CN107526969B - Method and device for determining IP (Internet protocol) core security level - Google Patents

Abstract

The present application provides a method and device for determining the security level of an IP core. The method includes: acquiring target attribute information of a target IP core, where the target attribute information includes multiple types of attribute information, and each type of attribute information in the multiple types of attribute information has an impact on the target IP core. The degree of influence of nuclear security is different; the security value of the target attribute information is determined based on the corresponding relationship between the attribute information of the IP core and the security value; the security value of the target attribute information is used to determine the security classification rule based on the preset The security level of the target IP core. The method and device for determining the security level of an IP core provided by the present application can evaluate the security of the IP core, and through the security evaluation of the IP core, the security and reliability of the information computing system with the IP core can be improved.

Description

A method and device for determining IP core security level

technical field

The invention relates to the technical field of chip design and testing, and in particular, to a method and device for determining the security level of an IP core.

Background technique

With the development of mobile Internet and Internet of Things, embedded computing systems are widely used in consumer electronics, aerospace, finance and medical fields, and System on Chip (SoC) is an important part of embedded computing systems.

In order to adapt to application scenarios with increasingly larger system scale and more complex functions, a large number of third-party intellectual property (Intellectual Property, IP) core components are reused in the SoC to improve design efficiency. The design method based on IP core reuse technology has become the most effective method to bridge the gap between design productivity and chip density, and to enter the market quickly. According to statistics, the number of IP cores on a SoC can reach hundreds, and the large-scale application of IP cores has greatly shortened the design time of the SoC and accelerated the launch of related products.

However, due to the different sources of IP cores, the application of a large number of IP cores on SoCs undoubtedly increases the risk of chips, especially for information computing systems that are highly sensitive to security. The information computing system not only requires the SoC integrating a large number of IP cores from different sources to satisfy the correctness of the function, but also to ensure the safety of its use. However, in actual design, the test and verification environment and reliability provided by different IP core suppliers vary, although the international work on integrated circuit IP design, usability, reusability, quality assessment and its standardization It has been started since the late 1990s, but there is currently no relevant standard for IP nuclear safety assessment, and co-verification technology and mainstream EDA tools do not have special security considerations, and only verify code coverage and functions.

More and more studies have shown that the use of untrusted third-party IP may introduce malicious code or malicious circuits such as hardware Trojans, etc., which will directly or indirectly attack the on-chip trusted modules or core content, which may cause different The degree of security information leakage, even including the core key and password leakage, seriously affects the reliability of the entire information system. It can be seen that the security assessment of IP core is an urgent problem to be solved.

SUMMARY OF THE INVENTION

In view of this, the present invention provides a kind of method and device for determining IP core security level, in order to realize the security assessment of IP core, and then improve the security and reliability of the computing system using IP core, its technical scheme is as follows:

A method for determining an IP core security level, the method comprising:

Obtaining target attribute information of the target IP core, the target attribute information includes multiple types of attribute information, and the various types of attribute information in the multiple types of attribute information have different degrees of influence on the security of the target IP core;

Determine the security value of the target attribute information based on the preset correspondence between the attribute information of the IP core and the security value;

Using the security value of the target attribute information, the security level of the target IP core is determined based on a preset security classification rule.

Wherein, the use of the security value of the target attribute information to determine the security level of the target IP core based on a preset security classification rule includes:

The security level of the target IP core is determined based on a preset binary classification rule by using the security value of each attribute information in the first type of attribute information in the multi-type attribute information, and the first type of attribute information is preset Determine the attribute information with the highest degree of influence on the security of the target IP core, and the binary classification rule is a classification rule that divides the security level of the target IP core into two levels;

Alternatively, the security level of the target IP core is determined based on the security value of each attribute information in the various types of attribute information in the multi-type attribute information based on a preset multi-level classification rule, and the multi-level classification rule is to classify the target IP core. The security level of the IP core is divided into multi-level hierarchical rules, and the multi-level is greater than two levels.

Wherein, determining the security level of the target IP core based on a preset binary classification rule by using the security value of each attribute information in the first type of attribute information in the multi-type attribute information includes:

Judging whether there is at least one attribute information whose security value is the first security value in the first type of attribute information, and whether there is at least one attribute information whose security value is the second security value;

If yes, then determine that the level of the target IP core is the level indicating that the target core is an unsafe IP core;

If not, the level of the target IP core is determined to be a level indicating that the target IP core is a secure IP core.

The multi-type attribute information includes: first-type attribute information, second-type attribute information, and third-type attribute information, and the impact degree of the first-type attribute information on the security of the target IP core is higher than that of the The second type of attribute information, the degree of influence of the second type of attribute information on the security of the target IP core is higher than that of the third type of attribute information;

Then, the security level of the target IP core is determined based on a preset multi-level classification rule by the security value of each attribute information in the various types of attribute information in the multi-type attribute information, including:

When the security value of at least one attribute information in the first type of attribute information is the first security value, determining that the security level of the target IP core is the first level;

When the security value of each attribute information in the first type of attribute information is not the first security value, and the security values of at least two attribute information in the first type of attribute information are both the second security value , determine that the security level of the target IP core is the second level;

When the security value of each attribute information in the first type of attribute information is not the first security value, and the security value of only one attribute information in the first type of attribute information is the second security value, or, when the first security value is The security value of each attribute information in the type of attribute information is neither the first security value nor the second security value, and the security value of at least one attribute information in the second type of attribute information is the first security value or the second security value. When the security value is determined, the security level of the target IP core is determined to be the third level;

When the security value of each attribute information in the first type of attribute information and the second type of attribute information is neither the first security value nor the second security value, and the first attribute information, the first When the security value of no more than two types of attribute information and the third attribute information has a third preset value, determine that the security level of the target IP core is the fourth level;

When the security value of each attribute information in the first attribute information, the second attribute information and the third attribute information is not the first security value, neither the second security value nor the third preset value When, it is determined that the security level of the target IP core is the fifth level;

The security value of the attribute information is the first security value indicating that the attribute information is the attribute information with the worst security, and the attribute information is the second security value indicating that the attribute information is the attribute information with the next worst security. , the attribute information is the third full value indicating that the attribute information is the attribute information with the third worst security, the fifth level indicates that the security of the target IP core is the highest, the fourth level, the third The security indicated by the third level, the second level and the first level is gradually reduced.

