Guardant Chip

Integrated microchip with a cryptographic module for data encryption, software protection and licensing of smart devices and equipment functionalities.

 

Advantages

 

Functionality management

Restrict the functionality of the supplied device at the software level by using licenses for flexible sales andinventory optimization.

 

Integrated cryptographic module

It features secure non-volatile memory, an encrypted data exchange protocol, and a unique ID.

 

Loadable code

Write custom executable code onto the key to protect valuable algorithms and create unique licensing mechanisms.

 

Cross-platform compatibility

The chip does not require driver installation and supports a wide range of operating systems and platforms.

 

Versatility

It easily integrates into the Guardant ecosystem thanks to its universal set of features.

Convenient form factor

The key is placed directly on the device's board, saving space and enhancing security.

 

Remote management

Manage the device's functionality remotely at the software level Get updates for licenses and secure executable code online or offline.

 

Models

 

Guardant Sign Chip

on request

Integrated circuit supporting Guardant Station

 

Guardant Code Chip

on request

Integrated circuit supporting loadable code

 

Key operation

 

Application security

 

The final security scheme for an application depends on the specific task. However, the basic principle can be outlined as follows:

 

• The application is "bound" to the license using automated protection tools, loadable code, and a special API.
• The license is stored in the memory of Guardant Sign/Code Chip.
• During operation, the secure application continuously exchanges information with the key. If the key contains an invalid or expired license, the software will not function.

Network security

 

The approach to securing and licensing applications over a network is as follows:

 

• A dedicated server or workstation is equipped with an intermediary program — Guardant network license manager.
• A network electronic Guardant Sign/Code Chip is also installed on this device, server or workstation.
• The application is secured either through automated protection tools or via a special API.
• The License Manager and the key will strictly monitor the number of connections based on the licenses programmed by the developer.

 

Data transmitted over the network protocol is protected at the hardware level. This means that it is encrypted using session keys generated between the secure application and the electronic key, with no intermediaries involved.

 

Loadable code (for Guardant Code Chip)

 

To prepare and import the code, developers have to follow these steps:

 

• The developer selects functional blocks of their application that will be loaded into the secure memory of the key and executed directly within the security key. This technology is called "Loadable Code".
• To convert the application code into a loadable format, it must either be ported or initially written as a separate module in C. At this stage, developers can also integrate API calls to utilize the key's built-in functions: invoking cryptographic algorithms, reading/writing data from the Code Chip’s memory cells, and more.
• Using the GCC compiler and Guardant SDK utilities, the loadable code is then built and written into the key's memory.
• Once this is done, the secure application simply needs to execute the code stored in the key at the required time and await the execution result to be returned from the key. This means that the functional blocks transferred into the loadable code are fully executed within the key, elevating protection against hacking and analysis to a fundamentally new level.

 

Characteristics

Licensing models

 

Perpetual	√
Usage-based	√
Module-based	√
Concurrent licensing (tracking copies of the program / workstations / connections)	√
Time-based	√
Custom models	√

 

Security mechanisms

 

Unique key ID	√
Symmetric AES-128 encryption	√
Electronic signature based on elliptic curves (ECC160)	√
Tunnel encryption for exchange protocol traffic	√
Storage and execution of custom code within the key	for Code Chip models

 

Operation mode

 

Drivers	WinUSB, HID, Guardant driver
Operating systems	Code Chip: Any OS Sign Chip: l x86 and x64 versions of Windows XP and above l x86, x86_64, ARM versions of Linux

 

Memory

 

Secured memory for licenses and data	up to 64 KB
Secured memory for loadable code	up to 128 KB
Data retention period (secured memory)	from 10 years

 

Clock

 

Virtual time counter Guardant VTC

for Sign Chip models

 

 

Characteristics

 

Package type	QFN48
Size	5x5 mm
Mounting	SMD
Operating air temperature	-40 °C to +85 °C
Operating air humidity	0% to 90%