Cross-ministerial Strategic Innovation Promotion Program (SIP)ECSEC, Renesas Electronics

2-2 Implementation Technologies of Ultra-Low Power Public-Key
Cryptography That Achieves IoT Security
Technologies
for IoT

Public-key cryptography anywhere! Secure Cryptographic Unit

User Advantages of SCU and Policies for Widespread Use
Development
technology

SCU

User advantages

Policies for widespread use

Public key cryptography
with tamper resistance canbe incorporated into all
terminal IoT devices.

Conduct research on standard
models and use cases to gain
publicity and accelerate
widespread use in the IoT market.

Scalable deployment iseasily achieved: fromterminal nodes throughintermediate nodes toupper-level servers.

Collaborate with advanced user
companies to accumulate
pioneering best practices.

Advantageous of small size,
low power consumption,and high speed than theexisting TPM products orother similar products.

Roll out the application to various
fields and uses. Improvement ofguides.
Roll out of SCU model for use
cases in a wide variety of fields.

Future View by Research Outcomes (Image)
January
2016

March2020

March2018
Ｒ＆ＤＰｅｒｉｏｄ

Encryption engine development
Security platform development

SCU prototype/modification

UseoftheProceeding withincorporation of SCU
into microcomputerby use andcommercializationof themoutcomes

Factory

SocialInfrastru
cture
RobotAutomobile

Application
Medicalof the SCU
careproduct to avariety of IoT Surveillan
ce camera
Extremesystems

SCU evaluation board development

Experiment of IoT
security

SCU evaluation
board

Modelsystem

SCU forupper-level
node

Incorporated into IoT
upper-level nodeenvironmentMobiledevices

SCU forintermediat
e nodeIncorporated into IoTintermediate node
Incorporated into IoTterminal nodeBuilding ofsecurity chain
using SCU

SCU forterminal
node

Small size and low
power consumption

High speed andsophisticated processing

Image of Widespread Use of SCU (Spread of IoT by Use and Evolution by IoT Node)

Copyright © 2019 Electronic Commerce Security Technology Research Association and Renesas Electronics Corporation. All Rights Reserved.

Cross-ministerial Strategic Innovation Promotion Program (SIP)ECSEC, Renesas Electronics

2-2 Implementation Technologies of Ultra-Low Power Public-Key
Cryptography That Achieves IoT Security
Technologies
for IoT

Public-key cryptography anywhere! Secure Cryptographic Unit

Secure Cryptographic Unit (SCU)

IoT incorporated application software
SW gate function

HW gate function

SoftwareSecurity platform• SCU is the light, fast, and robust module to be embedded
into an IC chip that protects IoT devices from cyberattacks.
• SCU consists of an encryption engine and securityplatform. All the linked devices are made to have the latest
public-key cryptography function incorporated, achieving
the security of IoT.

HardwareEncryption engine(ECC and others)

Peripherycircuits/debug IFCPU/memory

Secure cryptographic unit
SCU

Features of Secure Cryptographic Unit (SCU)
SCU uses the state-of-the-art cryptographic and security technologies to provide scalable protection for terminal,
intermediate, and upper-level nodes making up an IoT system.
1. A small, ultra-low power state-of-the-art public-key cryptography engine is incorporated for IoT terminal nodes.
2. Possible to secure tamper resistance and build life cycle management, which is considered as Root of Trust.
3. Scalable deployment is possible from low-end MCU (Micro Controller Unit) to high performance SOC (System OnChip).

Key 1: SCU prototype chip KM10 seriesApprox. 3 mm

This research produces a prototype chip and develop a model systemthat simulates application of SCU in an actual IoT system.
Main Specifications of SCU KM10 Series• Encryption engine: ECC (elliptic curve cryptography; 256-bit primefield), AES, SHA-256, ChaCha20-Poly1305, physical random numbergenerator• Security control: HW gate, SW gate

SCU circuit
implementation area

Approx. 3 mm

SCU（KM20)

Key 2: SCU evaluation board
The SCU evaluation board, which is a development
tool provided for development of IoT devices withSCU to be incorporated and application systems, canuse the security platform of SCU to develop andevaluate applications.