Wherein, the attribute information of the first type includes: the acquisition channel of the target IP core, the security level of the provider of the target IP core, and the application field of the target IP core;

The second type of attribute information includes: the degree of compliance of the target IP core with the standard, the delivery item of the target IP core, the function information of the target IP core and the working mode of the target IP core;

The third type of attribute information is attribute information other than the second type of attribute information and the third type of attribute information in the target attribute information.

A device for determining the security level of an IP core, the device comprising: an attribute information acquisition module, a security value determination module and a security level determination module;

The attribute information acquisition module is used to acquire target attribute information of the target IP core, the target attribute information includes multiple types of attribute information, and the influence of various types of attribute information in the multiple types of attribute information on the security of the target IP core varying degrees;

The security value determination module is configured to determine the security value of the target attribute information obtained by the attribute information acquisition module based on the preset correspondence between the attribute information of the IP core and the security value;

The security level determination module is configured to use the security value of the target attribute information determined by the security value determination module to determine the security level of the target IP core based on a preset security classification rule.

Wherein, the security level determination module includes: a first determination module or a second determination module;

The first determining module is configured to determine the security level of the target IP core based on a preset binary classification rule through the security value of each attribute information in the first type of attribute information in the multi-type attribute information, The first type of attribute information is the attribute information that has the highest impact on the security of the target IP core among the multiple types of attribute information, and the binary classification rule is to classify the security level of the target IP core A two-level grading rule;

The second determination module is configured to determine the security level of the target IP core based on a preset multi-level classification rule by using the security value of each attribute information in the various types of attribute information in the multi-type attribute information. The classification rule is a classification rule for dividing the security level of the target IP core into multiple levels, and the multiple levels are greater than two levels.

Wherein, the first determining module includes: a judging sub-module and a determining sub-module;

The judging submodule is used for judging whether there is at least one attribute information whose security value is the first security value, and whether there is at least one attribute information whose security value is the second security value in the first type of attribute information, wherein the attribute The security value of the information is that the first security value indicates that the attribute information is the attribute information with the worst security, and the attribute information is the second security value that indicates that the attribute information is the attribute information that is the second worst in security;

The determining sub-module is used for when the determining sub-module determines that the security value of at least one attribute information in the first type of attribute information is the first security value, and the security value of at least one attribute information is the second security value. When the security value is set, the level of the target IP core is determined to be a level indicating that the target core is an unsafe IP core; otherwise, the level of the target IP core is determined to be a level that indicates that the target IP core is a secure IP core.

The multi-type attribute information includes: first-type attribute information, second-type attribute information, and third-type attribute information, and the impact degree of the first-type attribute information on the security of the target IP core is higher than that of the The second type of attribute information, the degree of influence of the second type of attribute information on the security of the target IP core is higher than that of the third type of attribute information;

The second determination module includes: a first determination sub-module, a second determination sub-module, a third determination sub-module and a fourth determination sub-module;

The first determining submodule is configured to determine that the security level of the target IP core is the first level when the security value of at least one attribute information in the first type of attribute information is the first security value;

The second determination submodule is used for when the security value of each attribute information in the first type of attribute information is not the first security value, and at least two attribute information in the first type of attribute information When the security value of is the second security value, it is determined that the security level of the target IP core is the second level;

The third determination sub-module is used when the security value of each attribute information in the first type of attribute information is not the first security value, and the security value of only one attribute information in the first type of attribute information is not the first security value. When the second security value, or, when the security value of each attribute information in the first type of attribute information is neither the first security value nor the second security value, and the second type of attribute information has at least one attribute information When the security value is the first security value or the second security value, determine that the security level of the target IP core is the third level;

The fourth determination sub-module is configured to be used when the security values of each attribute information in the first type of attribute information and the second type of attribute information are neither the first security value nor the second security value, and When the security value of no more than two attribute information in the first attribute information, the second type attribute information and the third attribute information has a third preset value, determine the security of the target IP core The level is the fourth level;

The fifth determination sub-module is used for when the security value of each attribute information in the first attribute information, the second attribute information and the third attribute information is neither the first security value nor the second security value When the value is not the third preset value, it is determined that the security level of the target IP core is the fifth level;

The security value of the attribute information is the first security value indicating that the attribute information is the attribute information with the worst security, and the attribute information is the second security value indicating that the attribute information is the attribute information with the next worst security. , the attribute information is the third full value indicating that the attribute information is the attribute information with the third worst security, the fifth level indicates that the security of the target IP core is the highest, the fourth level, the third The security indicated by the third level, the second level and the first level is gradually reduced.

Wherein, the attribute information of the first type includes: the acquisition channel of the target IP core, the security level of the provider of the target IP core, and the application field of the target IP core;

The second type of attribute information includes: the degree of compliance of the target IP core with the standard, the delivery item of the target IP core, the function information of the target IP core and the working mode of the target IP core;

The third type of attribute information is attribute information other than the second type of attribute information and the third type of attribute information in the target attribute information.

