Method and configurable hardware module for monitoring a hardware-application

US12307001B2 · kind B2 · utility

Assignee

• Siemens Aktiengesellschaft · DE

Inventors

• Thomas Zeschg · Munich, DE
• Hans Aschauer · Eferding, AT
• Rainer Falk · Poing, DE
• Christian Peter Feist · Ingolstadt, DE
• Aliza Maftun · Munich, DE
• Hermann Seuschek · Munich, DE

Key dates

• Filing date: Feb 26, 2020
• Grant date: May 20, 2025
• Expiry date: Jan 22, 2042

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/2141
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

Incoming and outgoing communication of a hardware-application component is monitored and controlled at runtime of the hardware-application component. In this way, a kind of firewall is provided for ensuring secure and un-altered operation of a hardware-application performing security-critical functionalities on a field-programmable gate array. The hardware-application component may interact with other components directly and/or via an on-chip bus. The monitoring of incoming and/or outgoing communication is particularly advantageous when using third party hardware-applications or software applications, i.e., applications developed by untrusted parties. Another advantage is the possibility of monitoring and controlling all the communication between hardware-applications, hardware- and software applications, hardware-applications and peripherals, IO controllers, etc. It is beneficial especially in case a hardware-application is compromised and tries to compromise the rest of the embedded device, or in case a corrupted software application tries to compromise the associated hardware-application at runtime.