SCU evaluation board(bottom)

SCU evaluation board

Copyright © 2019 Electronic Commerce Security Technology Research Association and Renesas Electronics Corporation. All Rights Reserved.

Cross-ministerial Strategic Innovation Promotion Program (SIP)ECSEC, Renesas Electronics

2-2 Implementation Technologies of Ultra-Low Power Public-Key
Cryptography That Achieves IoT Security
Technologies
for IoT

Development of Countermeasures Technologies against Hardware Trojans
Threats of hardware Trojans (HT)In an unreliable supply chain, intentional electrical modifications
are made to IC chips, substrates, connection lines, and other parts.

Attack Timing/Assumed Attacks/Assumptions/Cost

Design and manufacturing
processes of system LSI

Attack timing

Assumed attack(i) Requirement specifications

Malicious products provided by vendors(ii) System LSI design

Design by malicious designers(iii) Mask manufacturing

Falsification/replacement of masks during manufacturing(iv) Chip manufacturing

Falsification of design by interventions of subcontracting
vendors(v) Chip verification(vi) Package
Manufacturing process ofincorporated equipment

After shipping

Emergence of HT whose implementation
is inexpensive causes threats to expand
to consumer products.
Assumptions of attacks

Cost of attacks

Attackers

Interventions to supply chains/Attacks
through physical access to ICHigh cost

Bespoke
Professional

Falsification of wiring/circuits by subcontracting vendors(vii) Incorporation into thecontrol part

Incorporation of electronic components
Attack through physical access toequipment(vii) Assembly of equipment(viii) Operation of equipment

Significantly lower costthan “High cost”
Lower cost than theabove

Incorporation of electronic components/writing of
malware/incorporation of devicesIssue 1:

Building of a mechanism to prevent the control components of microcomputers and others from being infectedwith hardware Trojans (detection of Trojans during design and manufacturing processes, prevention of running)

Issue 2:

Building of a mechanism to use safe control components to prevent hardware Trojan from being
imported on the assumption that no hardware Trojan exists in the control components ofmicrocomputer and others (detection of Trojans during design and manufacturing processes,prevention of running)

Issue 3:

Consideration on how to take actions if a Trojan runs in the life cycle

Bespoke
Professional,
Hobbyist

Solution technology forIssue 2 is presented

Development of Technologies to Detect HT Inserted in an IC and Its Peripherals
HT detection test environment
With HT

Reference voltage
generation substrate

Without HT

Substrate with
Trojans detection
ICFPGA board

Extension generation
substrate

Power generation
Signal level conversion
substrate
Connect to a PC

Sensing of surrounding IC andelectrical element from an IC whose
authenticity is guaranteed

Detection of the existence of HT fromthe circuit response using impulses
emitted from the sensor.

Copyright © 2019 Electronic Commerce Security Technology Research Association and Renesas Electronics Corporation. All Rights Reserved.

Technologies for
IoT

Cross-ministerial Strategic Innovation Promotion Program (SIP)ECSEC, Renesas Electronics

2-2 Implementation Technologies of Ultra-Low Power Public-Key Cryptography That Achieves IoT Security

Security Platform Technologies– R&D Perspective –Renesas Electronics

Realization of the R&D Results as the Secure
cryptographic unit (SCU)

Achieved the development of design specifications andproduction of a design prototype of the SW gate/HW gateof the Secure cryptographic unit (SCU) and external
secure access control to the SCU encryption engine.

The results of collaborative research by the research institutions are aggregated tothe Secure cryptographic unit (SCU) mounted on the system LSI chip.
The SCU part is aimed to be supplied as the design IP of the system LSI to chip
vendors. (Analog structure, anti-tampering technology, and countermeasuretechnologies against HW Trojans can be applied to other fields besides SCU.)

Building of Surveillance Camera System
as a Model System
ECSEC

Built a surveillance camera system and verified it as one ofverification examples of application of a system LSI chip withSecure cryptographic unit (SCU) to an IoT system. Note thatthe application range of SCU is wide: IoT in general that
includes industrial equipment control, transportation/medicalequipment, and robot.