The above-mentioned technical scheme has the following beneficial effects:

The method and device for determining the security level of an IP core provided by the present invention first obtain the target attribute information of the target IP core. The set correspondence between the attribute information of the IP core and the security value determines the security value of the target attribute information. Finally, the security value of the target attribute information is used to determine the security level of the target IP core based on the preset security classification rules. The method and device provided by the present invention can realize the evaluation of the security and reliability of the IP core and the information computing system with the IP core. By evaluating the security and reliability of the IP core, the reliability of the information computing system with the IP core can be improved Safety and reliability.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only It is an embodiment of the present invention. For those of ordinary skill in the art, other drawings can also be obtained according to the provided drawings without creative work.

1 is a schematic flowchart of a method for determining an IP core security level provided by an embodiment of the present invention;

FIG. 2 is a schematic structural diagram of an apparatus for determining a security level of an IP core provided by an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, but not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

An embodiment of the present invention provides a method for determining the security level of an IP core. Please refer to FIG. 1, which shows a schematic flowchart of the method. The method may include:

Step S101: Obtain target attribute information of the target IP core.

Among them, the target attribute information includes multiple types of attribute information, and the multiple types of attribute information are divided according to the degree of influence on the security of the target IP core, that is, each type of attribute information in the multiple types of attribute information has different degrees of influence on the security of the target IP core.

Step S102: Determine the security value with the target attribute information based on the preset correspondence between the attribute information of the IP core and the security value.

Step S103: Using the security value of the target attribute information, the security level of the target IP core is determined based on a preset security classification rule.

The method and device for determining the security level of an IP core provided by the present invention first obtain the target attribute information of the target IP core, and then determine the security value with the target attribute information based on the preset correspondence between the attribute information of the IP core and the security value, Finally, using the security value of the target attribute information, the security level of the target IP core is determined based on a preset security classification rule. The method for determining the security level of the IP core provided by the embodiment of the present invention can evaluate the security of the IP core, and through the security evaluation of the IP core, the security and reliability of the information computing system with the IP core can be improved.

In the above embodiment, the attribute information of the target IP core may include source information, function information and usage scenario information of the target IP core.

Further, the source information of the target IP core may include the security level of the provider of the target IP core, the release time of the target IP core, the acquisition channel of the target IP core, the compliance of the target IP core with the standard, and the delivery item of the target IP core.

Among them, there are two strategies for dividing the security level of the provider of the target IP core, the first is a binary strategy, and the second is a multiple strategy.

Binary strategy, that is, the target IP core provider is divided into trusted (denoted by T) and untrusted (denoted by U). Among them, trusted providers include self-developed, closely cooperated co-developers, providers certified by authoritative third-party certification agencies, and developers from other highly trusted departments. Untrusted providers include public network downloads, general partners, uncertified enterprise developers, uncertified individual developers, sensitive unit providers, and other providers from unknown sources.

Multivariate strategy, that is, according to the degree of cooperation security, the providers are divided into fully trusted (represented by FT), authenticated (represented by AU), uncertain (represented by UN), possibly suspicious (represented by PS) and highly suspicious (represented by HS) express). A fully trusted provider is a co-developer with independent development and close cooperation, and a provider who directly obtains IP cores without being affected by any external factors. Certified providers are providers certified by authoritative third-party certification agencies, and developers from other highly trusted departments. They are affected by certain external factors, but can still successfully obtain certified IP providers (such as business relationships). The inaccurate provider is the source that claims to be certified for the public network download, the general partner (initial cooperation or indirect cooperation, the certification process is not completed or the certification unit is not authoritative). Suspected providers are sources that are downloaded from the public network but do not claim to have any certification, uncertified enterprise developers, and uncertified individual developers. Highly suspected providers are sensitive unit providers (with bad records or reported records in previous contacts, members of the sensitive database list), and other providers from unknown sources.

The release time of the target IP core indicates the time when the target IP core is officially obtained. If it is an IP core developed independently or jointly developed by a close collaborator, the time when the final version is released shall prevail. For IP cores from other sources, the provider should provide the release time of IP cores. IP cores that cannot obtain timestamps should be downgraded to the original security level even if they pass the certification.

The acquisition channel of the target IP core indicates how the IP is obtained. This attribute should match the provider attribute.

The target IP core conforms to the standard, and the reference standard specification includes the international VSIA system, the domestic CSIP system, etc., indicating which version of the standard to follow. If it is not developed according to any standard, it is not in compliance with the standard.

For the deliverables of the target IP core, refer to the requirements of VSIA and CSIP for deliverables, and specify the soft core and hard core respectively (referring to the hard core of the solid core). Divide soft core deliverables into the following categories: Documentation deliverables, System design deliverables, Logic design deliverables, Test deliverables, Functional verification deliverables, Code review deliverables, Timing and power analysis deliverables. Divide hard core deliverables into the following categories: documentation deliverables, circuit design deliverables, model deliverables, functional verification deliverables, test deliverables, and silicon verification deliverables.

Deliverables are classified into the following categories according to their mandatory types: Mandatory (M), Conditional Mandatory (CM), Recommended (Recommended, R), and Conditional Recommended (CR). Among them, the conditional mandatory CM is determined by the specific application environment. The recommended R can improve the design quality and accuracy and reduce the integration time. The conditional recommendation CR should point out the specified conditions. If the conditions are met, it can improve the design quality and accuracy and reduce the integration time. time etc.

Further, the function information of the target IP core includes category information, structure information, function information, performance information and form information. Among them, the category information is used to indicate the type of IP core, whether it is a hard core, a solid core or a soft core, and the structure information is used to indicate the structural characteristics of the IP core. For example, digital IP can be divided into bus or non-bus structure, and the structure information can indicate the bus. Type and function information clearly indicate the functional classification of the IP, and performance information indicates all quantifiable indicators of IP core performance. Most of the formal information is only valid for hard cores, including all results related to process and final silicon verification. Soft cores only need Provides the number of gates of the synthesizable netlist, the number of bits of the input data and address bus, etc.

