Authentication device, method and system
The present disclosure relates to an authentication method of a first device by a second device, each first, second device having a processor, at least one memory, and an authentication circuit, in which the authentication circuit is configured to prohibit the processor from reading data stored in at least part of said memory. The authenticating includes generating a first datum, and a second datum. The second device verifies that the first and second data match.
1. A method, comprising:
authenticating, by a first device, a second device;
restricting, during the authentication of the second device, access of a processor of the first device to one or more memory areas of the first device, the restricting including responding, by authentication circuitry of the first device, to an attempt of the processor of the first device to read a memory area of the one or more memory areas of the first device by providing dummy data to the processor of the first device; and
restricting, during the authentication of the second device, access of a processor of the second device to one or more memory areas of the second device, the restricting including responding, by authentication circuitry of the second device, to an attempt of the processor of the second device to read a memory area of the one or more memory areas of the second device by providing dummy data to the processor of the second device, wherein the authenticating includes:
generating, using the first device, a first datum;
generating, using the second device, a second datum; and
authenticating, by the first device and based on the first datum and the second datum, the second device.
2. The method according to claim 1 , wherein the authentication is of a Verifier/Prover type.
3. The method according to claim 1 , wherein:
the one or more memory areas of the first device include at least one volatile memory area, and at least one non-volatile memory area; and
the one or more memory areas of the second device include at least one volatile memory area, and at least one non-volatile memory area.
4. The method according to claim 3 , wherein the authentication circuitry of the first device restricts reading by the processor of the first device of data stored in said at least one volatile memory area, and at least one part of said at least one non-volatile memory area.
5. The method according to claim 4 , wherein said at least one part of said at least one non-volatile memory area is a part only storing data.
6. The method according to claim 1 , wherein the authentication circuitry of the first device restricts the processor of the first device from writing data in at least one memory area of the one or more memory areas of the first device.
7. The method according to claim 1 , wherein the authentication circuitry of the first device restricts the processor of the first device from executing instructions stored in at least one memory area of the one or more memory areas of the first device.
8. The method according to claim 1 , wherein the authenticating comprises:
saving a state of the processor of the first device and saving a state of the processor of the second device.
9. The method according to claim 1 , wherein the authenticating comprises sharing state information of the second device with the processor of the first device.
10. A system, comprising:
a first device having a processor, memory, and authentication circuitry coupled between the processor and the memory; and
a second device having a processor, memory, and authentication circuitry coupled between the processor and the memories, wherein the first and second devices, in operation, concurrently execute an authentication process, the authentication process including:
restricting access of the processor of the first device to the memory of the first device, the restricting including responding, by the authentication circuitry of the first device, to an attempt of the processor of the first device to read an area of the memory of the first device by providing dummy data to the processor of the first device; and
restricting access of the processor of the second device to the memory of the second device, the restricting including responding, by the authentication circuitry of the second device, to an attempt of the processor of the second device to read an area of the memory of the second device by providing dummy data to the processor of the second device;
generating, using the first device, a first datum;
generating, using the second device, a second datum; and
authenticating one of the first device and the second device by the other of the first device and the second device based on the first datum and the second datum.
11. The system of claim 10 , wherein:
the memory of the first device includes at least one volatile memory area, and at least one non-volatile memory area; and
the memory of the second device includes at least one volatile memory area, and at least one non-volatile memory area.
12. The system according to claim 10 , wherein the authenticating comprises:
sharing state information of the second device with the processor of the first device.
13. A device, comprising:
a processor;
memory; and
authentication circuitry coupled between the processor and the memory, wherein, in operation, the device currently executes an authentication process with a mirror device, the authentication process including:
restricting, under control of the authentication circuitry, access of the processor to the memory, the restricting including responding, by the authentication circuitry of the device, to an attempt of the processor to read a first area of the memory by providing dummy data to the processor; and
generating a first datum, wherein the authentication process is based on the first datum and a second datum generated by the mirror device.
14. The device of claim 13 , wherein, in operation, the device authenticates the mirror device based on the first datum and the second datum.
15. The device of claim 13 , wherein, in operation, the device provides the first datum to the mirror device during the authentication process.
16. The device of claim 15 , wherein, in operation, the device provides the first datum to the mirror device in an encrypted form.
17. The device of claim 16 , wherein the authentication process comprises sharing state information of the device with the mirror device.
18. A non-transitory computer-readable medium having contents which configure authentication circuitry coupled between a processor and a memory of a device to perform an authentication process with a mirror device, the authentication process including:
restricting, under control of the authentication circuitry, access of the processor to the memory, the restricting including responding, by the authentication circuitry of the device, to an attempt of the processor to read a first area of the memory by providing dummy data to the processor; and
generating a first datum, wherein the authentication process is based on the first datum and a second datum generated by the mirror device.
19. The non-transitory computer-readable medium of claim 18 , wherein during the authentication process, the device authenticates the mirror device based on the first datum and the second datum.
20. The non-transitory computer-readable medium of claim 18 , wherein during the authentication process, the device provides the first datum to the mirror device.
21. The non-transitory computer-readable medium of claim 18 , wherein the authentication process comprises sharing state information of the device with the mirror device.
22. The non-transitory computer-readable medium of claim 18 , wherein the contents comprise instructions executed by the authentication circuitry.
23. A non-transitory computer-readable medium having contents which configure authentication circuitry coupled between a processor and a memory of a device to perform an authentication process with a mirror device, the authentication process including:
restricting, under control of the authentication circuitry, access of the processor to the memory, the restricting including interrupting the authenticating process in response an attempt of the processor to access a first area of the memory; and
generating a first datum, wherein the authentication process is based on the first datum and a second datum generated by the mirror device.
24. The non-transitory computer-readable medium of claim 23 , wherein during the authentication process, the device authenticates the mirror device based on the first datum and the second datum.
25. The non-transitory computer-readable medium of claim 23 , wherein during the authentication process, the device provides the first datum to the mirror device.
26. The non-transitory computer-readable medium of claim 23 , wherein the authentication process comprises sharing state information of the device with the mirror device.
27. The non-transitory computer-readable medium of claim 23 , wherein the contents comprise instructions executed by the authentication circuitry.