SOS An innovative secure system architecture

Michel Agoyan (1, 2) , Bruno Robisson (2, 1) , Minh Huu Nguyen (1, 2) , Pirouz Bazargan-Sabet (3) , Guillaume Phan , Sébastien Le Henaff

1 SAS-ENSMSE - Département Systèmes et Architectures Sécurisés
2 CEA-LETI - Commissariat à l'énergie atomique et aux énergies alternatives - Laboratoire d'Electronique et de Technologie de l'Information
3 CIAN - Circuits Intégrés Numériques et Analogiques

`Smart On Smart' (SOS) is a project launched in 2008 and funded by the `Agence Nationale pour la Recherche'. This project aims at helping the partnership formed by Trusted Logic, Viaccess, LIP6, and the CEA-LETI to study an innovative secure system architecture. This architecture is based on two parts. The first one called the host system is in charge of the main application and processes the sensitive data. Connected to the host system the second part called the audit system is strictly dedicated to the security strategy response of the whole system. The underlying idea is that such an architecture will help to build a better secure system. For instance it becomes possible to improve the intelligence of the security policy to be able to differentiate a normal error behaviour from a suspect one. Since the whole system's security reliability is adjustable it becomes also possible to maximise the performance when nonsensitive data are processed. Non repeatable behaviour and response of the system under attack could be also programmed in order to counter the attacker. One of the main tasks is to define a hardware architecture corresponding to this concept for which a safe boundary has to be established between the two systems. The software part and in particular the way the security policy is implemented on the audit system is also a non obvious task especially because the overhead due to this additional audit system has to be the lowest possible in order to be cost-effective. We are building a proof of concept around a pay TV application. Additional hardware features are used to emulate fault injection attacks for the demo. We are building the hardware model on an FPGA board proving also that such an architecture fits an FPGA based system.

Domaines: Cryptographie et sécurité [cs.CR]; Architectures Matérielles [cs.AR]

Michel Agoyan, Bruno Robisson, Minh Huu Nguyen, Pirouz Bazargan-Sabet, Guillaume Phan, et al.. SOS An innovative secure system architecture. Cryptarchi, Jun 2010, Paris, France. ⟨cea-01097117⟩