Further, the usage scenarios of the target IP core include working mode, verification environment and target positioning. Among them, the working mode is used to indicate the mode classification and definition of the target IP core in actual use, such as master-slave, read-write, full work/sleep, and to describe the transition conditions between each mode, which can be described by a state machine diagram. The validation environment is used to indicate which external validation conditions are present, which validation files are matched, or which validation reports already exist, indicating the tool version used. Target positioning is used to clarify the use field of the target IP core. It is classified according to the security level and can be divided into shared IP cores, dedicated IP cores, security-sensitive IP cores, and non-security-sensitive IP cores.

In the above-mentioned embodiment, the above-mentioned attribute information is divided into multiple types according to the degree of influence on the security of the target IP core, and multiple types of attribute information are obtained.

In a possible implementation manner, the multiple attribute information of the target IP core can be divided into three types of attribute information according to the degree of influence on the security of the target IP core, which are the first type of attribute information and the second type of attribute information respectively. and the third type of attribute information. The first type of attribute information is particularly important attribute information, the second type of attribute information is important attribute information, and the third type of attribute information is general attribute information.

Specifically, the first type of attribute information may include the security level of the target IP core provider, the acquisition channel of the target IP core, and the application field of the target IP core, and the second type of attribute information may include the target IP core and standard compliance degree, target IP core The deliverables of the core, the function of the target IP core, the category of the target IP core, the working mode of the target IP core, and other attribute information other than the above attribute information are the third type of attribute information.

After acquiring the target attribute information of the target IP core, that is, the multi-type attribute information, the security value of the target attribute information is determined based on the preset correspondence between the IP core attribute information and the security value.

In this embodiment, the corresponding relationship between the IP core attribute information and the security value can be preset as follows:

(1) Special important attribute information

1. For the attribute information of "IP core provider level":

For the binary strategy, if the security level of the IP core provider is trusted (T), the security value is A; if the security level of the IP core provider is untrusted (U), the security value is E. For multiple strategies, if the security level of the IP core provider is fully trusted (FT), the security value is A; if the security level of the IP core provider is authenticated (AU), the security value is B, if If the security level of the IP core provider is Uncertain (UN), the security value is C; if the security level of the IP core provider is Suspected (PS), the security value is D; if the security level of the IP core provider is High Suspicion (HS), a safe value of E.

2. For the attribute information of "IP core acquisition channel":

If it is self-developed (O), the security value is A, if it is purchased copyright (P), the security value is B, and if it is obtained from an open environment (F), the security value is D.

3. For the attribute information of "target positioning of IP core":

If it is a dedicated IP in a non-security-sensitive area, the security value is B; if it is a shared IP in a non-security-sensitive area, the security value is C; if it is a dedicated IP in a security-sensitive area, the security value is D; if it is a shared IP in a security-sensitive area, The safe value is E.

(2) Important attribute information:

1. For the attribute information of "conformity with the standard":

The safety value is A if the standard is fully complied with (denoted by TM), the safety value is B if the standard is partially met (denoted by PM), and C if the standard is not met (denoted by NM).

2. For the attribute information of "deliverable item":

If all items are complete, the safety value is A, if all M and CM items are complete, the safety value is B, otherwise the safety value is C.

3. For the attribute information of "IP core function":

If the function of the IP core is a physical standard unit, the security value is A, if the function of the IP core is a processor, the security value is B, and if the function of the IP core is fixed function IP and common interface IP, the security value is C , if the function of the IP core is Ethernet/USB/other high-speed interfaces and controllers, the security value is D, and if the function of the IP core is IP such as memory/encryption and decryption, the security value is E.

4. For the attribute information of "IP core category":

If the IP core is a hard core, the security value is A, and if the IP core is a soft core or a solid core, the security value is B.

5. For the attribute information of "working mode of IP core":

If it is divided according to the master-slave mode, the master security value is A, the slave security value is B, if it is divided according to the read-write situation, the read-only security value is A, the write-only security value is B, and the read-write security value is C. , if according to the working/sleep state, there is a sleep state, the safety value is A, and there is no sleep state, and the safety value is B.

(3) General attribute information

For each attribute information in the general attribute information, if there is a certain attribute information, the security value of the attribute information is B; if there is no such attribute information, the security value is C. For example, if the structure of the attribute information of the IP core is If the information is vacant, the security value of the structural information is determined to be C; if the structural information is not vacant, the security value of the structural information is B.

After obtaining the target attribute information, the security value of the target attribute information can be determined based on the corresponding relationship between the above attribute information and the security value, and then the security value of the target attribute information can be used to determine the security level of the target IP core based on the preset security classification rules .

In this embodiment, there are various implementations for determining the security level of the target IP core based on a preset security classification rule by using the security value of the target attribute information.

In a possible implementation manner, the target IP may be determined based on a preset binary classification rule by using the security value of each attribute information in the first type of attribute information (that is, the particularly important attribute information) in the multi-type attribute information nuclear safety level. The binary classification rule is a classification rule for dividing the security level of the target IP core into two levels.

Further, through the security value of each attribute information in the first type of attribute information in the multi-type attribute information, the implementation process of determining the security level of the target IP core based on the preset first security classification rule may include: judging the first type. Whether the security value of at least one attribute information in the attribute information is the first security value, and the security value of at least one attribute information is the second security value, if so, determine the level of the target IP core to indicate that the target core is unsafe The level of the IP core, otherwise, the level of the target IP core is determined to be the level indicating that the target IP core is a secure IP core. Wherein, the first attribute information has at least one attribute information whose security value is the first security value and at least one attribute information whose security value is the second security value, indicating that there is at least one attribute information with the worst security in the first type of attribute information and At least one attribute information with the next worst security.

