METHOD AND CONFIGURABLE HARDWARE MODULE FOR MONITORING A HARDWARE-APPLICATION

    公开(公告)号:US20220164485A1

    公开(公告)日:2022-05-26

    申请号:US17434872

    申请日:2020-02-26

    IPC分类号: G06F21/76 G06F21/60 G06F21/53

    摘要: Incoming and outgoing communication of a hardware-application component is monitored and controlled at runtime of the hardware-application component. In this way, a kind of firewall is provided for ensuring secure and un-altered operation of a hardware-application performing security-critical functionalities on a field-programmable gate array. The hardware-application component may interact with other components directly and/or via an on-chip bus. The monitoring of incoming and/or outgoing communication is particularly advantageous when using third party hardware-applications or software applications, i.e., applications developed by untrusted parties. Another advantage is the possibility of monitoring and controlling all the communication between hardware-applications, hardware- and software applications, hardware-applications and peripherals, IO controllers, etc. It is beneficial especially in case a hardware-application is compromised and tries to compromise the rest of the embedded device, or in case a corrupted software application tries to compromise the associated hardware-application at runtime.

    DEVICE UNIT SUITABLE FOR OPERATION IN A PROTECTED AND/OR OPEN OPERATING STATE AND ASSOCIATED METHOD

    公开(公告)号:US20200089890A1

    公开(公告)日:2020-03-19

    申请号:US16466869

    申请日:2017-10-10

    IPC分类号: G06F21/57

    摘要: Provided is a device unit, including a module, which can configure the device unit with an operating state from among different operating states during the start-up process and/or during ongoing operation of the device unit, wherein a first protected operating state of the different operating states is designed to allow the execution of at least one operating process which can be predefined and to optionally protect the operating process by means of defined cryptographic means, wherein at least one second operating state of the different operating states is designed to deactivate the first protected operating state and to allow at least one other changeable operating process and to optionally protect the operating process by means of specifiable cryptographic means.

    FINGERPRINTING OF SEMICONDUCTOR DIE ARRANGEMENTS

    公开(公告)号:US20220179950A1

    公开(公告)日:2022-06-09

    申请号:US17425808

    申请日:2019-12-04

    IPC分类号: G06F21/55

    摘要: A die arrangement and a method of monitoring the same are provided. The die arrangement includes a plurality of dies and a physical interconnection structure extending between and traversing the plurality of dies. The physical interconnection structure is arranged for imparting unpredictable, yet reproducible properties to a digital signal being carried on the physical interconnection structure. The die arrangement further includes a monitoring logic for monitoring the properties of the digital signal. This enables detection of tampering of topological arrangements of semiconductor dies to one another.

    Method and programmable hardware security module

    公开(公告)号:US11303440B2

    公开(公告)日:2022-04-12

    申请号:US16484015

    申请日:2017-12-28

    IPC分类号: H04L29/06 H04L9/08 H04L9/32

    摘要: A programmable hardware security module, a method for securing a private key of a cryptographic key pair, and a method for securely providing a private key of a cryptographic key pair on a programmable hardware security module, wherein with the described devices and methods, a decentralised PKI is built, via which device keys and device certificates can be generated and target devices can be provided securely, where in this regard, the key-pair-specific transport key plays a central role in protecting the generated private key that is to be transferred, and where this is linked to the particular key pair intended for a target device via a key derivation from a master key utilizing a key-pair-specific derivation parameter.