ITR: Architectures and Design Methodologies for Secure Low-Power Embedded Systems

嵌入式系统，例如在信息家电和网络传感器中，面临着一些最苛刻的安全问题-它们资源有限，而且经常需要在物理上不安全的环境中处理敏感信息。安全处理很容易超过嵌入式处理器有限的计算和内存资源，特别是随着需要处理的数据量和高速网络的数据速率的增加。对于安全的低功耗嵌入式系统来说，“电池缺口”加剧了这种“性能差距”，“电池缺口”是指能源需求与电池技术缓慢改进之间的差距。该项目是对几项核心技术的跨学科研究，这些技术将使安全、低功耗的嵌入式系统的设计成为可能。它涵盖了安全、密码算法、嵌入式处理器体系结构、计算机算法、低功耗设计以及使能设计方法和工具等领域。它解决了嵌入式处理器和系统中的性能、能源和安全需求以及它们之间的权衡。研究目标包括全面分析嵌入式系统对安全的性能要求和功耗。该项目正在为低功耗嵌入式系统的安全处理开发高效的体系结构，包括用于片上系统设计的可配置安全模块，以及用于嵌入式系统的微型密码处理器的体系结构指南。研究了基于协议、密码算法、硬件和软件实现级定制的性能、功耗和安全性权衡。设计方法和工具包括处理器设计工具，以促进基于开放框架的新安全处理体系结构的设计，如PLX(托管在普林斯顿)和SimpleScalar工具包。该项目探索特定领域的设计方法，共同设计安全协议和处理体系结构，以满足所需的安全、性能和电源优先级和约束。这项研究使嵌入式系统的设计具有更高的安全性，同时与传统方法相比，在性能和电池寿命方面实现了数量级或更多。除了对未来研究和教育的影响外，预计嵌入式系统设计还会受到广泛的安全影响。研究结果通过普林斯顿多媒体与安全体系结构实验室(Palms)和NJCST嵌入式系统芯片设计中心向业界传播。研究成果正在被编织到研究生和本科课程中。

Embedded systems, for example in information appliances and networkedsensors, face some of the most demanding security concerns - they are resourceconstrained while frequently needing to handle sensitive information inphysically insecure environments. Security processing can easily overwhelm thelimited computation and memory resources of embedded processors, especially withthe escalation in the amount of data to be processed and the data rates ofhigh-speed networks. This "performance gap" is compounded by the "battery gap",which is the disparity between energy requirements and slow improvements inbattery technology, for secure low-power embedded systems. This project is an inter-disciplinary study of several core technologiesthat will enable the design of secure, low-power embedded systems. It spans thefields of security, cryptographic algorithms, embedded processor architecture,computer arithmetic, low power design, and enabling design methodologies andtools. It addresses the performance, energy and security requirements, andtheir tradeoffs, in embedded processors and systems. The research goals includea comprehensive analysis of the performance requirements and power consumptionfor security in embedded systems. The project is developing efficient architecturesfor security processing in low-power embedded systems, including configurablesecurity modules for system-on-chip designs, and architectural guidelines fortiny cryptographic processors for embedded systems. The performance, power andsecurity tradeoffs based on customizations at the protocol, cryptographicalgorithm, and hardware and software implementation levels are studied. Designmethodology and tools include processor design tools to facilitate the design ofnew security processing architectures based on open frameworks such as the PLX(hosted at Princeton) and SimpleScalar toolkits. The project exploresdomain-specific design methodologies that jointly co-design security protocolsand processing architectures to meet the required security, performance andpower priorities and constraints. The research enables the design of embedded systems with higher levels ofsecurity, while achieving an order of magnitude or more in performance andbattery life, compared to conventional approaches. Broad security impacts are expected for embedded system design, in addition to impact for future research and education. Results are disseminated to industry through the Princeton Architecture Lab for Multimedia and Security (PALMS) and the NJCST Center for Embedded System-on-a-Chip Design. The research results are being woven into graduate and undergraduate courses.