Detection device and detection method

Abstract

This detection device is provided with: a measurement unit that measures a physical quantity relating to a device on which the detection device is mounted; and a detection unit that detects the proceeding states of the plurality of stages of the physical attack on the device on the basis of the measurement results of the measurement unit.

Description

Technical Field

[0001] The present disclosure relates to a detection device and a detection method. Background Art

[0002] Patent document 1 (Japanese Patent Publication No. 2018-531446) discloses the following illegal unsealing reaction component. That is, the illegal unsealing reaction component includes an illegal unsealing reaction sensor, the illegal unsealing reaction sensor includes a flexible layer formed with at least one and a circuit line, the flexible layer has a first surface and a second surface on opposite sides, the circuit line forms at least one resistor circuit network, the circuit line is arranged on at least one of the first surface and the second surface of the flexible layer formed with at least one, the flexible layer formed with at least one including the circuit line includes a bent portion, and the circuit line is at least partially located on the bent portion of the flexible layer formed with at least one.

[0003] Prior art literature

[0004] Patent Literature

[0005] Patent Document 1: Japanese Patent Application No. 2018-531446 Summary of the invention

[0006] The detection device of the present disclosure includes: a measuring unit that measures a physical quantity related to a device on which the detection device is mounted; and a detecting unit that detects the progress of multiple stages of a physical attack on the device based on the measurement result of the measuring unit.

[0007] One embodiment of the present disclosure can be implemented not only as a detection device having such a characteristic processing unit, but also as a program for causing a computer to execute the processing steps in the detection device, or as a semiconductor integrated circuit that implements part or all of the detection device, or as a system including the detection device. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] Figure 1 It is a perspective view showing the configuration of a device according to the first embodiment of the present disclosure.

[0009] Figure 2 It is a plan view showing the configuration of a device according to the first embodiment of the present disclosure.

[0010] Figure 3 It is a front view showing the structure of the device according to the first embodiment of the present disclosure.

[0011] Figure 4 It is a longitudinal sectional view showing the structure of the detection device according to the first embodiment of the present disclosure.

[0012] Figure 5 It is a diagram showing the configuration of a detection device according to the first embodiment of the present disclosure.

[0013] Figure 6 This is a diagram showing an example of a proximity sensor of the device according to the first embodiment of the present disclosure.

[0014] Figure 7 It is a diagram showing electrodes of a proximity sensor of the device according to the first embodiment of the present disclosure.

[0015] Figure 8 It is a diagram showing electrodes of a proximity sensor of the device according to the first embodiment of the present disclosure.

[0016] Fig. 9 It is a functional block diagram showing the configuration of the detection device according to the first embodiment of the present disclosure.

[0017] Fig.10 This is a diagram showing an example of the measurement result of the electrostatic capacitance in the detection device according to the first embodiment of the present disclosure.

[0018] Fig.11 This is a diagram showing an example of the measurement results of the resistance value in the detection device according to the first embodiment of the present disclosure.

[0019] Fig.12 This is a diagram showing an example of a flowchart of a detection process in the detection device according to the first embodiment of the present disclosure.

[0020] Fig.13 This is a diagram showing an example of a sequence of detection processing in the detection device according to the first embodiment of the present disclosure.

[0021] Fig.14 It is a longitudinal sectional view showing the structure of a detection device according to a second embodiment of the present disclosure.

[0022] Fig.15 It is a diagram showing the configuration of a detection device according to a second embodiment of the present disclosure.

[0023] Fig.16 It is a functional block diagram showing the configuration of a detection device according to a second embodiment of the present disclosure.

[0024] Fig.17 This is a diagram showing an example of the measurement result of the sound pressure in the detection device according to the second embodiment of the present disclosure.

[0025] Fig.18 It is a diagram showing another example of the measurement result of the sound pressure in the detection device according to the second embodiment of the present disclosure.

[0026] Fig.19This is a diagram showing an example of the measurement results of vibrations in the detection device according to the second embodiment of the present disclosure.

[0027] Fig. 20 This is a diagram showing another example of the vibration measurement result in the detection device according to the second embodiment of the present disclosure. DETAILED DESCRIPTION

[0028] Conventionally, a technology for detecting physical attacks on a device has been proposed. In the technology described in Patent Document 1, it is possible to detect that a device has been illegally opened.

[0029] [Technical Problems to be Solved by the Present Disclosure]

[0030] It is desired to go beyond the technology described in Patent Document 1 and to provide a technology that can further improve the security against physical attacks on a device.

[0031] The present disclosure is made to solve the above-mentioned technical problems, and its purpose is to provide a detection device and a detection method that can further improve the security against physical attacks on a device.

[0032] [Effects of the present disclosure]

[0033] According to the present disclosure, security against physical attacks on a device can be further improved.

[0034] [Description of Embodiments of the Present Disclosure]

[0035] First, the contents of the embodiments of the present disclosure are listed and described.

[0036] (1) A detection device according to an embodiment of the present disclosure includes: a measurement unit that measures a physical quantity related to a device on which the detection device is mounted; and a detection unit that detects the progress of multiple stages of a physical attack on the device based on the measurement result of the measurement unit.

[0037] In this way, by detecting the progress of multiple stages of physical attacks on the device based on the measurement results of physical quantities related to the device, for example, staged countermeasures corresponding to the degree of progress of the attack on the device can be more appropriately implemented. Therefore, the security against physical attacks on the device can be further improved.

[0038] (2) In the above (1), the measuring unit may measure a plurality of physical quantities related to the device.

[0039] According to such a configuration, the progress of a physical attack on a device can be detected more accurately based on a plurality of physical quantities related to the device.

[0040] (3) In the above (2), the measuring unit may measure at least one of an electrostatic capacitance between an electrode provided in the detection device and the object carrying out the attack, and a static magnetic field between an electrode provided in the detection device and the object as a physical quantity related to the device.

[0041] According to such a configuration, the approach of an attacking object can be detected based on the measurement result before the object contacts the device, so that countermeasures against the attack can be implemented before the attack starts.

[0042] (4) In any of the above (1) to (3), the measuring unit may measure at least one of vibration and sound pressure of the device as a physical quantity related to the device.

[0043] According to such a configuration, the progress of the attack can be detected more accurately based on the vibration and sound pressure generated by the physical attack on the device.

[0044] (5) In the above (4), the measuring unit may measure the vibration and the sound pressure of a predetermined frequency component.

[0045] According to such a configuration, for example, more accurate detection can be performed focusing on frequency components inherent to physical attacks on a device.

[0046] (6) In any of the above (1) to (5), the detection unit may detect a proximity state as the progress state, wherein the proximity state is a state in which the object carrying out the attack is not in contact with the device and the distance between the object and the device is less than a specified value.

[0047] According to such a configuration, when a proximity state is detected, a countermeasure against the attack can be implemented before the attack based on contact starts.

