Method and apparatus for security over multiple interfaces
View Patent ↗A secure digital system including a number of ICs that exchange data among each other. Each of the ICs includes a key generator for generating a cipher key; a memory for securely storing the generated cipher key; an authenticating module for authenticating neighboring ICs of a respective IC; an encryption module for encrypting data communicated from the respective IC to the neighboring ICs; and a decryption module for decrypting data received from the neighboring ICs.
1. A secure digital system comprising:
a plurality of data processing integrated circuits (ICs) exchanging data among each other, each respective data processing IC comprising:
an authentication module configured to authenticate a neighboring data processing IC;
a history module configured to store a historical information regarding data transactions with the neighboring data processing IC;
a cryptographic processor configured to encrypt data communicated to and decrypt data received from the neighboring data processing IC; and
an assurance module, in communication with the history module, configured to detect attempts to tamper with the respective data processing IC based on the historical information;
wherein the historical information comprises a transaction counter configured to generate a transaction history for each data transaction with the neighboring data processing IC.
2. The secure digital system of claim 1 , wherein the assurance module is further configured to reset the respective data processing IC when an attempt to tamper with the respective data processing IC is detected.
3. The secure digital system of claim 2 , wherein the assurance module is further configured to provide an interrupt when the attempt to tamper with the respective data processing IC is detected.
4. The secure digital system of claim 1 , wherein the assurance module is further configured to remove all transient information in the respective data processing IC when an attempt to tamper with the respective data processing IC is detected.
5. The secure digital system of claim 1 , wherein the assurance module is further configured to determine whether a replay attack is occurring using the historical information.
6. The secure digital system of claim 5 , wherein the assurance module is further configured to determine whether the replay attack is occurring based on a timestamp.
7. The secure digital system of claim 1 , wherein the historical information comprises a state shared with the neighboring data processing IC.
8. The secure digital system of claim 1 , wherein the cryptographic processor includes:
a public key acceleration engine configured to accelerate a cryptographic algorithm.
9. The secure digital system of claim 1 , wherein the authentication module is further configured to use a SHA-1 algorithm to authenticate the neighboring data processing IC.
10. The secure digital system of claim 1 , wherein the assurance module comprises one or more system monitors coupled to a component of the respective data processing IC.
11. The secure digital system of claim 1 , wherein the historical information is stored in battery back up memory.
12. A method for securely processing data in a data processing integrated circuit (IC) within a digital device including a plurality of data processing ICs comprising:
authenticating, by the data processing IC, a neighboring data processing IC;
storing, by the data processing IC, a historical information of data transactions with the neighboring data processing IC, wherein the historical information comprises a transaction counter configured to generate a transaction history for each data transaction with the neighboring data processing IC;
encrypting and decrypting, by the data processing IC, data communicated with the neighboring data processing IC; and
detecting, by the data processing IC, attempts to tamper with the data processing IC based on the historical information.
13. The method for securely processing data in a digital device of claim 12 , further comprising triggering a reset when an attempt to tamper with the data processing IC is detected.
14. The method for securely processing data in a digital device of claim 13 , wherein the triggering the reset further comprises providing an interrupt when the attempt to tamper with the data processing IC is detected.
15. The method for securely processing, data in a digital device of claim 13 , wherein the triggering the reset further comprises erasing all transient information from the data processing IC.
16. The method for securely processing data in a digital device of claim 12 , wherein the detecting further comprises determining whether a replay attack is occurring using the historical information.
17. The method for securely processing data in a digital device of claim 12 , wherein the historical information comprises state shared with the neighboring data processing IC.
18. The method for securely processing data in a digital device of claim 12 , further comprising storing the historical information in battery back up memory.
19. The method for securely processing data in a digital device of claim 12 , further comprising accelerating the authenticating of the neighboring data processing IC.