Semiconductor device, authentication system, and authentication method
AssigneeRenesas Electronics Corporation
InventorsTadaaki Tanimoto, Daisuke Moriyama, Yoshitaka Taki
Life of this patent
Estimating the term…
Abstract
Provided is a semiconductor device which can perform secure data transmission/reception considering functional safety. The semiconductor device includes a hardware security module circuit which performs an authentication process and an error detection circuit used to perform an error detection process at least on first data which is processed in the hardware security module circuit. A memory area associated with the error detection circuit is configured to be accessible only by the hardware security module circuit when the error detection process is performed at least on the first data.
Claims10
A semiconductor device comprising:
- a hardware security module circuit which performs an authentication process;
- and
- an error detection circuit used to perform an error detection process at least on first data which is processed in the hardware security module circuit,
- wherein a memory area associated with the error detection circuit is configured to be accessible only by the hardware security module circuit when the error detection process is performed at least on the first data,
- wherein the semiconductor device further comprises an access control circuit which performs access control over the memory area,
- wherein the hardware security module circuit is configured to be able to read or write data from or to the memory area without depending on a specification made by the access control circuit,
- wherein, to perform the error detection process on the first data stored in the memory area, the hardware security module circuit brings the memory area into a data readable state and reads the first data from the memory area, and
- wherein, when an error is detected in the first data which is read from the memory area and subjected to the error detection process, the hardware security module circuit brings the memory area into a data writable and inexecutable state and erases the first data written in the memory area.
A semiconductor device, comprising:
- a hardware security module circuit which performs an authentication process;
- and
- an error detection circuit used to perform an error detection process at least on first data which is processed in the hardware security module circuit,
- wherein a memory area associated with the error detection circuit is configured to be accessible only by the hardware security module circuit when the error detection process is performed at least on the first data,
- wherein the semiconductor device further comprises an access control circuit which performs access control over the memory area,
- wherein the hardware security module circuit is configured to be able to read or write data from or to the memory area without depending on a specification made by the access control circuit,
- wherein, when target data to be transferred is transferred from a device outside the semiconductor device to the semiconductor device, the hardware security module circuit receives and transmits authentication data associated with the target data to be transferred from and to the device via the memory area to perform mutual authentication with the device,
- wherein the error detection circuit performs the error detection process on the authentication data,
- wherein the access control circuit performs access control when the authentication data is written or read to or from the memory area, and
- wherein, when the target data to be transferred is segmented and transferred from the device, the hardware security module circuit performs mutual authentication with the device before the target data to be transferred is transferred, segments the authentication data resulting from addition of error detection data by the device to the whole target data to be transferred and from an authentication process performed by the device on the whole target data to be transferred, receives the segmented authentication data, and performs mutual authentication with the device after the target data to be transferred is transferred.
A semiconductor device, comprising:
- a hardware security module circuit which performs an authentication process;
- and
- an error detection circuit used to perform an error detection process at least on first data which is processed in the hardware security module circuit,
- wherein a memory area associated with the error detection circuit is configured to be accessible only by the hardware security module circuit when the error detection process is performed at least on the first data,
- wherein the semiconductor device further comprises an access control circuit which performs access control over the memory area,
- wherein the hardware security module circuit is configured to be able to read or write data from or to the memory area without depending on a specification made by the access control circuit,
- wherein, from a server which is communicative with a device outside the semiconductor device, key information used only for communication between the semiconductor device and the device is issued to the semiconductor device via the device,
- wherein the hardware security module circuit receives and transmits authentication data associated with the key information from and to the device via the memory area to perform mutual authentication with the server and the device,
- wherein the error detection circuit performs an error detection process on the authentication data, and
- wherein the access control circuit performs access control when the authentication data is written or read to or from the memory area.
Dependencies are inferred from the claim text.