[0048] (7) In the above (6), the detection unit may detect at least any one of a contact state, a destruction state, and a destruction completion state as the progress state, wherein the contact state is a state in which the object is in contact with the device, the destruction state is a state in which the destruction behavior of the device is in progress, and the destruction completion state is a state in which the destruction behavior of the device is completed.

[0049] According to such a configuration, it is also possible to more appropriately implement phased countermeasures such as backing up and deleting the data being processed according to the degree of progress of the attack after the object related to the attack contacts the device.

[0050] (8) In any one of the above (1) to (7), the detection unit may store the detection result of the progress status in a storage unit.

[0051] According to such a configuration, the content of the attack to which the device is subjected can be easily verified using the detection result.

[0052] (9) In any of the above (1) to (8), the detection device may also include a processing unit, which performs a prescribed defense process when the attack is detected by the detection unit, or the processing unit may perform different defense processes depending on the stage of the progress state detected by the detection unit.

[0053] According to such a configuration, countermeasures with different contents according to the degree of attack on the device can be quickly implemented during the detection process.

[0054] (10) In the above (9), the processing unit may perform at least one of deleting data, backing up data, notifying an external device other than the device of the detection result, restricting the restart of the device, and stopping part or all of the operation of the device as the defense processing.

[0055] According to such a configuration, for example, illegal acquisition of data can be avoided.

[0056] (11) The detection method involved in the embodiment of the present disclosure is a detection method in a detection device, comprising the following steps: measuring a physical quantity related to a device equipped with the detection device; and detecting the progress status of multiple stages of a physical attack on the device based on the measurement results of the physical quantity related to the device.

[0057] In this way, by detecting the progress of multiple stages of physical attacks on a device based on the measurement results of physical quantities related to the device, for example, staged countermeasures corresponding to the degree of progress of the attack on the device can be more appropriately implemented. Therefore, the security against physical attacks on the device can be further improved.

[0058] Hereinafter, the embodiments of the present disclosure will be described using the accompanying drawings. In addition, the same reference numerals are used for the same or corresponding parts in the accompanying drawings, and repeated descriptions are omitted. In addition, at least a part of the embodiments described below may be arbitrarily combined.

[0059] <First embodiment>

[0060] [Composition and basic movements]

[0061] Figure 1 It is a perspective view showing the configuration of a device according to the first embodiment of the present disclosure. Figure 2 It is a plan view showing the configuration of a device according to the first embodiment of the present disclosure. Figure 3It is a front view showing the structure of the device according to the first embodiment of the present disclosure.

[0062] Reference Figure 1 , Figure 2 as well as Figure 3 The device 1 includes a housing 2 and a connector 3. The device 1 may be a control device used in an industrial control system in a factory, a workshop, a building, etc., or may be an on-board ECU (Electronic Control Unit) mounted on a vehicle. The device 1 is equipped with a detection device 101 described below.

[0063] The shape of the housing 2 is, for example, a rectangular parallelepiped. The connector 3 is a connection portion for electrically connecting the device 1 to another device.

[0064] Figure 4 It is a longitudinal sectional view showing the structure of the detection device according to the first embodiment of the present disclosure. Figure 4 yes Figure 2 The IV-IV line cross-sectional view in FIG. Figure 4 The frame 2 includes a base 2A and a cover 2B. The base 2A is provided with a circuit board 4. The inner side of the cover 2B is provided with a proximity sensor 70. The base 2A and the cover 2B are fixed to each other by screwing, for example.

[0065] Figure 5 It is a diagram showing the configuration of a detection device according to the first embodiment of the present disclosure. Figure 5 It is a plan view of the device 1 in a state where the cover 2B of the housing 2 is removed.

[0066] Reference Figure 4 and Figure 5 , a detection device 101 is mounted inside the frame 2. The detection device 101 includes a measurement IC (Integrated Circuit) 10; CPUs (Central Processing Units) 20 and 30; an input / output circuit 40; a power supply circuit 50; a storage device 60 and a proximity sensor 70. The measurement IC 10 and the proximity sensor 70 are examples of a measurement unit. The CPU 20 is an example of a detection unit. The CPU 30 is an example of a processing unit.

[0067] The measuring IC 10 , the CPU 20 , the CPU 30 , the input / output circuit 40 , the power supply circuit 50 , and the storage device 60 are mounted or formed on the circuit board 4 .

[0068] The power supply circuit 50 supplies power to the measuring IC 10 , the CPU 20 , the CPU 30 , the input / output circuit 40 , and the storage device 60 .

[0069] The CPU 30 performs processing unique to the device 1. More specifically, for example, when the device 1 is an in-vehicle ECU for autonomous driving, the CPU 30 mounted in the detection device 101 of the device 1 performs various processing for autonomous driving.

[0070] Figure 6 This is a diagram showing an example of a proximity sensor of the device according to the first embodiment of the present disclosure. Figure 6 A side view of the proximity sensor 70 is shown. Figure 6 The proximity sensor 70 includes a substrate 71, an electrode 72A formed on a surface 71A on the opposite side of the circuit substrate 4 of the two surfaces of the substrate 71, and an electrode 72B formed on a surface 71B on the circuit substrate 4 side of the two surfaces of the substrate 71. Hereinafter, the electrodes 72A and 72B are also referred to as electrodes 72, respectively.

[0071] Figure 7 It is a diagram showing electrodes of a proximity sensor of the device according to the first embodiment of the present disclosure. Figure 7 FIG. 7 shows a top view of electrode 72A. Figure 7 The electrode 72A includes a conductor 73A and a conductor 73C. The conductor 73A is formed in a sawtooth pattern extending alternately in the positive Y direction and the negative Y direction, and the conductor 73C is formed in a straight line. The conductors 73A and 73C are formed on the surface 71A of the substrate 71 by printing, for example. The first end PA1 of the conductor 73A is connected to the passive element 74A for frequency adjustment, and as shown in FIG. Figure 4 As shown in FIG. 1 , the first end PC1 of the conductor 73C is connected to the measuring IC 10 via the signal line 5 extending from the first side of the substrate 71. The first end PC1 of the conductor 73C is connected to the measuring IC 10 via the passive element 74B for frequency adjustment. Figure 4 As shown, the sensor is connected to the measuring IC 10 via a signal line 5 extending from a second side opposite to the first side.

[0072] Figure 8 It is a diagram showing electrodes of a proximity sensor of the device according to the first embodiment of the present disclosure. Figure 8 FIG. 7 shows a top view of electrode 72B. Figure 8 The electrode 72B includes a conductor 73B, which is formed into a sawtooth pattern extending alternately in the positive X direction and the negative X direction. The conductor 73A is formed on the surface 71B of the substrate 71 by printing, for example. The first end PB1 of the conductor 73B is connected to the second end PA2 of the conductor 73A on the surface 71A via a through hole provided in the substrate 71. The second end PB2 of the conductor 73B is connected to the second end PC2 of the conductor 73C on the surface 71A via a through hole provided in the substrate 71.

