Skip to content
Free planNo credit card requiredStart writing
AI for Research home
AI for Research home
Dashboard
Sign inGet started

Search 250 million research papers

Read the abstract, see who wrote it and who cites it, and get the citation in APA, MLA, Chicago or Harvard.

About 1,763 papers for “Hardware security module”

Hardware Security Module

Maria Sommerhalder · 2023

Abstract Hardware security modules are specialized devices that perform cryptographic operations. Their functions include key generation, key management, encryption, decryption, and hashing. The advent of cloud computing has increased the complexity of securing critical data. As a result, double-key encryption has become increasingly popular, which encrypts data using two keys. A copy is stored on an HSM, and a copy is stored in the cloud. Furthermore, as Hardware security modules can manage keys and enable users to manage keys, they provide significant security benefits to applications utilizing cryptography.

Cited by 19Open access

Hardware Security Module Cryptosystem Using Petri Net

Billel Guechi, Mohammed Redjimi · Indonesian Journal of Electrical Engineering and Informatics (IJEEI) · 2023

An embedded system is a combination of hardware and software designed to perform specific functions. It consists of SoCs (system on chip) that it relies on to do its computing work. A key feature of an embedded system is that it consumes less power and components occupy less space on the IC (integrated circuit) thus, the use of SoCs. Embedded system manufacturers get these SoCs from third-party companies to reduce their time to market. That would increase the possibility of the systems to be compromised. In this paper, we present a novel approach to securing such critical systems. For that, we made a Hardware Security Module (HSM), which consists of secure SoC with encrypt/decrypt engine that use Petri net for algorithm modulation to secure data flow. We ensure that the system uses genuine firmware and data is secured since we use encrypt/decrypt algorithms only known to manufacturers.

Cited by 1Open access

ModuleOT: A Hardware Security Module for Operational Technology: Preprint

Hupp, William [National Renewable Energy Laboratory (NREL), Golden, CO (United States)]; Hasandka, Adarsh [National Renewable Energy Laboratory (NREL), Golden, CO (United States)]; Siqueira de Carvalho, Ricardo [National Renewable Energy Laboratory (NREL), Golden, CO (United States)]; Saleem, Danish [National Renewable Energy Laboratory (NREL), Golden, CO (United States)] · OSTI OAI (U.S. Department of Energy Office of Scientific and Technical Information) · 2020

With increasing penetration levels of distributed energy resources (DERs) on the distribution grid, as well as new technological advancements in the cyber space, new cyberattack vectors are being introduced, and the available attack surface is constantly increasing. Despite this increasing risk, the standard IEEE 1547-2018 does not yet recommend cybersecurity measures for DERs. To address this and to better protect data on the distribution grid - from the standpoints information security as well as operational security - ModuleOT has been developed. The module aims to significantly reduce cyberattack vectors by improving data privacy for user applications. This is accomplished by performing the core functions of encryption, authentication, authorization, certificate management, and user access control. The module integrates a custom security application with hardware cryptographic acceleration. The application secures all communications using Transmission Control Protocol over Internet Protocol (TCP/IP). These include the three most commonly used communications protocols for power systems information exchange: Modbus, Distributed Network Protocol 3 (DNP3), and Smart Energy Profile 2.0 (SEP2.0). These three protocols are also supported by IEEE 1547-2018 for all DER devices. This paper tests the data encryption/decryption feature on a physical networking test bed with emulated Modbus devices reporting grid data and presents the results.

Cited by 0Open access

Elliptic Curve Cryptography Point Multiplication Core for Hardware Security Module

Ali Mehrabi, Christophe Doche, Alireza Jolfaei · IEEE Transactions on Computers · 2020

In today's technology, a sheer number of Internet of Things applications use hardware security modules for secure communications. The widely used algorithms in security modules, for example, digital signatures and key agreement, are based upon elliptic curve cryptography (ECC). A core operation used in ECC is the point multiplication, which is computationally expensive for many Internet of things applications. In many IoT applications, such as intelligent transportation systems and distributed control systems, thousands of safety messages need to be signed and verified within a very short time-frame. Considerable research has been conducted in the design of a fast elliptic curve arithmetic on finite fields using residue number systems (RNS). In this article, we propose an RNS-based ECC core hardware for the two families of elliptic curves that are short Weierstrass and twisted Edwards curves. Specifically, we present RNS implementations for SECP256K1 and ED25519 standard curves. We propose an RNS hardware architecture supporting fast elliptic curve point-addition (ECPA), point-doubling (ECPD), and point-tripling (ECPT). We implemented different ECC point multiplication algorithms on the Xilinx FPGA platform. The test results confirm that the performance of our fully RNS ECC point multiplication is better than the fastest ECC point multiplication cores in the literature.

