GUARDANT.COM uses COOKIE files for easy operation and data storage.
By continuing to use the site, you agree to the use of countless files.
Agree
Guardant Chip
Integrated microchip with a cryptographic module for data encryption, software protection and licensing of smart devices and equipment functionalities.
Advantages
Functionality
management
Restrict the functionality of the supplied device at the software level by using licenses for flexible sales and inventory optimization.
Integrated
cryptographic module
It features secure non-volatile memory, an encrypted data exchange protocol, and a unique ID.
Loadable code
Write custom executable code onto the key to protect valuable algorithms and create unique licensing mechanisms.
Cross-platform
compatibility
The chip does not require driver installation and supports a wide range of operating systems and platforms.
Versatility
It easily integrates into the Guardant ecosystem thanks to its universal set of features.
Convenient
form factor
The key is placed directly on the device's board, saving space and enhancing security.
Remote
management
Manage the device's functionality remotely at the software level. Get updates for licenses and secure executable code online or offline.
Models
Guardant
Sign Chip
on request
Integrated circuit supporting Guardant Station
Guardant
Code Chip
on request
Integrated circuit supporting loadable code
Key operation

Application security

The final security scheme for an application depends on the specific task. However, the basic principle can be outlined as follows:

  • The application is "bound" to the license using automated protection tools, loadable code, and a special API.
  • The license is stored in the memory of Guardant Sign/Code Chip.
  • During operation, the secure application continuously exchanges information with the key. If the key contains an invalid or expired license, the software will not function.
Learn more

Network security

The approach to securing and licensing applications over a network is as follows:

  • A dedicated server or workstation is equipped with an intermediary program — Guardant network license manager.
  • A network electronic Guardant Sign/Code Chip is also installed on this device, server or workstation.
  • The application is secured either through automated protection tools or via a special API.
  • The License Manager and the key will strictly monitor the number of connections based on the licenses programmed by the developer.

Data transmitted over the network protocol is protected at the hardware level. This means that it is encrypted using session keys generated between the secure application and the electronic key, with no intermediaries involved.

Learn more

Loadable code (for Guardant Code Chip)

To prepare and import the code, developers have to follow these steps:

  • The developer selects functional blocks of their application that will be loaded into the secure memory of the key and executed directly within the security key. This technology is called "Loadable Code".
  • To convert the application code into a loadable format, it must either be ported or initially written as a separate module in C. At this stage, developers can also integrate API calls to utilize the key's built-in functions: invoking cryptographic algorithms, reading/writing data from the Code Chip’s memory cells, and more.
  • Using the GCC compiler and Guardant SDK utilities, the loadable code is then built and written into the key's memory.
  • Once this is done, the secure application simply needs to execute the code stored in the key at the required time and await the execution result to be returned from the key. This means that the functional blocks transferred into the loadable code are fully executed within the key, elevating protection against hacking and analysis to a fundamentally new level.
Learn more

Characteristics

Show all

Licensing models
Perpetual
Usage-based
Module-based
Concurrent licensing (tracking copies of the program / workstations / connections)
Time-based
Custom models
Security mechanisms
Unique key ID
Symmetric AES-128 encryption
Electronic signature based on elliptic curves (ECC160)
Tunnel encryption for exchange protocol traffic
Storage and execution of custom code within the key
for Code Chip models
Operation mode
Drivers
WinUSB, HID, Guardant driver
Operating systems
Code Chip: Any OS

Sign Chip:
  • x86 and x64 versions of Windows XP and above
  • x86, x86_64, ARM versions of Linux
Memory
Secured memory for licenses and data
up to 64 KB
Secured memory for loadable code
up to 128 KB
Data retention period (secured memory)
from 10 years
Clock
Virtual time counter Guardant VTC
for Sign Chip models
Characteristics
Package type
QFN48
Size
5x5 mm
Mounting
SMD
Operating air temperature
-40 °C to +85 °C
Operating air humidity
0% to 90%

Show all

We brand our
products for you
Learn more
Have a question or comment?
Contact us
(maximum 2 MB)