[0073] The measurement IC 10 and the proximity sensor 70 measure physical quantities related to the device 1 .

[0074] For example, the measuring IC 10 and the proximity sensor 70 measure various physical quantities related to the device 1. As an example, the measuring IC 10 and the proximity sensor 70 measure the capacitance C between the electrode 72 and the attacking object and the resistance value R of the electrode 72. More specifically, the proximity sensor 70 is a capacitive sensor.

[0075] The CPU 20 performs a detection process of the progress state P of multiple stages for detecting physical attacks on the device 1 based on the measurement results of the measurement IC 10 and the proximity sensor 70. Here, the physical attack may include, for example, an act of destroying the device 1, an act of illegally opening the device 1, and an act of installing a signal line in the device 1 for illegally monitoring the communication in the device 1. The CPU 20 stores the detection result and the detection time of the progress state P in the storage device 60.

[0076] For example, CPU20 detects the approach state P1, the contact state P2, the destructing state P3 and the destructing state P4 as the ongoing state P, the approach state P1 is a state in which the attacking object is not in contact with the device 1 and the distance between the object and the device 1 is less than a specified value, the contact state P2 is a state in which the object is in contact with the device 1, the destructing state P3 is a state in which the destructive behavior of the device 1 is in progress, and the destructing state P4 is a state in which the destructive behavior of the device 1 is completed.

[0077] The CPU 30 performs a predetermined defense process when a physical attack on the device 1 is detected by the CPU 20. The CPU 30 performs different defense processes according to the stage of the progress state P detected by the CPU 20. For example, the CPU 30 performs data deletion, data backup, notification of the detection result to an external device other than the device 1, restriction of restarting of the device 1, and partial or complete stop of the operation of the device 1 as defense processes.

[0078] Hereinafter, the processing in the measuring IC 10 and the CPUs 20 and 30 will be described in detail.

[0079] Fig. 9 1 is a functional block diagram showing the configuration of a detection device according to the first embodiment of the present disclosure. Fig. 9 The detection device 101 includes a measuring unit 11, a detection processing unit 21, an authentication unit 22, a main function unit 31, a deletion unit 32, an output unit 33, a device power supply 51, an emergency power supply 52 and a storage unit 61.

[0080] The measuring unit 11 is implemented by the measuring IC 10 and the proximity sensor 70. The detection processing unit 21 and the authentication unit 22 are implemented by the CPU 20. The main function unit 31, the deletion unit 32 and the output unit 33 are implemented by the CPU 30. The equipment power supply 51 and the emergency power supply 52 are implemented by the power supply circuit 50. The storage unit 61 is included in the storage device 60. The storage unit 61 is a non-volatile memory, for example, an EEPROM (Electrically Erasable Programmable Read-Only Memory).

[0081] The equipment power supply 51 supplies power to each unit in the detection device 101. When the power supply of the equipment power supply 51 is interrupted or stopped, the emergency power supply 52 starts supplying power to each unit instead of the equipment power supply 51.

[0082] The measuring unit 11 measures the capacitance C between the electrode 72 in the proximity sensor 70 and an object outside the device 1 . More specifically, the measuring IC 10 measures the capacitance C at a measurement timing in accordance with a predetermined measurement cycle and outputs measurement information M1 indicating the measurement result of the capacitance C to the detection processing unit 21 .

[0083] The measuring unit 11 also measures the resistance value R of the electrode 72 . More specifically, the measuring IC 10 measures the resistance value R at a measurement timing in accordance with a predetermined measurement cycle, and outputs measurement information M2 indicating the measurement result of the resistance value R to the detection processing unit 21 .

[0084] (Initial inspection process)

[0085] After the device 1 is activated, the detection processing unit 21 performs an initial check process to determine whether an abnormality has occurred in the detection function.

[0086] For example, in the initial inspection process, when the capacitance C indicated by the measurement information M1 received from the measuring unit 11 is a value within a predetermined range, and the resistance value R indicated by the measurement information M2 received from the measuring unit 11 is a value within a predetermined range, the detection processing unit 21 determines that the detection function is not abnormal. When it is determined that the detection function is not abnormal, the detection processing unit 21 outputs a normal determination notification to the main function unit 31 and starts the detection process.

[0087] The main function unit 31 receives the normal determination notification from the detection processing unit 21 and starts various processes.

[0088] On the other hand, in the initial inspection process, when the capacitance C indicated by the measurement information M1 received from the measuring unit 11 is not a value within the prescribed range, or the resistance value R indicated by the measurement information M2 received from the measuring unit 11 is not a value within the prescribed range, the detection processing unit 21 determines that an abnormality has occurred in the detection function. When it is determined that an abnormality has occurred in the detection function, the detection processing unit 21 outputs an authentication request to the authentication unit 22.

[0089] When receiving the authentication request from the detection processing unit 21, the authentication unit 22 requests the user of the device 1 for authentication information and waits for the authentication information from the user. The user provides the authentication information to the authentication unit 22 using, for example, an authentication device. The authentication unit 22 receives the authentication information from the authentication device and performs authentication processing using the received authentication information. When the authentication is successful, the authentication unit 22 outputs an authentication success notification to the detection processing unit 21.

[0090] When receiving the authentication success notification from the authentication section 22 , the detection processing section 21 outputs a restoration permission notification to the main function section 31 .

[0091] The main function unit 31 receives the restoration permission notification from the detection processing unit 21 and checks whether the encrypted data in the defense processing described later is stored in the storage unit 61. If the encrypted data is stored in the storage unit 61, the main function unit 31 obtains the data from the storage unit 61 and outputs the obtained data to the output unit 33. The output unit 33 receives the encrypted data via the storage unit 61. Figure 5 The input / output circuit 40 and the connector 3 shown transmit the data received from the main function unit 31 to an external device not shown.

[0092] After the output unit 33 completes the data transmission, the main function unit 31 performs a process of stopping the operation of each unit in the detection device 101 .

[0093] On the other hand, when the authentication fails, the authentication unit 22 outputs an authentication failure notification to the detection processing unit 21. When receiving the authentication failure notification from the authentication unit 22, the detection processing unit 21 performs a process of stopping the operation of each unit in the detection device 101.

[0094] (Testing state P)

[0095] Fig.10 This is a diagram showing an example of the measurement result of the electrostatic capacitance in the detection device according to the first embodiment of the present disclosure. Fig.10 It means to use Figure 1 This is a graph showing the time-series change in the electrostatic capacitance C when the drill bit moving in the negative Z direction destroys the device 1. Fig.10 In the figure, the horizontal axis represents time, and the vertical axis represents electrostatic capacitance C [F].