Cited by 63

Design and LSI prototyping of security module with hardware trojan

Masaya Yoshikawa, Takuya Tsukadaira, Takeshi Kumaki · 2015

To examine the tamper resistance of consumer security products using cryptographic circuits, the present study develops countermeasure-annulled hardware Trojan and manufactures its prototyping as ASIC using 018 um CMOS. The present study also verifies the validity and effect of the hardware Trojan on the prototyping LSI by performing evaluation tests.

Cited by 0

Application-Specific Instruction Set Architecture for an Ultralight Hardware Security Module

Ahmed A. Ayoub, Mark D. Aagaard · 2020

Due to the rapid growth of using Internet of Things (IoT) devices in the daily life, the need to achieve an acceptable level of security and privacy according to the real security risks for these devices is rising. Security risks may include privacy threats like gaining sensitive information from a device, and authentication problems from counterfeit or cloned devices. It becomes more challenging to add strong security features to extremely constrained devices compared to battery operated devices that have more computational and storage capabilities. We propose a novel application specific instruction-set architecture that allows flexibility on many design levels and achieves the required security level for the Electronic Product Code (EPC) passive Radio Frequency Identification (RFID) tag device. Our solution moves a major design effort from hardware to software, which largely reduces the final unit cost. The proposed architecture can be implemented with 4,662 gate equivalent units (GEs) for 65 nm CMOS technology excluding the memory and the cryptographic units. The synthesis results fulfill the requirements of extremely constrained devices and allow the inclusion of cryptographic units into the datapath of the proposed application-specific instruction set processor (ASIP).

Cited by 3

Study on Secure Mobile Communication based on the Hardware Security Module

Junho Lee, Haeng-seok Ko, Sanghyun Park et al. · 2014

Abstract — This paper presents a survey of information protection methods for secure mobile communication. Most existing software-based information protection systems have a greater risk for the loss or theft and have difficulty in maintaining. In order to solve these problems, we considered methods of information protection method based on hardware security module that are best adapted to mobile communication environment.

Cited by 0

Creating qualified electronic signatures in a cloud-based hardware security module

Carvalho, José Miguel Fernandes · RepositóriUM (Universidade do Minho) · 2016

Desde o início da Era da Informação que a utilização de documentos eletrónicos se tornou uma realidade. A digitalização da informação trouxe inúmeros benefícios. No entanto, a autenticidade de documentos eletrónicos é muitas vezes questionada, o que faz com que as pessoas continuem a depositar mais confiança nos documentos assinados em papel. Isto porque, apesar de poder ser processada e transmitida facilmente, a informação digital é também facilmente manipulável. Para inverter esta tendência e garantir a validade legal das assinaturas eletrónicas, surgiram as assinaturas eletrónicas qualificadas, que satisfazem as exigências de segurança das assinaturas digitais - autenticidade, integridade e não-repúdio -, baseando-se na utilização de certificados qualificados e na sua criação em dispositivos seguros, tipicamente smartcards ou tokens USB. O objetivo desta dissertação é estudar uma solução para criação de assinaturas eletrónicas qualificadas na Cloud.

Cited by 0Open access

T.: Design, implementation, and evaluation of a vehicular hardware security module

Marko Wolf, Timo Gendrullis · 2012

Abstract. Todays in-vehicle IT architectures are dominated by a large network of interactive, software driven digital microprocessors called elec-tronic control units (ECU). However, ECUs relying on information re-ceived from open communication channels created by other ECUs or even other vehicles that are not under its control leaves the doors wide open for manipulations or misuse. Thus, especially safety-relevant ECUs need effective, automotive-capable security measures that protect the ECU and its communications efficiently and dependably. Based on a require-ments engineering approach that incorporates all security-relevant auto-motive use cases and all distinctive automotive needs and constraints, we present an vehicular hardware security module (HSM) that enables a holistic protection of in-vehicle ECUs and their communications. We describe the hardware design, give technical details on the prototypical implementation, and provide a first evaluation on the performance and security while comparing our approach with HSMs already existing.

Cited by 0

Hardware Module for the Security Enhancement of Optical Telecom Network Equipment

Muhammad Nadeem, Mubashir Ali · The Nucleus · 2015

The telecommunication equipment physical security threats have increased not only in Pakistan but also anywhere in the world and hence, reducing the revenue. This new challenging and alarming situation is created for the telecom network provider. The main focus of this paper is to provide a low cost economical design for reducing the theft of the costly telecommunication equipment like optical network units (ONU). This system is based on instant messaging on the mobile in the event of theft through GSM modem. The proposed security module is dynamic, flexible and can also be integrated in the existing networks and separately having its own independent low power consumption source. The module will continuously work successfully under different scenarios such as completely isolated from other devices by power break down or by fibre cut.

Cited by 0Open access