Embedded Security in ARM-based microcontrollers
Download as PPTX, PDF1 like633 views
The document discusses the μcodemeter embedded security solution integrated with Infineon's XMC microcontrollers, designed for secure firmware updates and function upgrades. It highlights the key features of various XMC microcontroller models and addresses security challenges across diverse target markets, including factory automation and transportation. The μcodemeter application aims to provide robust protection against intellectual property theft and unauthorized access while utilizing advanced cryptography.
Embedded Security in ARM-based microcontrollers
- 1. μCodeMeter Security Embedded in XMC4000 Marco Blume WIBU-SYSTEMS AG Dirk Heinen Infineon AG Embedded Security Cooperation
- 2. XMC Microcontroller High Volume Production ARM Cortex™ - M4 (with FPU) • CPU Frequency up to 120MHz • Timers CCU4, CCU8, POSIF • USB / Up to 3x CAN / Up to 6x Serial Channels • High Resolution PWM • Interconnect Matrix • 2x 12Bit ADC / 2x DAC • TA = -40C to 125C ARM Cortex™ - M0 • Core 32MHz / Peripherals up to 64MHz • Capture Compare Units (CCU4) • 2x Serial Channels • 12Bit ADC • Interconnect Matrix • Secure Bootloader • 1,8V – 5,5V Supply Voltage Range • TA = -40C to 105C Copyright © Infineon Technologies AG 2015. All rights reserved.OCTOBER 2014 PAGE 2 XMC1100 Up to 64kB Flash TSOP16/38, VQFN24/40 + 9ch LED Control (BCCU) + 3x Analog Comparators XMC1200 Up to 200kB Flash TSOP16/28/38, VQFN24/40 + Math Co-Processor + CCU8 PWM Timer + Hall & Encoder I/F XMC1300 Up to 200kB Flash TSOP16/28/38, VQFN24/40 XMC4100/4200 Up to 256kB Flash / 40kB RAM QFN48, TQFP64 XMC4400 Up to 512kB Flash / 80kB RAM TQFP64 / TQFP100 + 120MHz Core + Ethernet + ΔΣ Demodulator XMC4500 Up to 1MB Flash / 160kB RAM TQFP100 / TQFP144 / BGA144 + EBU + SD Card February 2015 Page 2
- 3. XMC Target Markets High through- put and up-time Remote monitoring Reliability and quality Lifetime Security and safety Interoperability Energy efficiency Comfort and ease of use Remote monitoring Appealing design and form factors Interoperability Robustness for harsh environment Functional safety Reliability and quality Lifetime Energy efficiency Robustness for harsh environment Up-time Form factor, size and weight Platform concept Copy protection Fast ramp-up Factory Automation Building Automation Trans- portation Power & Energy Home & Professional Page 3February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. XMC Family / DAVE™
- 4. Security challenges across XMC Target Markets Factory Automation Building Automation Trans- portation Power & Energy Home & Professional Page 4February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. Security challenges vary among market segments We need to update FW of installed devices. How to protect our IP? How to protect from cloning and reverse engineering at our contract manufacturer?Can we make an after market business with FW function upgrades? How to make sure that only authorized devices are built in?
- 5. Security challenges across XMC Target Markets Factory Automation Building Automation Trans- portation Power & Energy Home & Professional Page 5February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. Security challenges vary among market segments We need to update FW of installed devices. How to protect our IP? Can we make an after market business with FW function upgrades?
- 6. µCodeMeter: A cooperation on embedded security Page 6February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. CodeMeter Embedded Driver Personal Computer Industrial PC Embedded Device Programmable Logic Controller Microcontroller High Power Small Size CodeMeter Runtime µCodeMeter
- 7. µCodeMeter technology integrated in DAVE™ Page 7February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. DAVE™ plug in One dialog for security configuration Master key for encryption and licensing safely stored in CodeMeter dongle Individual settings fit customers needs Integrated in build process
- 8. XMC4000 Flash Memory Secure Firmware Updates with µCodeMeter USE CASE 1 Page 8February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. FieldTrusted Environment
- 9. XMC4000 Flash Memory Secure Firmware Updates with µCodeMeter USE CASE 1 Page 9February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. Firmware v1.0 µCmActLicense SBSL (Bootloader + µCmE, µExEngine) FieldTrusted Environment Initial programming of Firmware, Bootloader and µCmActLicense by device manufacturer
- 10. XMC4000 Flash Memory Secure Firmware Updates with µCodeMeter USE CASE 1 Page 10February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. Firmware v1.0 µCmActLicense SBSL (Bootloader + µCmE, µExEngine) FieldTrusted Environment Firmware v1.0 µCmActLicense SBSL (Bootloader + µCmE, µExEngine) delivery
- 11. Trusted Environment Secure Firmware Updates with µCodeMeter USE CASE 1 Page 11February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. Field Firmware v1.0 Firmware v2.0 Encrypted Generation of encrypted firmware file in DAVETM µCmActLicense SBSL (Bootloader + µCmE, µExEngine) DAVETM µExProtector
- 12. Secure Firmware Updates with µCodeMeter USE CASE 1 Page 12February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. Field Firmware v2.0 µCmActLicense SBSL (Bootloader + µCmE, µExEngine) Firmware update in the field. Files are loaded and decrypted by the SBSL Trusted Environment Firmware v2.0 Encrypted DAVETM µExProtector delivery
- 13. XMC4000 Flash Memory Secure Function Upgrade with µCodeMeter USE CASE 2 Page 13February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. µCmActLicense SBSL (Bootloader + µCmE, µExEngine) FieldTrusted Environment µCmActLicense SBSL (Bootloader + µCmE, µExEngine) Blocked function Blocked function
- 14. XMC4000 Flash Memory Secure Function Upgrade with µCodeMeter USE CASE 2 Page 14February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. µCmActLicense SBSL (Bootloader + µCmE, µExEngine) FieldTrusted Environment CodeMeter License Central µCmActLicense SBSL (Bootloader + µCmE, µExEngine) Blocked function Blocked function µCmActLicense Update Generation of encrypted µCmActLicense file. License is bound to individual hardware ID
- 15. XMC4000 Flash Memory Secure Function Upgrade with µCodeMeter USE CASE 2 Page 15February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved. µCmActLicense SBSL (Bootloader + µCmE, µExEngine) FieldTrusted Environment CodeMeter License Central µCmActLicense SBSL (Bootloader + µCmE, µExEngine) Blocked function Enabled function µCmActLicense Update delivery µCmActLicense Update Function upgrade in the field.
- 16. Summary µCodeMeter … … enhances the standard tool chain to provide secure firmware updates or functional upgrades in embedded systems built around XMC4000 microcontrollers. … is based on the market proven CodeMeter solution for processor level control. … is an easy-to-use solution with state-of-the art cryptography. … is available early in Q4/2015 from Wibu-Systems. Thank you for your attention! More info: www.wibu.com/micro-codemeter Page 16February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.
- 17. Page 17February 2015 Copyright © Infineon Technologies AG 2015. All rights reserved.