[0096] Reference Fig.10, the electrostatic capacitance C measured by the measuring unit 11 changes as the physical attack on the device 1 proceeds. In more detail, when the front end of the drill bit advancing in the negative Z direction approaches the device 1 and the distance between the drill bit and the proximity sensor 70 is less than a specified value, the electrostatic capacitance C increases as the drill bit advances in the negative Z direction. Moreover, when the drill bit penetrates the upper surface of the frame 2 and the drill bit contacts the electrode 72A, causing the conductor 73A to be disconnected, the electrostatic capacitance C cannot be measured, so the electrostatic capacitance C is reduced to zero, for example. In addition, in the case where the device 1 is illegally unsealed, the electrostatic capacitance C also changes as the unsealing behavior proceeds. For example, in the case where the device 1 is unsealed, the signal line 5 is disconnected due to the separation of the base portion 2A and the cover portion 2B of the frame 2, thereby reducing the electrostatic capacitance C to zero.

[0097] Every time the measurement information M1 is received from the measurement unit 11 , the detection processing unit 21 compares the electrostatic capacitance C indicated by the received measurement information M1 with a predetermined threshold value, thereby determining the progress state P of the physical attack on the device 1 .

[0098] For example, when the capacitance C indicated by the measurement information M1 received from the measuring unit 11 at time tas is smaller than the threshold value ThA1 , the detection processing unit 21 determines that the device 1 is in the stable state Ps in which no physical attack has been performed.

[0099] When the electrostatic capacitance C indicated by the measurement information M1 received from the measuring unit 11 at a time ta1 after the time tas becomes greater than the threshold value ThA1, the detection processing unit 21 determines that the state has changed from the stable state Ps to the proximity state P1. Furthermore, the detection processing unit 21 outputs a detection result JA1 indicating the change from the stable state Ps to the proximity state P1 to the main function unit 31. In addition, the detection processing unit 21 stores the detection result JA1 and the detection time in the storage unit 61.

[0100] When the electrostatic capacitance C indicated by the measurement information M1 received from the measuring unit 11 at a time ta2 after the time ta1 becomes greater than the threshold value ThA2, the detection processing unit 21 determines that the state P is changing from the approach state P1 to the contact state P2. Furthermore, the detection processing unit 21 outputs a detection result JA2 indicating the change from the approach state P1 to the contact state P2 to the main function unit 31. In addition, the detection processing unit 21 stores the detection result JA2 and the detection time in the storage unit 61.

[0101] When the increase Mc of the electrostatic capacitance C per unit time indicated by the measurement information M1 received from the measuring unit 11 after the time ta2 is greater than the threshold value ThAM, the detection processing unit 21 determines that the state P is changing from the contact state P2 to the destructive state P3. In addition, the detection processing unit 21 outputs the detection result JA3 indicating the change from the contact state P2 to the destructive state P3 to the main function unit 31. In addition, the detection processing unit 21 stores the detection result JA3 and the detection time in the storage unit 61.

[0102] When it is determined that the progress state P changes from the contact state P2 to the destruction state P3, and the electrostatic capacitance C indicated by the measurement information M1 received from the measuring unit 11 at time ta3 after time ta2 decreases to zero, the detection processing unit 21 determines that the progress state P changes from the destruction state P3 to the destruction completed state P4. Furthermore, the detection processing unit 21 outputs a detection result JA4 indicating the change from the destruction state P3 to the destruction completed state P4 to the main function unit 31. In addition, the detection processing unit 21 stores the detection result JA4 and the detection time in the storage unit 61.

[0103] Fig.11 This is a diagram showing an example of the measurement results of the resistance value in the detection device according to the first embodiment of the present disclosure. Fig.11 It means Fig.10 Similarly, use Figure 1 This is a graph showing the time series change of the resistance value R when the drill bit moves in the negative Z direction to destroy the device 1. Fig.11 In the figure, the horizontal axis represents time, and the vertical axis represents resistance value R [Ω].

[0104] Reference Fig.11 , the resistance value R measured by the measuring unit 11 changes as the physical attack on the device 1 proceeds. In more detail, when the front end of the drill bit moving in the negative Z direction contacts the device 1, the resistance value R changes slightly, and increases as the drill bit moves in the negative Z direction. Moreover, when the drill bit penetrates the upper surface of the frame 2 and contacts the electrode 72A, causing the conductor 73A to be disconnected, the resistance value R becomes infinite. In addition, in the case where the device 1 is illegally unsealed, the resistance value R also changes as the unsealing behavior proceeds. For example, when the device 1 is unsealed, the signal line 5 is disconnected due to the separation of the base portion 2A and the cover portion 2B of the frame 2, and the resistance value R becomes infinite.

[0105] Every time the measurement information M2 is received from the measurement unit 11 , the detection processing unit 21 compares the resistance value R indicated by the received measurement information M2 with a predetermined threshold value, thereby determining the progress status P of the physical attack on the device 1 .

[0106] For example, when the resistance value R indicated by the measurement information M2 received from the measuring unit 11 at time tbs is smaller than the threshold value ThB2 , the detection processing unit 21 determines that the device 1 is in the stable state Ps in which no physical attack has been performed.

[0107] When the resistance value R indicated by the measurement information M2 received from the measuring unit 11 at time tb2 after time tbs becomes greater than the threshold value ThB2, the detection processing unit 21 determines that the state has changed from the stable state Ps in which no physical attack has been made on the device 1 to the contact state P2. Furthermore, the detection processing unit 21 outputs a detection result JB2 indicating the change from the stable state Ps to the contact state P2 to the main function unit 31. In addition, the detection processing unit 21 stores the detection result JB2 and the detection time in the storage unit 61.

[0108] When the amount of increase Mr per unit time of the resistance value R indicated by the measurement information M2 received from the measuring unit 11 after time tb2 is greater than or equal to the threshold value ThBM, the detection processing unit 21 determines that the state P is changing from the contact state P2 to the destruction state P3. Furthermore, the detection processing unit 21 outputs a detection result JB3 indicating the change from the contact state P2 to the destruction state P3 to the main function unit 31. In addition, the detection processing unit 21 stores the detection result JB3 and the detection time in the storage unit 61.

[0109] When it is determined that the progress state P changes from the contact state P2 to the destruction state P3, and the resistance value R indicated by the measurement information M2 received from the measuring unit 11 at time tb3 after time tb2 becomes infinite, the detection processing unit 21 determines that the progress state P changes from the destruction state P3 to the destruction completed state P4. Furthermore, the detection processing unit 21 outputs a detection result JB4 indicating the change from the destruction state P3 to the destruction completed state P4 to the main function unit 31. In addition, the detection processing unit 21 stores the detection result JB4 and the detection time in the storage unit 61.

[0110] (Defense Processing 1)

[0111] When receiving the detection result JA1 from the detection processing unit 21, the main function unit 31 stops part or all of the actions of the device 1. More specifically, when the device 1 is an on-vehicle ECU for autonomous driving, the main function unit 31 in the detection device 101 mounted on the device 1 stops part or all of the various processes for autonomous driving. For example, the main function unit 31 stores information indicating the state of the device 1 when receiving the detection result JA1 from the detection processing unit 21 as the state when it is attacked in the storage unit 61.

