Method and device for analyzing attack on smart card chip

Abstract

The invention provides a method and device for analyzing an attack on a smart card chip. The method comprises the following steps: starting the smart card chip, so that the algorithm of the smart card chip is in an operation state; obtaining the operation position of the algorithm on the smart card chip and a critical time point when the algorithm is operated based on analysis of a side channel; and introducing error into the operation process of the algorithm in the position at the critical time point based on analysis of error injection so as to initiate an error attack, and obtaining and analyzing operation encryption data of the algorithm after the error attack is initiated so as to protect the attack. By means of the manner, in combination with the side channel attack and the error injection attack, the attack is precisely controlled in time and space; the error injection precision can be controlled; the attack analysis cost is reduced; the analysis efficiency and the success rate are increased; and thus, effective protection to the attack can be realized.

Description

technical field [0001] The invention relates to the technical field of smart card chips, in particular to an analysis method and device for attacks on smart card chips. Background technique [0002] With the promotion of mobile payment and the popularity of smart cards (SmartCard) such as bank IC cards and financial social security cards, the market demand for chips built into smart cards is increasing, and various attack technologies against chips are also constantly developing. , so how to protect against various attacks on the chip to ensure that the sensitive information of the chip is not leaked is the primary consideration in the design process of the smart card chip. The best protection against attacks must be based on accurate analysis of attacks. [0003] At present, fault injection attack has become a common attack method against smart card chips due to its low implementation cost and high success rate. Error injection attack is a semi-invasive attack, the attack...

AI Technical Summary

Problems solved by technology

However, this implementation method is very prone to non-algorithm errors (such as data transmission errors), and the analysis of such errors that are not related to the encryption / decryption algorithm will not only greatly increase the analysis cost, reduce the analysis efficiency and success rate, but also due to There is no analysis of the errors in the encryption / decryption algorithm, so there is no effective protection against attacks

Images