Abstract:The low probability of single event upsets (SEU) within particular satellite orbits, makes Commercial-off-the-shelf (COTS) electronic components a viable solution for space system implementation, thanks to the introduction of design-level fault tolerance techniques at the expense of some performance/energy/area penalty. This paper illustrates the design and validation of a novel RISC-V dual-core architecture, based on a computing paradigm that we refer to as full/partial heterogeneous multi-core protection. The approach relies on a small, low-performance, fully fault-tolerant core (LP core) coupled with a high-performance partially fault-tolerant core (HP core). The computing paradigm assumes the failure-exposed HP core executes computation intensive routines for relatively short periods of time, making the occurrence of failures a statistically unlikely situation, while the fully fault-tolerant LP core operates in critical control tasks and manages the failure recovery of the high-performance core. The execution time percentage in the LP core varies from a minimum of 11.4% up to a maximum of 91.3% while in the HP core it is between 8.7% and 88.6%, depending on the application. In the proposed study, both the cores belong to the RISC-V compliant Klessydra core family. The dual-core architecture also includes a watchdog timer controlled by the LP core and monitoring the non-protected HP core, and a context switch FIFO that speeds up the code and data switch between the two cores during failure recovery. A dedicated run-time software environment coordinates the execution of tasks on the high-performance core in a resilient fashion. The dual-core processor has been validated through extensive RTL simulations running in an UVM-based fault-injection environment, which emulates SEUs at various rates. Experimental results illustrate the benefits and limits obtained by using a heterogeneous architecture with different levels of protection and performance. The failure probability assuming a SEU fault occurrence can be reduced by a factor between 10X and 30X with respect to the non-protected architecture, leading to an average failure rate of up to 4.00E-06 per second with respect to 1.80E-05 per second in the non-protected architecture.

Towards Single-Event Upset detection in Hardware Secure RISC-V processors

Using Formal Verification to Evaluate Single Event Upsets in a RISC-V Core

Non-intrusive study on FPGA of the SEU sensitivity on the COTS RISC-V VeeR EH1 soft processor from Western Digital

Self-Assertion-Based Countermeasures Within a RISC-V Microprocessor for Coverage of Information Leakage Faults

A Hardware Security Evaluation Platform on RISC-V SoC

Design and Implementation of a Secure RISC-V Microprocessor

Lightweight Hardware-Based Cache Side-Channel Attack Detection for Edge Devices (Edge-CaSCADe)

Node Monitoring as a Fault Detection Countermeasure against Information Leakage within a RISC-V Microprocessor

A RISC-V Fault-Tolerant Soft-Processor Based on Full/Partial Heterogeneous Dual-Core Protection

A Hardware Platform for Ensuring OS Kernel Integrity on RISC-V

Hardware-based stack buffer overflow attack detection on RISC-V architectures

SecureD: A Secure Dual Core Embedded Processor

Hardware Trojans in Chips: A Survey for Detection and Prevention

Software Mitigation of RISC-V Spectre Attacks

One Glitch to Rule Them All: Fault Injection Attacks Against AMD's Secure Encrypted Virtualization

HECTOR-V: A Heterogeneous CPU Architecture for a Secure RISC-V Execution Environment

When a Patch is Not Enough - HardFails: Software-Exploitable Hardware Bugs

R2D2: Runtime Reassurance and Detection of A2 Trojan

Hardware-Assisted Monitoring For Instruction Security In Embedded System

A Survey of Security Concerns and Countermeasures in Modern Micro-architectures with Transient Execution

Era of Sentinel Tech: Charting Hardware Security Landscapes Through Post-Silicon Innovation, Threat Mitigation and Future Trajectories