Hardware-Based Protection for Data Security at Run-Time on Embedded Systems

2018 2nd annual International Conference on Cloud Technology and Communication Engineering

计算机科学;无线电电子学

Wang, Xiang^1 ; Zhang, Xiaobing^1 ; Wang, Weike^1 ; Du, Pei^1 ; Zhang, Zhun^1 ; Tian, Yuntong^1 ; Hao, Qiang^1 ; Xu, Bin^1

School of Electronic and Information Engineering, Beihang University, Beijing

100191, China^1

关键词: Advanced Encryption Standard;    Encryption algorithms;    Hardware-based protection;    Integrity protection;    Performance penalties;    Security Architecture;    Security mechanism;    System on a programmable chips;   

Others  :  https://iopscience.iop.org/article/10.1088/1757-899X/466/1/012070/pdf
DOI  :  10.1088/1757-899X/466/1/012070

学科分类：计算机科学（综合）

来源: IOP

【 摘 要 】

The security of embedded systems has attracted much attention as they are being used in more and more fields. The rapid growth and pervasive use of embedded systems make it easier for a sophisticated attacker to gain physical access to launch physical attacks on insecure off-chip memory and bus. This paper presents a novel hardware-based security mechanism to protect confidentiality and integrity of data, preventing the system data from being stolen or tampered by a malicious attacker. The proposed mechanism protects the confidentiality of data using advanced encryption standard (AES) stream encryption algorithm in parallel with the memory access process. This mechanism provides integrity protection for data by attaching integrity signatures generated using hash algorithm to data stored in external memory. The signature is verified when data is fetched into the chip. The security architecture has been tested and validated on the system on a programmable chip (SoPC) with OR1200(processor based on OpenRISC1000 architecture) processor. The experimental result shows that the proposed security mechanism ensures the integrity and confidentiality of system data, introducing low performance penalties.