Exemplarily, the level of the target IP core includes two levels, namely the first level and the second level, where the first level indicates that the target IP core is an unsafe IP core, the second level indicates that the target IP core is a secure IP core, and the first type of attribute information includes: The security level of the target IP core provider, the acquisition channel of the target IP core, and the application field of the target IP core, the first security value is E, and the second security value is D:

Assume that the security value of the security level of the target IP core provider is B, the security value of the acquisition channel of the target IP core is D, and the security value of the application field of the target IP core is E. Since there is an attribute information in the first type of attribute information The security value of the first security value is E, and there is an attribute information security value that is the second security value D, then it can be determined that the security level of the target IP core is Level 1, that is, the target IP core is an unsafe IP core. Assuming that the security value of the security level of the target IP core provider is B, the security value of the acquisition channel of the target IP core is C, and the security value of the application field of the target IP core is A, it can be determined that the security level of the target IP core is 2 level, that is, the target IP core is a secure IP core. Assuming that the security value of the security level of the target IP core provider is B, the security value of the acquisition channel of the target IP core is E, and the application field of the target IP core is C, it can be determined that the security level of the target IP core is Level 2, that is, The target IP core is a secure IP core. That is, when both D and E appear in the security value of the first type of attribute information of the target IP core, the target IP core is an unsafe IP core; otherwise, the target IP core is a secure IP core.

In another possible implementation manner, the security level of the target IP core may be determined based on a preset multi-level classification rule through the security value of each attribute information in the various types of attribute information in the multi-type attribute information. Among them, the multi-level classification rule is used to divide the security level of the target IP core into multiple security levels.

Similarly, taking the multi-type attribute information including the first type of attribute information (especially important attribute information), the second type of attribute information (important attribute information) and the third type of attribute information (general attribute information) as an example, the The specific implementation process of determining the security level of the target IP core based on the security value of each attribute information in the various types of attribute information is based on the preset second security classification rule:

When the security value of at least one attribute information in the first type of attribute information is the first security value, determine that the security level of the target IP core is a level indicating that the target IP core is a highly unsafe IP core;

When the security value of each attribute information in the first type of attribute information is not the first security value, and the security values of at least two attribute information in the first type of attribute information are both the second security value, determine the security value of the target IP core The security level indicates that the target IP core is a less secure IP core level;

When the security value of each attribute information in the first type of attribute information is not the first security value, and the security value of only one attribute information in the first type of attribute information is the second security value, or, when the first type of attribute information When the security value of each attribute information in the information is neither the first security value nor the second security value, and the security value of at least one attribute information in the second type of attribute information is the first security value or the second security value , determine the security level of the target IP core as a level indicating that the target IP core is a possibly unsafe IP core;

When the security value of each attribute information in the first attribute information and the second type of attribute information is neither the first security value nor the second security value, and the first attribute information, the second type of attribute information and the third attribute information When there are no more than two security values of the attribute information, the security level of the target IP core is determined to be a level indicating that the target IP core is a possible security IP core when the security value is the third preset value;

When the security values of each of the first attribute information, the second attribute information, and the third attribute information are neither the first security value nor the second security value nor the third preset value, determine The security level of the target IP core is a level indicating that the target IP core is a secure IP core.

The security value of the attribute information is the first security value indicating that the attribute information is the attribute information with the worst security, the attribute information is the second security value indicating that the attribute information is the attribute information with the second worst security, and the attribute information is the third full value Indicates that the attribute information is the attribute information with the third worst security.

Exemplarily, the level of the target IP core being a secure IP core is divided into five levels, namely level one, level two, level three, level four and level five, where level one indicates that the target IP core is a highly unsafe IP core, level two Indicates that the target IP core is a less secure IP core, the third level indicates that the target IP core is a possibly unsafe IP core, the fourth level indicates that the target IP core is a possibly secure IP core, and the fifth level indicates that the target IP core is a secure IP core, that is, the target IP The higher the security level of the core, the more secure the target IP core is. On the contrary, the lower the security level of the target IP core is, the less secure the target IP core is.

Set the first safety value to E, the second safety value to D, and the third default value to C:

If the security value of at least one attribute information in the first type of attribute information (especially important attribute information) is E, it can be determined that the security level of the target IP core is Level 1, that is, the target IP core is a highly insecure IP core.

If the security value of each attribute information in the first type of attribute information (especially important attribute information) is not E, and the security value of at least two attribute information is D, it can be determined that the security level of the target IP core is Level 2, That is, the target IP core is a less secure IP core.

If the security value of each attribute information in the first type of attribute information (especially important attribute information) is not E, and only one attribute information has a security value of D, it can be determined that the security level of the target IP core is level 3, that is, the target IP core has a security level of three. The IP core is a possibly unsafe IP core.

If the security value of each attribute information in the first type of attribute information (especially important attribute information) and the second type of attribute information (important information) is neither E nor D, and the first type of attribute information (especially important information) attribute information), the second type of attribute information (important attribute information) and the third type of attribute information (general attribute information), the security value of no more than two attribute information is C, then the security level of the target IP core can be determined It is the fourth level, that is, the target IP core is a possibly safe IP core.

If the security value of each attribute information in the first type of attribute information (especially important attribute information), the second type of attribute information (important attribute information) and the third type of attribute information (general attribute information) is not E, not D, If neither is C, the level of the target IP core is level five, that is, the target IP core is a security IP core.

