Obfuscating data at-transit
AssigneeArm Limited
InventorsMichael Weiner, Oded Golombek, Harel Adani
Life of this patent
Estimating the term…
Abstract
A method for obfuscating data at-transit can include receiving a request for communicating data, determining a sequence of data at-transit for a window of time; and providing the sequence of the data at transit for performing communications across interconnect to another component. The described method can be carried out by an obfuscation engine implemented in an electronic system such as within a secure element. A secure element can include a processor and a memory. The obfuscation engine can be part of the processor, part of the memory, or a stand-alone component.
Claims7
A secure element of an electronic system comprising:
- a memory;
- and
- a processor, wherein the processor receives a data input and a clock signal input, performs operations according to timing of the clock signal input, and communicates with the memory to read and write data, wherein data traverses between the processor and the memory within the secure element of the electronic system via an interconnect fabric of the secure element, wherein the interconnect fabric comprises metal lines and vias of a data bus between the processor and the memory;
- wherein the processor further performs obfuscation operations to protect against side-channel attacks, wherein the obfuscation operations direct the processor to:
- determine, for communicating a valid data between the processor and the memory across the interconnect fabric, a sequence of data for a window of time, the sequence of data comprising the valid data and at least one dummy data and at least one null data for the window of time,
- wherein the valid data is data used by the electronic system comprising the processor, the dummy data is data that can be discarded by the electronic system, and the null data is a clock cycle during the window of time in which no data is in transit;
- and
- provide the sequence of the data to the memory across the interconnect fabric, whereby the data is obfuscated within the secure element of the electronic system;
- wherein the processor further performs operations to:
- receive, from the memory, stored data corresponding to each data of the sequence of data;
- determine, from the received stored data, a first data corresponding to the valid data and a second data corresponding to a data of the at least one dummy data;
- discard the second data;
- and
- provide the first data for use by the electronic system.
Dependencies are inferred from the claim text.