[0112] (Defense Processing 2)

[0113] When receiving the detection result JA2 or the detection result JB2 from the detection processing unit 21, the main function unit 31 encrypts part or all of the data processed in the main function unit 31 as a process of backing up part of the data, and stores the encrypted data in the storage unit 61. For example, the main function unit 31 encrypts part of the data processed in the main function unit 31 that is highly important. For example, the main function unit 31 stores information indicating the state of the device 1 when receiving the detection result JA2 or the detection result JB2 from the detection processing unit 21 as the state when it is attacked in the storage unit 61.

[0114] (Defense Processing 3)

[0115] When receiving the detection result JA3 or the detection result JB3 from the detection processing unit 21 , the main function unit 31 encrypts the remaining data processed in the main function unit 31 as a process of backing up all data, and stores the encrypted data in the storage unit 61 .

[0116] Furthermore, when receiving the detection result JA3 from the detection processing unit 21, the main function unit 31 outputs the detection result JA3 received from the detection processing unit 21 to the output unit 33 as a process for notifying the detection result to an external device other than the device 1. Furthermore, when receiving the detection result JB3 from the detection processing unit 21, the main function unit 31 outputs the detection result JB3 received from the detection processing unit 21 to the output unit 33 as a process for notifying the detection result to an external device other than the device 1.

[0117] When the detection result JA3 is received from the main function unit 31, the output unit 33 receives the detection result JA3 via Figure 5 The input / output circuit 40 and the connector 3 shown in the figure send the detection information including the received detection result JA3 to the external device not shown. In addition, when the detection result JB3 is received from the main function unit 31, the output unit 33 receives the detection result JB3 via the output unit 33. Figure 5 The input-output circuit 40 and the connector 3 shown transmit detection information including the received detection result JB3 to the external device.

[0118] Furthermore, when receiving the detection result JA3 or the detection result JB3 from the detection processing unit 21 , the main function unit 31 outputs a startup authentication instruction to the detection processing unit 21 as a process for restricting the restart of the device 1 .

[0119] When receiving the startup authentication instruction from the main function unit 31 , the detection processing unit 21 outputs an authentication request to the authentication unit 22 regardless of the result of the initial check process when the device 1 is next started after the device 1 is stopped.

[0120] In addition, the main function unit 31 may not output the startup authentication instruction to the detection processing unit 21. In this case, when it is determined in the detection processing that the progress state P changes from the contact state P2 to the destruction state P3, the detection processing unit 21 autonomously outputs an authentication request to the authentication unit 22 when the device 1 is next started after the device 1 is stopped.

[0121] For example, the main function unit 31 stores information indicating the state of the device 1 when receiving the detection result JA3 or the detection result JB3 from the detection processing unit 21 as the state when the device 1 was attacked in the storage unit 61 .

[0122] (Defense Processing 4)

[0123] When receiving the detection result JA4 or the detection result JB4 from the detection processing unit 21 , the main function unit 31 outputs a self-deletion request to the deletion unit 32 as a process for deleting data.

[0124] When receiving a self-deletion request from the main function unit 31, the deletion unit 32 performs a deletion process to delete the software program of the main function unit 31 itself and various information held by the main function unit 31. After the deletion process is completed, the deletion unit 32 performs a process to stop the operation of each unit in the detection device 101.

[0125] For example, the main function unit 31 stores information indicating the state of the device 1 when receiving the detection result JA4 or the detection result JB4 from the detection processing unit 21 as the state when the device 1 was attacked in the storage unit 61 .

[0126] In addition, it can also be configured as follows: when the power supply source is switched from the equipment power supply 51 to the emergency power supply 52, the detection processing unit 21 encrypts the data processed in the main function unit 31 and stores it in the storage unit 61 during the period when power is supplied from the emergency power supply 52, and outputs a self-deletion request to the deletion unit 32.

[0127] [Flow of Action]

[0128] Each device in the apparatus according to the embodiment of the present disclosure is provided with a computer including a memory, and a CPU or the like in the computer reads out and executes a program including a part or all of the steps of the following flowchart from the memory. The programs of these multiple devices can be installed from the outside respectively. The programs of these multiple devices are stored in a recording medium or circulated through a communication line respectively.

[0129] Fig.12 This is a diagram showing an example of a flowchart of a detection process in the detection device according to the first embodiment of the present disclosure.

[0130] Reference Fig.12First, the detection device 101 determines whether authentication processing is required after the device 1 is started. More specifically, when a startup authentication instruction is received from the main function unit 31 before stopping, or when it is determined that an abnormality has occurred in the detection function during the initial check process, the detection processing unit 21 in the detection device 101 determines that authentication processing is required. On the other hand, when no startup authentication instruction is received from the main function unit 31 before stopping, and it is determined that no abnormality has occurred in the detection function during the initial check process, the detection processing unit 21 determines that authentication processing is not required (step S11).

[0131] Next, when it is determined that the authentication process is necessary (“No” in step S12 ), the detection device 101 requests the user of the device 1 for authentication information (step S13 ).

[0132] Next, when the authentication is successful ("Yes" in step S14), the detection device 101 restores the data stored in the storage unit 61. More specifically, when receiving the authentication success notification from the authentication unit 22, the detection processing unit 21 outputs a restoration permission notification to the main function unit 31. When the restoration permission notification is received from the detection processing unit 21 and started, and encrypted data is stored in the storage unit 61, the main function unit 31 obtains the encrypted data from the storage unit 61 and sends the obtained data to an external device (not shown) via the input / output circuit 40 and the connector 3 (step S15).

[0133] Next, the detection device 101 stops operating. More specifically, the main function unit 31 performs a process of stopping the operation of each unit in the detection device 101 (step S16).

[0134] On the other hand, when the authentication process fails (No in step S14), the detection device 101 stops the operation without restoring the data (step S16).

[0135] When it is determined that the authentication process is not necessary (YES in step S12 ), the detection device 101 starts the measurement and detection process of the capacitance C and the resistance R (step S17 ).

[0136] Next, the detection device 101 waits for the electrostatic capacitance C to become greater than the threshold value ThA1 ("No" in step S18). When the electrostatic capacitance C becomes greater than the threshold value ThA1 ("Yes" in step S18), it is determined that the state has changed from the stable state Ps in which the device 1 has never been physically attacked to the close state P1, and part of the processing in the main function unit 31 is stopped (step S19).

[0137] Next, the detection device 101 waits for the electrostatic capacitance C to become greater than the threshold value ThA2, or the resistance value R to become greater than the threshold value ThB2 ("No" in step S20), and when the electrostatic capacitance C becomes greater than the threshold value ThA2, or the resistance value R becomes greater than the threshold value ThB2 ("Yes" in step S20), it is determined that the state P is changed from the proximity state P1 to the contact state P2, and a portion of the data processed in the main function unit 31 is backed up. In more detail, as a process of backing up a portion of the data, the main function unit 31 in the detection device 101 encrypts a portion of the data processed in the main function unit 31 and stores it in the storage unit 61 (step S21).

