Bus encryption
From Wikipedia, the free encyclopedia
Bus encryption is the use of encrypted program instructions on a data bus in a computer that includes a secure cryptoprocessor for executing the encrypted instructions. Bus encryption is used primarily in electronic systems that require high security, such as Automated teller machines, TV set-top boxes, and secure data communication devices such as digital police radios. Bus encryption should be distinguished from encrypted data transmission, which does not require input of encrypted instructions.
The need for bus encryption arises when countless technicians have access to internal circuitry of electronic systems, either because they service and repair such systems, stock spare components for the systems, own the system, steal the system, or find a lost or abandoned system, under battlefield conditions for example. It is not only necessary to prevent tampering of encrypted instructions that may be easily discovered on a data bus or during data transmission, but also to prevent discovery of decrypted instructions that may reveal security weaknesses that an intruder can exploit.
In TV set-top boxes, it is necessary to download program instructions periodically to customer's units, to provide new features and to fix bugs. These new instructions are encrypted before transmission to set-top boxes, but must also remain secure on data buses and during execution. This can be accomplished by secure cryptoprocessors that read encrypted instructions on the data bus from external data memory, decrypt the instructions in the cryptoprocessor, and execute the instructions in the same cryptoprocessor.