The method for determining the security level of an IP core provided by the embodiment of the present invention is described below by taking three specific IP cores as examples:

1. DW_apb_uart

The attribute information of the IP core DW_apb_uart and its corresponding security value are shown in the following table:

The security values of various types of attribute information of the IP core in the above table are: the security values of particularly important attribute information are A, B, and C, the security values of important attribute information are A, B, B, C, and B, and the security values of general attribute information are: The value is B, B, B, B, B, because the security values of the particularly important attribute information and the second type of attribute information are neither E nor D, and the security values of all attribute information are not more than two. C, it can be determined that the security level of the IP core is level 4, and the IP core is a possible security IP core.

2. 128-AES AMBA slave IP core

The attribute information of the IP core 128-AES AMBA slave and its corresponding security value are shown in the following table:

The security values of various types of attribute information of the IP core in the above table are as follows: the security values of particularly important attribute information are A, A, and E, the security values of important attribute information are B, C, B, E, and B, and the security values of general attribute information are: The values are B, B, B, B, B. Since the security value of one attribute information in the particularly important attribute information is E, it can be determined that the security level of the IP core is level 1, and the IP core is a highly unsafe IP core. .

3. USB2.0IP

The attribute information of USB2.0IP and its corresponding security value are shown in the following table:

The security values of various attribute information of IP cores in the above table are as follows: the security values of particularly important attribute information are D, D, and C respectively; the security values of important attribute information are C, C, B, D, and B, respectively; The security values of the information are C, C, B, C, and C respectively. Because the security values of the particularly important attribute information and each attribute information in the important attribute information are not E, and there are two attribute information in the especially important attribute information. If the security values are all D, it can be determined that the security level of the IP core is Level 2, that is, the IP core is a less secure IP core.

Corresponding to the above method, an embodiment of the present invention also provides an apparatus for determining the security level of an IP core. Please refer to FIG. 2, which shows a schematic structural diagram of the apparatus. The apparatus may include: an attribute information acquisition module 201, a security value A determination module 202 and a security level determination module 203 . in:

The attribute information obtaining module 201 is used for obtaining target attribute information of the target IP core.

Among them, the target attribute information includes multiple types of attribute information, and the multiple types of attribute information are divided according to the degree of influence on the security of the target IP core, and each type of attribute information in the multiple types of attribute information has different degrees of influence on the security of the target IP core.

The security value determination module 202 is configured to determine the security value of the target attribute information acquired by the attribute information acquisition module 201 based on the preset correspondence between the attribute information of the IP core and the security value.

The security level determination module 203 is configured to use the security value of the target attribute information determined by the security value determination module 202 to determine the security level of the target IP core based on a preset security classification rule.

The device for determining the security level of an IP core provided by the present invention first obtains the target attribute information of the target IP core through the attribute information acquisition module, and then determines the corresponding relationship between the attribute information of the IP core and the security value by the security value determination module based on the preset With the security value of the target attribute information, finally, the security level determination module uses the security value of the target attribute information to determine the security level of the target IP core based on a preset security classification rule. The device for determining the security level of the IP core provided by the embodiment of the present invention can evaluate the security of the IP core, and through the security evaluation of the IP core, the security and reliability of the information computing system with the IP core can be improved.

In the apparatus for determining the security level of an IP core provided in the above embodiment, the security level determining module may include: a first determining module or a second determining module.

The first determination module is configured to determine the security level of the target IP core based on a preset binary classification rule by using the security value of each attribute information in the first type of attribute information in the multi-type attribute information. The binary classification rule is used to divide the security level of the target IP core into two security levels.

Among them, the first type of attribute information is the attribute information with the highest degree of influence on the security of the target IP core among the multiple types of attribute information.

The second determination module is configured to determine the security level of the target IP core based on a preset multi-level classification rule by using the security value of each attribute information in the various types of attribute information in the multi-type attribute information. The multi-level classification rule is used to divide the security level of the target IP core into multiple security levels, and the multiple security levels are more than two security levels.

Further, the first determination module includes: a determination submodule and a determination submodule. in:

A judging submodule is used for judging whether there is at least one attribute information whose security value is the first security value, and at least one attribute information whose security value is the second security value in the first type of attribute information.

The determination submodule is used to determine the target when the determination submodule determines that the safety value of at least one attribute information in the first type of attribute information is the first safety value, and the safety value of at least one attribute information is the second safety value. The level of the IP core is the level indicating that the target core is an unsafe IP core, otherwise the level of the target IP core is determined to be the level indicating that the target IP core is a secure IP core. Wherein, the first attribute information has at least one attribute information whose security value is the first security value and at least one attribute information whose security value is the second security value, indicating that there is at least one attribute information with the worst security in the first type of attribute information and At least one attribute information with the next worst security.

In a possible implementation manner, the multiple types of attribute information may include: the first type of attribute information, the second type of attribute information and the third type of attribute information, and the first type of attribute information has a higher impact on the security of the target IP core than The second type of attribute information, the degree of influence of the second type of attribute information on the security of the target IP core is higher than that of the third type of attribute information.

Then the second determination module may include a first determination sub-module, a second determination sub-module, a third determination sub-module and a fourth determination sub-module. in:

The first determining submodule is configured to determine that the security level of the target IP core is the first level when the security value of at least one property information in the first type of property information is the first security value.

The second determination submodule is used when the security values of each attribute information in the first type of attribute information are not the first security value, and the security values of at least two attribute information in the first type of attribute information are the first security value. When the security value is two, the security level of the target IP core is determined to be the second level.

The third determination submodule is used for when the security value of each attribute information in the first type of attribute information is not the first security value, and the security value of only one attribute information in the first type of attribute information is the second security value, Or, when the security value of each attribute information in the first type of attribute information is neither the first security value nor the second security value, and the security value of at least one attribute information in the second type of attribute information is the first security value or When the second security value is used, the security level of the target IP core is determined to be the third level.