[0138] Next, the detection device 101 waits for the increase Mc of the electrostatic capacitance C per unit time to become above the threshold value ThAM, or the increase Mr of the resistance value R per unit time to become above the threshold value ThBM ("No" in step S22). When the increase Mc becomes above the threshold value ThAM, or the increase Mr becomes above the threshold value ThBM ("Yes" in step S22), it is determined that the state P is changed from the contact state P2 to the destructive state P3, and all data are backed up, the detection results are notified to the external device, and the restart of the device 1 is restricted. In more detail, as a process of backing up all data, the main function unit 31 in the detection device 101 encrypts the remaining part of the data processed in the main function unit 31 and stores it in the storage unit 61. In addition, as a process of notifying the external device of the detection results, the main function unit 31 sends the detection information to the external device not shown in the figure via the output unit 33, the input-output circuit 40 and the connector 3. Furthermore, as a process of restricting the restart of the device 1 , the main function unit 31 outputs a startup authentication instruction to the detection processing unit 21 (step S23 ).

[0139] Next, the detection device 101 waits for the electrostatic capacitance C to decrease to zero or the resistance value R to become infinite ("No" in step S24). When the electrostatic capacitance C decreases to zero or the resistance value R becomes infinite ("Yes" in step S24), it is determined that the state P is changed from the destruction state P3 to the destruction completion state P4, and the data is deleted. In more detail, as a process of deleting data, the main function unit 31 in the detection device 101 outputs a self-deletion request to the deletion unit 32. When the self-deletion request is received from the main function unit 31, the deletion unit 32 performs a deletion process of deleting the software program and various information of the main function unit 31 itself (step S25).

[0140] Next, the detection device 101 stops operating. More specifically, the deletion unit 32 performs a process of stopping the operation of each unit in the detection device 101 (step S16).

[0141] Fig.13This is a diagram showing an example of a sequence of detection processing in the detection device according to the first embodiment of the present disclosure.

[0142] Reference Fig.13 First, the measuring IC 10 measures the capacitance C and the resistance R at the measurement timing according to the prescribed measurement cycle, and outputs measurement information M1 indicating the measurement result of the capacitance C and measurement information M2 indicating the measurement result of the resistance R to the CPU 20 (step S31).

[0143] Next, when the capacitance C indicated by the measurement information M1 becomes equal to or larger than the threshold value ThA1, the CPU 20 determines that the state Ps in which the device 1 is not physically attacked has shifted to the proximity state P1 (step S32).

[0144] Next, CPU 20 outputs detection result JA1 to CPU 30 (step S33 ).

[0145] Next, the CPU 30 receives the detection result JA1 from the CPU 20 and stops a part of the processing in the main function unit 31 (step S34 ).

[0146] Next, for example, when the capacitance C indicated by the measurement information M1 becomes equal to or greater than the threshold value ThA2 , the CPU 20 determines that the state P has transitioned from the proximity state P1 to the contact state P2 (step S35 ).

[0147] Next, CPU 20 outputs detection result JA2 to CPU 30 (step S36 ).

[0148] Next, the CPU 30 receives the detection result JA2 from the CPU 20 and backs up a part of the data processed in the main function unit 31 (step S37 ).

[0149] Next, for example, when the increase Mc of the capacitance C per unit time indicated by the measurement information M1 becomes equal to or larger than the threshold value ThAM, the CPU 20 determines that the progress state P has transitioned from the contact state P2 to the destruction state P3 (step S38 ).

[0150] Next, CPU 20 outputs detection result JA3 to CPU 30 (step S39 ).

[0151] Next, CPU30 receives the detection result JA3 from CPU20 and backs up all data processed in the main function unit 31 (step S40). In addition, CPU30 sends detection information including the detection result JA3 to an external device (not shown) via the input / output circuit 40 and the connector 3 (step S41). In addition, CPU30 outputs a startup authentication instruction to CPU20 (step S42).

[0152] Next, when the electrostatic capacitance C indicated by the measurement information M1 decreases to zero, for example, the CPU 20 determines that the progress state P has shifted from the destruction in progress state P3 to the destruction completed state P4 (step S43 ).

[0153] Next, CPU 20 outputs detection result JA4 to CPU 30 (step S44 ).

[0154] Next, the CPU 30 receives the detection result JA4 from the CPU 20 and deletes the software program and various information of the main function unit 31 itself (step S45 ).

[0155] In addition, in the detection device 101 involved in the first embodiment of the present disclosure, the measurement IC 10 and the proximity sensor 70 are configured to measure multiple physical quantities related to the device 1, but the present invention is not limited to this. The measurement IC 10 and the proximity sensor 70 may also be configured to measure one physical quantity related to the device 1. That is, the measurement IC 10 and the proximity sensor 70 may not measure any one of the electrostatic capacitance C and the resistance value R.

[0156] In addition, in the detection device 101 involved in the first embodiment of the present disclosure, the proximity sensor 70 is arranged on the inner side of the cover 2B, but it is not limited to this. It can also be a configuration in which the proximity sensor 70 is arranged on the base 2A. In addition, the proximity sensor 70 can also be a configuration in which it is arranged on the inner side surface of the frame 2.

[0157] In addition, in the detection device 101 involved in the first embodiment of the present disclosure, the measuring IC 10 and the proximity sensor 70 are configured to measure the electrostatic capacitance C between the electrode 72 and the object and the resistance value R of the electrode 72, but the present invention is not limited thereto. The measuring IC 10 and the proximity sensor 70 may also be configured to measure the static magnetic field between the electrode in the proximity sensor 70 and the attacking object instead of the electrostatic capacitance C. That is, the proximity sensor 70 may also be a Hall sensor or an MR (Magneto Resistive: magnetoresistance) sensor.

[0158] In addition, in the detection device 101 involved in the first embodiment of the present disclosure, the CPU 20 detects the approach state P1, the contact state P2, the destruction state P3, and the destruction completion state P4 as the configuration of the progress state P, but the present invention is not limited thereto. It is also possible to have a configuration in which the CPU 20 does not detect any one or two of the approach state P1, the contact state P2, the destruction state P3, and the destruction completion state P4.

[0159] In the detection device 101 according to the first embodiment of the present disclosure, the CPU 20 stores the detection result of the progress state P in the storage device 60 , but the present invention is not limited thereto. The CPU 20 may not store the detection result of the progress state P in the storage device 60 .

[0160] In the detection device 101 according to the first embodiment of the present disclosure, the CPU 30 performs the defense process, but the present invention is not limited to this. The CPU 30 may not perform the defense process.

[0161] For example, the CPU 30 does not perform defense processing while the authentication processing is valid. More specifically, the main function unit 31 does not perform defense processing while the authentication unit 22 is performing authentication processing, and during the period from when the authentication unit 22 succeeds in authentication to when a prescribed time has passed. When the authentication processing of the authentication unit 22 is interrupted or stopped, or when a prescribed time has passed since the authentication unit 22 succeeded in authentication, the main function unit 31 enables defense processing, and performs defense processing corresponding to the determination result of the progress state P of the detection processing unit 21 as described above. Thus, it is possible to prevent useless defense processing from being executed while the user is performing maintenance management of the device 1.

