Reconfigurable group-wise security architecture for NoC-based MPSoCs protection

摘要

Applications are spread into the computational resources of the Multi-processors Systems-on-Chip (MPSoCs) to enhance the performance. This approach forces the peer interaction of different IPs, turning vulnerable applications characterized by security requirements. Sensitive traffic can be protected by implementing security domains, whose aim is to wrap sensitive IPs. Networks-on-Chip can be enhanced in order to provide security services for the data exchanged among the group of IPs that host the sensitive application tasks. While firewalls approaches only guarantee continuous security domains, establishing disrupted domains at MPSoCs demands lightweight cryptographic techniques. In this work we propose a NoC-based architecture able to implement dynamically disrupted security zones by means of two group-wise cryptographic techniques: Diffie-Hellman and mapping-aware key pre-distribution scheme. For the first time we explore the impact of these two approaches on the MPSoC performance. We show that our architecture is able to efficiently manage dynamic security domains while presenting low impact on the performance and cost of MPSoCs.