Digital Circuit Design/Cryptography
Implementation
Yokohama National Univ., Univ. of Tokyo,ECSEC

Analog Circuit Design/Structure

Application example: Surveillance camera system

Secure cryptograpic unit

IoT embedded application software(3) Facing Area B,
the camera
acquires detailed
information.

Intermediate node

Terminal node

SW gate function

HW gate function

SoftwareHardwareManagement system(1) Abnormalities orchanges in Area B aredetected by thesurveillance camera
and are reported.

Area B

Kobe Univ., AIST, ECSEC
Achieved the enhancement of both the performance andsecurity of the system LSI through new development of analog
implementation, 2.5 dimensional implementation, and othertechnologies for the entire system LSI with the Secure
cryptographic unit.

Tamper Resistance Technology
Tohoku Univ., Yokohama National Univ., Kobe Univ., NAIST,ECSEC
Development, implementation, and evaluation of the technologythat secures the tamper resistant of the Secure cryptographicunit (SCU). Achieved the robust public-key encryption engine.

Countermeasure Technology Against
HW Trojans
Univ. of Electro‐Communications, NAIST, Kobe Univ.,
Yokohama National Univ., ECSEC
Sorting out of the cases of HW Trojan attack to embedded
equipment, analysis of attack technologies in each product layer,and development of countermeasure technologies by focusing
on HW Trojans.

Gateway

Encryption engine

CPU/Memory(ECC and others)

Secure cryptograpic unit

Peripheral
circuits/Debug IF

Storage(3) Facing Area B,
the camera
acquires detailed
information.

Encryption/digital signature

Introduction Analysis SECOM
For automobiles, medical equipment, and other systems each of which consists ofparts and modules provided by multi-vendors and is likely to be interconnected withother systems and in the field where important assets that include including humanlives are critically influenced, multiple models of feasible application and systems
are proposed while considering the possibility of use with social application in avariety of cases.
Intellectual Property Strategy and Others ECSEC
For handling of the research and development results as integrated intellectual property
even after SIP is finished, one of the project participants, the Electronic Commerce Security
Technology Research Association, is converted into a company that, as the businesssuccessor, will promote the intellectual operation and spread of SCU. Even during theresearch and development period, there has been inquiries about the use of intermediateoutcomes from IoT users. The use of SCU is expected to be used as the core technology
for security enhancement of IoT systems in a variety of IoT fields, such as industrial
equipment control, transportation/medical equipment, and robot.

connection

Area CSCUFor Social Implementation

Upper-level node(2) The management
system controls thecameras used forsurveillance in Areas
A and C.

Area A
Security platform

Achieved the light weight and fast public-key encryption engine
through the development of design specifications, digital circuitdesign, and prototype production of the encryption engine of theSecure cryptographic unit (SCU) and ultra-efficient hardware
implementation of elliptic curve cryptography (ECDSA).

Example of a micro controller with built-in Secure cryptographic unit (SCU)

Encryption /digital signature

Practical use
R&D Schedule and Perspective of Practical Use
January
2016

March2018

ＳＩＰ Ｒ＆Ｄperiod①Secure

Encryption engine development
Security platform development

cryptographic

SCU prototype/modification

unit (SCU)

March2020

2030

Embedding of SCU into
microcomputers or other device Socialby use and commercialization
Infrastruc
tureFactory
RobotEvaluation board development
SCU evaluation
board②Modelsystem

Use of outcomes

Model
Model system designsystem
Software development
Method of introducing and using SCU
Development of TF activities
for social implementation③Hardware Threats analysis of hardware Trojans andTrojans devising of practical countermeasures

Application of Automobile
the SCU
product to aMedicalcarevariety of IoTSurveillasystems
ncecamera
Extremeenvironment

Experiment of IoT
security

Copyright © 2019 Electronic Commerce Security Technology Research Association and Renesas Electronics Corporation. All Rights Reserved.

Mobiledevices