Abstract:Dynamic data security in embedded systems is raising more and more concerns in numerous safety-critical applications. In particular, the data exchanges in embedded Systems-on-Chip (SoCs) using main memory are exposing many security vulnerabilities to external attacks, which will cause confidential information leakages and program execution failures for SoCs at key points. Therefore, this paper presents a security SoC architecture with integrating a four-parallel Advanced Encryption Standard-Galois/Counter Mode (AES-GCM) cryptographic accelerator for achieving high-efficiency data processing to guarantee data exchange security between the SoC and main memory against bus monitoring, off-line analysis, and data tampering attacks. The architecture design has been implemented and verified on a Xilinx Virtex-5 Field Programmable Gate Array (FPGA) platform. Based on evaluation of the cryptographic accelerator in terms of performance overhead, security capability, processing efficiency, and resource consumption, experimental results show that the parallel cryptographic accelerator does not incur significant performance overhead on providing confidentiality and integrity protections for exchanged data; its average performance overhead reduces to as low as 2.65% on typical 8-KB I/D-Caches, and its data processing efficiency is around 3 times that of the pipelined AES-GCM construction. The reinforced SoC under the data tampering attacks and benchmark tests confirms the effectiveness against external physical attacks and satisfies a good trade-off between high-efficiency and hardware overhead.

A core-based multi-function security processor with GALS Wrapper

A Multi-Task-oriented Security Processing Architecture with Powerful Extensibility

A low-complexity heterogeneous multi-core platform for security soc

Fastpath-based VPN Gateway over Network Processor

The design and implement of a mobile security SoC

A 920mhz Quad-Core Cryptography Processor Accelerating Parallel Task Processing Of Public-Key Algorithms

A security processor based on MIPS 4KE architecture

High-Efficiency Parallel Cryptographic Accelerator for Real-Time Guaranteeing Dynamic Data Security in Embedded Systems

A Specific Data Transfer Controller For Multiple Crypto Ips In A Security Processor

SecureD: A Secure Dual Core Embedded Processor

A Wireless Security Oriented Dual-Core SOC Platform

A Configurable IPSec Processor for High Performance In-Line Security Network Processor

A Heterogeneous Multicore Crypto-Processor with Flexible Long-Word-Length Computation

Programmable Security Processor for Cryptography Algorithms

Multi Core SSL/TLS Security Processor Architecture Prototype Design with automated Preferential Algorithm in FPGA

High Performance, Energy Efficiency, and Scalability with Gals Chip Multiprocessors

Design of a high performance network security processor

A 10 Gbps In-Line Network Security Processor Based on Configurable Hetero-Multi-cores

A secure SoC architecture design with dual DMA controllers

Adding Security to Network Via Network Processors

A 10Gbps in-line Network Security Processor with a 32-bit embedded CPU