TrustSoC: Light and Efficient Heterogeneous SoC Architecture, Secure-by-design

Raphaële Milan (1) , Lilian Bossuet (1) , Loïc Lagadec (2, 3) , Carlos Andres Lara-Nino (1) , Brice Colombier (1)

1 LHC - Laboratoire Hubert Curien
2 ENSTA Bretagne - École Nationale Supérieure de Techniques Avancées Bretagne
3 Lab-STICC_ARCAD - Equipe Hardware ARchitectures and CAD tools

In recent years, heterogeneous SoCs, embedding multiple processor cores and programmable logic, have progressed in terms of complexity and performance. They embed more and more components of different natures. From a security point of view, this leads to an increase of the attack surface exploitable by an attacker. The goals of these attacks are to take control of the system and/or have access to sensitive data. To address this issue, in this article, we propose a novel heterogeneous SoC architecture called TrustSoC, which is secure-by-design. Our proposition presents an innovative way of partitioning the system into worlds to provide the designer with different levels of exclusion for the provision of security. Tiny and distributed hardware security wrappers apply policies and actively monitor the SoC communication bus to enforce these levels of security and prevent any unwanted behavior. TrustSoC is a novel proposition that considers both software and hardware approaches to secure the device. We demonstrate our approach by prototyping the security wrappers as well as their operating rules and show that TrustSoC requires minimal changes while significantly improving the state of the art on secure-by-design architectures.

Mots clés: Secure system-on-chip; Hardware IP core protection; Hardware security; Secure architecture

Domaines: Cryptographie et sécurité [cs.CR]; Architectures Matérielles [cs.AR]

Raphaële Milan, Lilian Bossuet, Loïc Lagadec, Carlos Andres Lara-Nino, Brice Colombier. TrustSoC: Light and Efficient Heterogeneous SoC Architecture, Secure-by-design. 2023 Asian Hardware Oriented Security and Trust Symposium (AsianHOST), Dec 2023, Tianjin, China. pp.1-6, ⟨10.1109/AsianHOST59942.2023.10409311⟩. ⟨hal-04419064⟩