.
Solution Approach 2:
The system performs preliminary action by pre-populating an exclusion list containing identifiers of unauthorized commands before normal operation begins. The secure boot processor loads this list during system initialization and uses it to proactively filter out malicious commands before they can execute. This preliminary preparation enables the system to quickly identify and block fault injection attacks without requiring complex real-time analysis during command execution.
2Reliability
If comprehensive command filtering is implemented to block all unauthorized commands, then security reliability is improved, but device complexity increases due to the need for monitoring and filtering mechanisms
Solution Approach 1:
The patent extracts the security filtering function from the main SPI communication path and isolates it into a dedicated secure boot processor module. This separation allows the filtering mechanism to operate independently with its own exclusive list of unauthorized commands, simplifying the overall system architecture. By taking out the filtering logic into a separate component, the system achieves comprehensive command filtering without significantly increasing the complexity of the core SPI peripheral devices.
Solution Approach 2:
The system applies local quality by implementing filtering only for specific unauthorized commands identified in the exclusion list, rather than applying blanket filtering to all commands. The secure boot processor examines each incoming command and selectively blocks only those matching the exclusion criteria, while allowing legitimate commands to pass through unchanged. This targeted approach maintains security reliability while minimizing the complexity overhead of the filtering mechanism.
3Reliability
If the secure SPI module actively monitors and filters commands, then security reliability is improved by preventing unauthorized command execution, but productivity decreases due to additional processing overhead
Solution Approach 1:
The secure boot processor implements partial action by monitoring only the command portion of SPI transactions rather than analyzing the entire data stream. It compares command identifiers against the exclusion list and blocks only those specific commands that match unauthorized patterns. This selective monitoring approach provides sufficient security protection while minimizing the processing overhead that would otherwise slow down normal SPI communication throughput.
Solution Approach 2:
The system uses copying by maintaining a static exclusion list of unauthorized command identifiers that is pre-loaded into the secure boot processor. Instead of performing complex real-time analysis of each command's full content, the processor simply compares the incoming command against this pre-existing list of known bad commands. This copying approach enables rapid command verification with minimal processing delay, preserving communication productivity while ensuring security reliability.
Data Source
AI summary
This document discloses aspects of secure serial peripheral interface (SPI) communication. In some aspects, a secure SPI communication module monitors communications transmitted by a host to a peripheral block that is coupled to the host via a SPI interconnect. The module compares respective commands of the communications sent by the host to information indicating commands that the peripheral block is not authorized to execute. Based on the comparing, the module determines that one of the respective commands is one of the commands that the peripheral block is not authorized to execute. The module then prevents the peripheral block from receiving at least a portion of the respective command of the communication. By so doing, the module can prevent the peripheral block from executing unauthorized commands, which may compromise security of the peripheral block.