The fourth determination submodule is used when the security values of each attribute information in the first type of attribute information and the second type of attribute information are neither the first security value nor the second security value, and the first attribute information, the first When the security value of no more than two attribute information in the second-class attribute information and the third attribute information has the third preset value, determine that the security level of the target IP core is the fourth level;

The fifth determination sub-module is used for when the security values of each attribute information in the first attribute information, the second attribute information and the third attribute information are neither the first security value, nor the second security value, nor the third predetermined value. When setting the value, it is determined that the security level of the target IP core is the fifth level.

Among them, the fifth level indicates that the security of the target IP core is the highest, and the security indicated by the fourth level, the third level, the second level and the first level gradually decreases.

The first type of attribute information may include the acquisition channel of the target IP core, the security level of the provider of the target IP core, and the application field of the target IP core, and the second type of attribute information includes the degree of compliance of the target IP core with the standard, the target IP core The delivery item, the function information of the target IP core and the working mode of the target IP core, the third type of attribute information is the attribute information except the second type of attribute information and the third type of attribute information in the target attribute information of the target IP core.

The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments, and the same and similar parts between the various embodiments can be referred to each other.

In the several embodiments provided in this application, it should be understood that the disclosed method, apparatus and device may be implemented in other manners. For example, the apparatus embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored, or not implemented. On the other hand, the shown or discussed mutual coupling or direct coupling or communication connection may be through some communication interfaces, indirect coupling or communication connection of devices or units, which may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution in this embodiment. In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically alone, or two or more units may be integrated into one unit.

The functions, if implemented in the form of software functional units and sold or used as independent products, may be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present invention can be embodied in the form of a software product in essence, or the part that contributes to the prior art or the part of the technical solution. The computer software product is stored in a storage medium, including Several instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, Read-Only Memory (ROM, Read-Only Memory), Random Access Memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program codes .

The above description of the disclosed embodiments enables any person skilled in the art to make or use the present invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein, but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims (4)

1. A method of determining a security level of an IP core for intellectual property, the method comprising:

acquiring target attribute information of a target intellectual property IP core, wherein the target attribute information comprises multiple types of attribute information, and the influence degrees of various types of attribute information in the multiple types of attribute information on the safety of the target intellectual property IP core are different, wherein the attribute information of the target intellectual property IP core comprises source information, functional information and use scene information of the target intellectual property IP core, and the source information of the target intellectual property IP core comprises the safety level of a provider of the target intellectual property IP core, the release time of the target intellectual property IP core, an acquisition channel of the target intellectual property IP core, the conformity of the target intellectual property IP core and a standard and a delivery item of the target intellectual property IP core;

determining a safety value of the target attribute information based on a preset corresponding relation between the attribute information of the intellectual property IP core and the safety value;

determining the security level of the target intellectual property IP core based on a preset security classification rule by using the security value of the target attribute information, wherein the method comprises the following steps:

determining the security level of the target intellectual property IP core based on a preset binary grading rule according to the security value of each attribute information in the first attribute information in the multiple types of attribute information, wherein the first attribute information presets the attribute information with the highest influence degree on the security of the target intellectual property IP core, and the binary grading rule is a grading rule for dividing the security level of the target intellectual property IP core into two levels;

or, determining the security level of the target intellectual property IP core according to the security value of each attribute information in each type of attribute information in the multi-type attribute information based on a preset multi-element grading rule, wherein the multi-element grading rule is a grading rule for dividing the security level of the target intellectual property IP core into multiple stages, and the multiple stages are more than two stages;

wherein, the determining the security level of the target intellectual property IP core based on the preset binary hierarchical rule by the security value of each attribute information in the first attribute information of the multiple types of attribute information includes:

judging whether at least one attribute information security value is a first security value and at least one attribute information security value is a second security value in the first type of attribute information, wherein the attribute information security value is the attribute information with the worst security indicated by the first security value, and the attribute information is the attribute information with the second security value indicated by the second security value;

if so, determining the level of the target intellectual property IP core as the level indicating that the target intellectual property IP core is an unsafe intellectual property IP core;

if not, determining the level of the target intellectual property IP core as the level indicating that the target intellectual property IP core is a safe intellectual property IP core;

or the like, or, alternatively,

the multi-class attribute information includes: the first type attribute information has a higher influence degree on the security of the target intellectual property IP core than the second type attribute information, and the second type attribute information has a higher influence degree on the security of the target intellectual property IP core than the third type attribute information;

determining the security level of the target intellectual property IP core based on a preset multivariate hierarchical rule by the security value of each of the various types of attribute information in the multiple types of attribute information, including:

when the security value of at least one attribute information in the first type of attribute information is a first security value, determining that the security level of the target intellectual property IP core is a first level;

when the security value of each attribute information in the first type of attribute information is not the first security value, and the security values of at least two attribute information in the first type of attribute information are both the second security values, determining that the security level of the target intellectual property IP core is the second level;

when the security value of each attribute information in the first type of attribute information is not a first security value and only one security value of the attribute information in the first type of attribute information is a second security value, or when the security value of each attribute information in the first type of attribute information is not a first security value nor a second security value and the security value of at least one attribute information in the second type of attribute information is a first security value or a second security value, determining the security level of the target intellectual property IP core to be a third level;

when the security value of each attribute information in the first type of attribute information and the second type of attribute information is neither a first security value nor a second security value, and the security value of no more than two attribute information in the first type of attribute information, the second type of attribute information and the third type of attribute information is a third preset value, determining that the security level of the target intellectual property IP core is a fourth level;

when the security value of each attribute information in the first type attribute information, the second type attribute information and the third type attribute information is neither a first security value nor a second security value nor a third preset value, determining that the security level of the target intellectual property IP core is a fifth level;

the security value of the attribute information is that the first security value indicates that the attribute information is the attribute information with the worst security, the attribute information is that the second security value indicates that the attribute information is the attribute information with the second-level security, the attribute information is that the third security value indicates that the attribute information is the attribute information with the third-level security, the fifth level indicates that the security of the target intellectual property IP core is the highest, and the security indicated by the fourth level, the third level, the second level, and the first level is gradually reduced.