[0162] In addition, the detection device 101 involved in the first embodiment of the present disclosure is formed to have a structure including a CPU 30, an input-output circuit 40, a power circuit 50, and a storage device 60, but is not limited to this. The detection device 101 may also be a structure that does not have a part or all of the CPU 30, the input-output circuit 40, the power circuit 50, and the storage device 60. The detection device 101 only needs to have a structure including at least a measurement IC 10, a CPU 20, and a proximity sensor 70. In this case, for example, the detection device 101 is mounted as a post-installed device on the device 1 including the CPU 30, the input-output circuit 40, the power circuit 50, and the storage device 60.

[0163] In addition, in the detection device 101 involved in the first embodiment of the present disclosure, the CPU 30 is configured to perform data deletion, data backup, notification of detection results to external devices other than the device 1, and restart restriction of the device 1, but the present invention is not limited to this. The CPU 30 may also be configured to perform defense processing other than data deletion, data backup, notification of detection results to external devices other than the device 1, and restart restriction of the device 1.

[0164] In addition, in the detection device 101 according to the first embodiment of the present disclosure, the main function unit 31 receives the detection result JA2 or the detection result JB2 from the detection processing unit 21, encrypts part or all of the data processed in the main function unit 31, receives the detection result JA3 or the detection result JB3 from the detection processing unit 21, and stores the encrypted data in the storage unit 61, but the present invention is not limited to this. The main function unit 31 may receive the detection result JA3 or the detection result JB3 from the detection processing unit 21, and stores the unencrypted data in the storage unit 61. In this case, the main function unit 31 may perform a predetermined obfuscation process on the data stored in the storage unit 61.

[0165] Next, other embodiments of the present disclosure will be described using the drawings. In addition, the same reference numerals are given to the same or corresponding parts in the drawings, and repeated descriptions are omitted.

[0166] <Second embodiment>

[0167] Compared with the detection device 101 according to the first embodiment, the present embodiment relates to a detection device 102 that measures the vibration and sound pressure of the device 1 instead of the electrostatic capacitance C and the resistance value R. Except for the following contents, it is the same as the detection device 101 according to the first embodiment.

[0168] Fig.14 It is a longitudinal sectional view showing the structure of a detection device according to a second embodiment of the present disclosure. Fig.14 yes Figure 2 Cross-sectional view along line XIV-XIV.

[0169] Fig.15 It is a diagram showing the configuration of a detection device according to a second embodiment of the present disclosure. Fig.15 It is a plan view of the device 1 in a state where the cover 2B of the housing 2 is removed.

[0170] Reference Fig.14 and Fig.15 , a detection device 102 is mounted inside the frame 2. Compared with the detection device 101 according to the first embodiment, the detection device 102 includes a measurement IC 110 instead of the measurement IC 10, a CPU 120 instead of the CPU 20, and a vibration sensor 180 and a microphone 170 instead of the proximity sensor 70. The measurement IC 110, the microphone 170, and the vibration sensor 180 are examples of a measurement unit.

[0171] The microphone 170 and the vibration sensor 180 are provided, for example, inside the cover portion 2B of the housing 2 , and are connected to the measuring IC 10 via signal lines 5 , respectively.

[0172] The measurement IC 110 and the microphone 170 measure the sound pressure S. The measurement IC 110 and the vibration sensor 180 measure the vibration V of the device 1 .

[0173] The CPU 120 performs a detection process of detecting a plurality of stages of progress states P of a physical attack on the device 1 based on the measurement results of the measurement IC 110 , the microphone 170 , and the vibration sensor 180 .

[0174] Fig.16 2 is a functional block diagram showing the configuration of a detection device according to a second embodiment of the present disclosure. Fig.16 Compared with the detection device 101, the detection device 102 includes a measurement unit 111 instead of the measurement unit 11, and a detection processing unit 121 instead of the detection processing unit 21. The measurement unit 111 is implemented by the measurement IC 110, the microphone 170, and the vibration sensor 180. The detection processing unit 121 and the authentication unit 22 are implemented by the CPU 120.

[0175] The measuring unit 111 measures the sound pressure S. For example, the measuring unit 111 measures the sound pressure Sd of a predetermined frequency component. More specifically, the microphone 170 transmits a voltage of a level corresponding to the magnitude of the sound pressure S at the position of the microphone 170 to the measuring IC 110 via the signal line 5 .

[0176] The measuring IC 110 extracts the sound pressure Sd of the frequency component derived from the rotation speed of the drill used to attack the device 1, for example, based on the voltage received from the microphone 170 at the measurement timing according to the prescribed measurement cycle. Moreover, the measuring unit 111 generates measurement information M3 indicating the measurement results of the sound pressure S and the sound pressure Sd, and outputs the generated measurement information M3 to the detection processing unit 121. Here, the rotation speed of the drill is, for example, 1 rpm or more and 3000 rpm or less. When the sound pressure Sd of the frequency component derived from the rotation speed in the range of 1 rpm to 3000 rpm is extracted, the measuring IC 110 can accurately detect the progress state P based on the sound pressure Sd in the CPU 120. In addition, when the sound pressure Sd of the frequency component derived from the rotation speed in the range of 500 rpm to 1500 rpm is extracted, the measuring IC 110 can more accurately detect the progress state P based on the sound pressure Sd in the CPU 120.

[0177] The measuring unit 111 measures the vibration V of the device 1 . For example, the measuring unit 111 measures the vibration Vd of a predetermined frequency component. More specifically, the vibration sensor 180 transmits a voltage of a level corresponding to the magnitude of the vibration V of the device 1 to the measuring IC 110 via the signal line 5 .

[0178] The measuring IC 110 extracts, for example, the vibration Vd of the frequency component derived from the rotation speed of the drill used to attack the device 1 based on the voltage received from the vibration sensor 180 at the measurement timing according to the prescribed measurement cycle. Furthermore, the measuring unit 111 generates measurement information M4 indicating the measurement results of the vibration V and the vibration Vd, and outputs the generated measurement information M4 to the detection processing unit 121. When the vibration Vd of the frequency component derived from the rotation speed in the range of 1 rpm to 3000 rpm is extracted, the measuring IC 110 can accurately detect the progress state P based on the vibration Vd in the CPU 120. When the vibration Vd of the frequency component derived from the rotation speed in the range of 500 rpm to 1500 rpm is extracted, the measuring IC 110 can more accurately detect the progress state P based on the vibration Vd in the CPU 120.

