[原創(chuàng)] Maxim DS28E83耐輻射安全認(rèn)證器解決方案

Maxim公司的DS28E83是耐輻射安全認(rèn)證器,從集成的非對(duì)稱(ECC-P256)和對(duì)稱(SHA-256安全函數(shù)推算核心密碼工具,除了由硬件實(shí)現(xiàn)加密引擎的安全服務(wù)外,器件集成了FIPS兼容的真隨機(jī)號(hào)碼發(fā)生器(TRNG),10Kb安全OTP,一個(gè)可配置GPIO和一個(gè)唯一64位ROM身份碼(ROM ID),醫(yī)用滅菌抗性抗輻射高達(dá)75kGy (kiloGray),同時(shí)可使用戶可編程制造或校準(zhǔn)數(shù)據(jù).1-Wire IO引腳±8kV HBM ESD保護(hù),工作電壓3.3V ±10%, 工作溫度0℃ 到 +50℃ ,主要用在醫(yī)療安全認(rèn)證,醫(yī)療工具/附件身份和校準(zhǔn),附件和外設(shè)安全認(rèn)證,主控制器的密鑰安全存儲(chǔ),固件和/或系統(tǒng)參數(shù)的安全引導(dǎo)或下載.本文介紹了DS28E83主要優(yōu)勢(shì)和特性,簡(jiǎn)化框圖,典型應(yīng)用電路圖以及評(píng)估板DS28E83 EVK主要特性和電路圖與材料清單.

The DS28E83 is a radiation-resistant secure authentica­tor that provides a core set of cryptographic tools derived from integrated asymmetric (ECC-P256) and symmetric (SHA-256) security functions. In addition to the security services provided by the hardware implemented crypto engines, the device integrates a FIPS-compatible true random number generator (TRNG), 10Kb of secured OTP, one configurable GPIO, and a unique 64-bit ROM identification number (ROM ID).

The ECC public/private key capabilities operate from the NIST defined P-256 curve and include FIPS 186-compliant ECDSA signature generation and verification to support a bidirectional asymmetric key authentication model. The SHA-256 secret key capabilities are compliant with FIPS 180 and are flexibly used either in conjunction with ECDSA operations or independently for multiple HMAC functions.

The GPIO pin can be operated under command control and include configurability supporting authenticated and nonau­thenticated operation, including an ECDSA-based crypto-robust mode to support secure boot of a host processor.

DeepCover® embedded security solutions cloak sensitive data under multiple layers of advanced security to provide the most secure key storage possible. To protect against device-level security attacks, invasive and noninvasive countermeasures are implemented including active die shield, encrypted storage of keys, and algorithmic methods.

DS28E83主要優(yōu)勢(shì)和特性:

High Radiation Resistance Allows User-Programmable Manufacturing or Calibration Data Before Medical SterilizationResistant Up to 75kGy (kiloGray) of Radiation
One Time Programmable (OTP) 10kb of User Data, Keys, and Certificates
ECC-P256 Compute EngineFIPS 186 ECDSA P256 Signature and Verification
ECDH Key Exchange for Session Key Establishment
ECDSA Authenticated R/W of Configurable Memory
SHA-256 Compute EngineFIPS 180 MAC for Secure Download/Boot
FIPS 198 HMAC for Bidirectional Authentication and Optional GPIO Control
SHA-256 OTP (One-Time Pad) Encrypted R/W of Configurable Memory Through ECDH Established Key
One GPIO Pin with Optional Authentication ControlOpen-Drain, 4mA/0.4V
Optional SHA-256 or ECDSA Authenticated On/Off and State Read
Optional ECDSA Certificate to Set On/Off After Multiblock Hash for Secure Download
TRNG with NIST SP 800-90B Compliant Entropy Source with Function to Read Out
Optional Chip Generated Pr/Pu Key Pairs for ECC Operations or Secrets for SHA256 Functions
Unique and Unalterable Factory Programmed 64-Bit Identification Number (ROM ID)
Optional Input Data Component to Crypto and Key Operations
Advanced 1-Wire Protocol Minimizes Interface to Just Single Contact
Operating Range: 3.3V ±10%, 0℃ to +50℃
±8kV HBM ESD Protection of 1-Wire IO Pin
6-Pin, 3mm x 3mm TDFN

DS28E83應(yīng)用:

Medical Consumables Secure Authentication
Medical Tools/Accessories Identification and Calibration
Accessory and Peripheral Secure Authentication
Secure Storage of Cryptographic Keys for Host Controllers
Secure Boot or Download of Firmware and/or System Parameters

圖1.DS28E83簡(jiǎn)化框圖

圖2.DS28E83典型應(yīng)用電路圖

評(píng)估板DS28E83 EVK

The DS28E83 evaluation system (EV system) provides the hardware and software necessary to exercise the features of the DS28E83. The EV system consists of five DS28E83/ DS2476 devices in a 6-pin TDFN package, a DS9121AQ+ evaluation TDFN socket board, and a DS9481P-300# USB-to-I2C/1-Wire® adapter. The evaluation software runs under Windows® 10, Windows 8, and Windows 7 operat­ing systems, both 64-bit and 32-bit versions. It provides a handy user interface to exercise the features of the DS28E83 and DS2476.

評(píng)估板DS28E83 EVK主要特性:

Demonstrates the Features of the DS28E83 DeepCover® Radiation Resistant 1-Wire Authenticator
Demonstrates the Features of the DS2476 DeepCover Secure Coprocessor
1-Wire/I2C Communication Is Logged to Aid Firmware Designers Understanding of DS28E83 and DS2476
1-Wire/I2C USB Adapter Creates a Virtual COM Port on Any PC
Fully Compliant with USB Specification v2.0
Software Runs on Windows 10, Windows 8, and Windows 7 for Both 64-Bit and 32-Bit Versions
3.3V ±3% 1-Wire Operating Voltage
Convenient On-Board Test Points, TDFN Socket
Evaluation Software Available by Request
評(píng)估板DS28E83 EVK包括:

圖3.DS28E83 EV評(píng)估系統(tǒng)外形圖

圖4. DS28E83 EV評(píng)估系統(tǒng)電路圖
DS28E83 EV評(píng)估系統(tǒng)材料清單:

詳情請(qǐng)見:
https://datasheets.maximintegrated.com/en/ds/DS28E83.pdf
和https://datasheets.maximintegrated.com/en/ds/DS28E83EVKIT.pdf
DS28E83.pdf