2. The method according to claim 1, wherein the first type of attribute information comprises: the obtaining channel of the target intellectual property IP core, the provider security level of the target intellectual property IP core and the application field of the target intellectual property IP core;

the second type attribute information includes: the conformity of the target intellectual property IP core and the standard, the delivery item of the target intellectual property IP core, the functional information of the target intellectual property IP core and the working mode of the target intellectual property IP core;

the third type attribute information is attribute information except the second type attribute information and the third type attribute information in the target attribute information.

3. An apparatus for determining a security level of an IP core for intellectual property, the apparatus comprising: the security system comprises an attribute information acquisition module, a security value determination module and a security level determination module;

the attribute information acquisition module is used for acquiring target attribute information of a target intellectual property IP core, wherein the target attribute information comprises multiple types of attribute information, and the influence degrees of the multiple types of attribute information in the multiple types of attribute information on the safety of the target intellectual property IP core are different, wherein the attribute information of the target intellectual property IP core comprises source information, function information and use scene information of the target intellectual property IP core, and the source information of the target intellectual property IP core comprises the safety level of a provider of the target intellectual property IP core, the release time of the target intellectual property IP core, an acquisition channel of the target intellectual property IP core, the conformity of the target intellectual property IP core and a standard and the delivery items of the target intellectual property IP core;

the security value determining module is used for determining the security value of the target attribute information acquired by the attribute information acquiring module based on the preset corresponding relation between the attribute information of the intellectual property IP core and the security value;

the security level determining module is configured to determine, based on a preset security classification rule, a security level of the target intellectual property IP core by using the security value of the target attribute information determined by the security value determining module, where the security level determining module includes: a first determination module or a second determination module;

the first determining module is configured to determine, based on a preset binary hierarchical rule, a security level of the target intellectual property IP core according to a security value of each attribute information in first-class attribute information in the multiple classes of attribute information, where the first-class attribute information is attribute information with a highest influence degree on the security of the target intellectual property IP core in the multiple classes of attribute information, and the binary hierarchical rule is a hierarchical rule that divides the security level of the target intellectual property IP core into two levels;

the second determining module is configured to determine the security level of the target intellectual property IP core according to a preset multivariate hierarchical rule based on the security value of each of the various types of attribute information in the multiple types of attribute information, where the multivariate hierarchical rule is a hierarchical rule that divides the security level of the target intellectual property IP core into multiple levels, and the multiple levels are greater than two levels;

wherein the first determining module comprises: a judgment submodule and a determination submodule;

the judging submodule is configured to judge whether a security value of at least one piece of attribute information in the first type of attribute information is a first security value and a security value of at least one piece of attribute information is a second security value, where the first security value of the attribute information indicates that the attribute information is the attribute information with the worst security, and the second security value indicates that the attribute information is the attribute information with the second-order poor security;

the determining sub-module is configured to determine, when the determining sub-module determines that the security value of at least one attribute information in the first type of attribute information is a first security value and the security value of at least one attribute information is a second security value, that the level of the target intellectual property IP core is a level indicating that the target intellectual property IP core is an unsafe intellectual property IP core, and otherwise, that the level of the target intellectual property IP core is a level indicating that the target intellectual property IP core is a safe intellectual property IP core;

or the like, or, alternatively,

the multi-class attribute information includes: the first type attribute information has a higher influence degree on the security of the target intellectual property IP core than the second type attribute information, and the second type attribute information has a higher influence degree on the security of the target intellectual property IP core than the third type attribute information;

the second determining module comprises: a first determination submodule, a second determination submodule, a third determination submodule, a fourth determination submodule and a fifth determination submodule;

the first determining sub-module is configured to determine, when the security value of at least one of the first type of attribute information is a first security value, that the security level of the target intellectual property IP core is a first level;

the second determining sub-module is configured to determine that the security level of the target intellectual property IP core is a second level when the security value of each attribute information in the first type of attribute information is not the first security value and the security values of at least two attribute information in the first type of attribute information are both second security values;

the third determining sub-module is configured to determine the security level of the target intellectual property IP core to be a third level when none of the security values of each of the first type of attribute information is the first security value and only one of the first type of attribute information is the second security value, or when none of the security values of each of the first type of attribute information is the first security value or the second security value and at least one of the second type of attribute information has the first security value or the second security value;

the fourth determining sub-module is configured to determine that the security level of the target intellectual property IP core is a fourth level when the security value of each of the first type attribute information and the second type attribute information is neither the first security value nor the second security value, and the security values of no more than two of the first type attribute information, the second type attribute information, and the third type attribute information are third preset values;

the fifth determining sub-module is configured to determine that the security level of the target intellectual property IP core is a fifth level when none of the security values of each of the first type of attribute information, the second type of attribute information, and the third type of attribute information is the first security value, none of the security values is the second security value, and none of the security values is the third preset value.

4. The apparatus according to claim 3, wherein the first type of attribute information comprises: the obtaining channel of the target intellectual property IP core, the provider security level of the target intellectual property IP core and the application field of the target intellectual property IP core;

the third type attribute information is attribute information except the second type attribute information and the third type attribute information in the target attribute information.

Images