CSR---EHS: Hardware/Software Architectures for Secure Embedded Systems

许多嵌入式系统处理敏感数据或执行关键功能，因此安全性是一个重要的考虑因素。虽然其中一些威胁在桌面系统中很常见，但桌面的通用性质和组成桌面的组件的商品性质阻止了部署有意义的体系结构对策。这种限制在嵌入式系统中不太严格，允许调查新的安全方法，涵盖系统架构设计的各个方面。然而，这样的系统在处理和电池容量方面受到严重的资源约束。因此，纯粹的软件安全解决方案可能会压倒这些能力。 提供一个安全的实现需要的安全措施，在片上系统（SoC），包括硬件和software.The的目的是开发设计方法，以获得有效的硬件/软件实现，可以促进安全的程序执行或实现一个给定的安全策略在嵌入式系统中的各个组件。 第一个目标包括开发硬件/软件设计方法，以支持资源受限的嵌入式系统中的可信协议（TPM）功能。 TPM充当包含它的系统的信任根，提供安全存储、平台配置测量的安全报告和加密密钥生成等功能。 据报道，到2010年，TPM的出货量将达到2.5亿台，这将推动这项研究。第二个目标包括设计一个安全感知的SoC通信架构，可以执行系统级的安全策略。第三个目标包括开发技术以促进类型安全软件的部署

Many embedded systems handle sensitive data or perform critical functions, making security an important consideration. While some of these threats are common in desktop systems, the general-purpose nature of a desktop and the commodity nature of the components comprising it prevent the deployment of meaningful architectural countermeasures. Such restrictions are less stringent in embedded systems, permitting the investigation of new security approaches, covering all aspects of system architecture design. However, such systems are severely resource-constrained in processing and battery capacities. Thus, purely software security solutions can overwhelm these capacities. Providing a secure implementation requires security measures that span various components in the system-on-chip (SoC), including hardware and software.The aim of this research is to develop design methodologies to obtain efficient hardware/software implementations that can facilitate secure program execution or implement a given security policy in embedded systems. The first objective includes developing hardware/software design methodologies to support trusted platform module (TPM) functionality in resource-constrained embedded systems. TPM acts as a root of trust for the system that contains it, providing capabilities for secure storage, secure reporting of platform configuration measurements, and cryptographic key generation, among other functions. It is reported that by 2010, shipments of TPMs will reach 250 million, giving impetus to this research. The second objective includes design of a security-aware SoC communication architecture that can enforce a system-level security policy. The third objective includes developing techniques to facilitate the deployment of type-safe software