Reconfigurable Switch Parser for Hardware Trojan Defense
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current switch forwarding engine parsers face challenges in disabling hardware Trojans, as simple scrambling and descrambling of data can prevent packet parsing and increase the risk of attack, while maintaining security and flexibility to support user-defined protocols.
Innovation Solution
A reconfigurable switch forwarding engine parser is designed with a data preprocessing unit and cascaded basic processing units, incorporating a key path and data path for XOR operations, field extraction, and shifting, along with a de-cooperation function to prevent Trojan attacks, allowing for reconfiguration of protocol frame formats and field relationships through configuration registers and lookup tables.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If simple scrambling and descrambling of data is implemented to prevent Trojan attacks, then security is improved, but packet parsing capability deteriorates and the risk of attack increases
Solution Approach 1:
The parser is divided into multiple processing stages, with scrambling/descrambling operations inserted at specific segments. The data path processes packets through multiple stages, with Trojan prevention operations applied selectively at certain segments without affecting overall parsing capability.
Solution Approach 2:
A key path is introduced as an intermediary component that generates scrambling keys and controls the scrambling/descrambling process. This intermediary enables Trojan prevention while maintaining packet parsing functionality through coordinated operation between the key path and data path.
2Reliability
If de-cooperation technology is implemented to disable hardware Trojans, then security is improved, but device complexity increases
Solution Approach 1:
The parser structure is designed to perform multiple functions: normal packet parsing, Trojan detection, and Trojan prevention. The same processing stages handle both legitimate packet processing and Trojan prevention operations, reducing overall device complexity despite the added security functionality.
Solution Approach 2:
Scrambling operations are performed preliminarily at the entry of the parser, and descrambling is performed at the exit. This preliminary action structure allows Trojan prevention to be integrated into the existing parsing flow without requiring complex additional processing stages.
3Adaptability or versatility
If reconfigurable hardware implementation is used to support user-defined protocols, then adaptability is improved, but device complexity increases
Solution Approach 1:
The parser employs reconfigurable hardware components that can dynamically adjust their operation based on the required protocol. Configuration registers and lookup tables can be programmed to support different frame formats and field relationships, allowing the same hardware structure to adapt to various protocols without physical reconfiguration.
Data Source
AI summary
The present invention relates to a reconfigurable switch forwarding engine parser capable of disabling hardware Trojans. The parser comprises a data preprocessing unit, several cascaded basic processing units and an extraction unit, wherein a key path of a basic processing unit of the first stage extracts and shifts a key bit keyword of a key, and sends a result to a data path of the current stage and a key path of the next stage; basic processing units of other stages carry out keyword extraction and shifting on a key frame and the data frame in sequence; and the extraction unit extracts the key frame and the data frame from a basic processing unit of the last stage, and forwards same to a subsequent packet processing part. The present invention can be widely applied to the design of the switch forwarding engine parser.