[0179] Furthermore, the measuring IC 110 may be configured to determine the central value of the frequency in the frequency spectrum of the voltage of a predetermined level or more received from the microphone 170 during a predetermined period, generate measurement information M3 indicating the sound pressure Sd of the determined frequency, and output it to the detection processing unit 121. Furthermore, the measuring IC 110 may be configured to determine the central value of the frequency in the frequency spectrum of the voltage of a predetermined level or more received from the vibration sensor 180 during a predetermined period, generate measurement information M4 indicating the vibration Vd of the determined frequency, and output it to the detection processing unit 121.

[0180] (Testing state P)

[0181] Fig.17 This is a diagram showing an example of the measurement result of the sound pressure in the detection device according to the second embodiment of the present disclosure. Fig.17 : is a graph showing the time series change of the sound pressure S when an illegal user opens the device 1. Fig.17 In the figure, the horizontal axis represents time, and the vertical axis represents sound pressure S [dB].

[0182] Reference Fig.17 , the sound pressure S measured by the measuring unit 111 changes as the physical attack on the device 1 proceeds. In more detail, when an illegal user approaches the device 1 and the distance between the illegal user and the proximity sensor 70 is less than a specified value, the sound pressure S increases as the illegal user approaches. Moreover, when the device 1 is unsealed by the illegal user and the illegal operation by the illegal user ends, the sound pressure S decreases to less than the specified value. In addition, when the device 1 is illegally unsealed, the sound pressure S also changes as the unsealing behavior proceeds. For example, when the device 1 is unsealed, the base portion 2A of the frame 2 is separated from the cover portion 2B, causing the signal line 5 to be disconnected, and the sound pressure S decreases to zero.

[0183] Every time the measurement information M3 is received from the measurement unit 111 , the detection processing unit 121 determines the progress status P of the physical attack on the device 1 by comparing the sound pressure S indicated by the received measurement information M3 with a predetermined threshold value.

[0184] For example, when the sound pressure S indicated by the measurement information M3 received from the measuring unit 111 at time tcs is smaller than the threshold value ThC11, the detection processing unit 121 determines that it is the stable state Ps in which no physical attack is being performed on the device 1.

[0185] When the sound pressure S indicated by the measurement information M3 received from the measuring unit 111 at time tc1 after time tcs becomes greater than the threshold value ThC11, the detection processing unit 121 determines that the state has changed from the stable state Ps to the close state P1. The detection processing unit 121 outputs a detection result JC1 indicating a change from the stable state Ps to the close state P1 to the main function unit 31.

[0186] When the sound pressure S indicated by the measurement information M3 received from the measuring unit 111 at time tc2 after time tc1 becomes greater than the threshold value ThC12, the detection processing unit 121 determines that the state P is changing from the approaching state P1 to the contacting state P2. Furthermore, the detection processing unit 121 outputs the detection result JC2 indicating the change from the approaching state P1 to the contacting state P2 to the main function unit 31.

[0187] When the amount of increase Ms of the sound pressure S per unit time indicated by the measurement information M3 received from the measuring unit 111 after time tc2 is greater than the threshold value ThSM, the detection processing unit 121 determines that the state P is changing from the contact state P2 to the destructive state P3. Furthermore, the detection processing unit 121 outputs a detection result JC3 indicating the change from the contact state P2 to the destructive state P3 to the main function unit 31.

[0188] When it is determined that the progress state P changes from the contact state P2 to the destruction state P3, and the sound pressure S indicated by the measurement information M3 received from the measuring unit 111 at time tc3 after time tc2 decreases to or below the threshold value ThC13, the detection processing unit 121 determines that the progress state P changes from the destruction state P3 to the destruction completed state P4. Furthermore, the detection processing unit 121 outputs a detection result JC4 indicating a change from the destruction state P3 to the destruction completed state P4 to the main function unit 31.

[0189] Fig.18 It is a diagram showing another example of the measurement result of the sound pressure in the detection device according to the second embodiment of the present disclosure. Fig.18 It means to use Figure 1 A graph showing the time series change of the sound pressure Sd when the drill bit moving in the negative Z direction performs the action of destroying the device 1. Fig.18In the figure, the horizontal axis represents time, and the vertical axis represents sound pressure Sd [dB].

[0190] Reference Fig.18 , the sound pressure Sd measured by the measuring unit 111 changes as the physical attack on the device 1 proceeds. More specifically, when the front end of the drill bit moving in the negative Z direction approaches the device 1 and the distance between the drill bit and the proximity sensor 70 is less than a specified value, the sound pressure Sd increases as the drill bit moves in the negative Z direction. Furthermore, when the drill bit penetrates the upper surface of the frame 2 and stops, the sound pressure Sd decreases to less than the specified value.

[0191] Every time the measurement information M3 is received from the measurement unit 111 , the detection processing unit 121 determines the progress state P of the physical attack on the device 1 by comparing the sound pressure Sd indicated by the received measurement information M3 with a predetermined threshold value.

[0192] For example, when the sound pressure Sd indicated by the measurement information M3 received from the measuring unit 111 at time tcs is smaller than the threshold value ThC21, the detection processing unit 121 determines that it is the stable state Ps in which no physical attack is being performed on the device 1.

[0193] When the sound pressure Sd indicated by the measurement information M3 received from the measuring unit 111 at time tc1 after time tcs becomes greater than the threshold value ThC21, the detection processing unit 121 determines that the state has changed from the stable state Ps to the close state P1. The detection processing unit 121 outputs a detection result JC1 indicating a change from the stable state Ps to the close state P1 to the main function unit 31.

[0194] When the sound pressure Sd indicated by the measurement information M3 received from the measuring unit 111 at time tc2 after time tc1 becomes greater than the threshold value ThC22, the detection processing unit 121 determines that the state P is changing from the approaching state P1 to the contacting state P2. The detection processing unit 121 outputs a detection result JC2 indicating the change from the approaching state P1 to the contacting state P2 to the main function unit 31.

[0195] When the state where the sound pressure Sd indicated by the measurement information M3 received from the measuring unit 111 after time tc2 is above the threshold value ThC22 for a predetermined time, the detection processing unit 121 determines that the progress state P is transitioned from the contact state P2 to the destructive state P3. Furthermore, the detection processing unit 121 outputs a detection result JC3 indicating the transition from the contact state P2 to the destructive state P3 to the main function unit 31.

[0196] When it is determined that the progress state P changes from the contact state P2 to the destruction state P3, and the sound pressure Sd indicated by the measurement information M3 received from the measuring unit 111 at time tc3 after time tc2 becomes, for example, less than the threshold value ThC21, the detection processing unit 121 determines that the progress state P changes from the destruction state P3 to the destruction completed state P4. Furthermore, the detection processing unit 121 outputs the detection result JC4 indicating the change from the destruction state P3 to the destruction completed state P4 to the main function unit 31.

[0197] Fig.19 This is a diagram showing an example of the measurement results of vibrations in the detection device according to the second embodiment of the present disclosure. Fig.19 : is a graph showing the time series change of the vibration V when an illegal user opens the device 1. Fig.19 In the figure, the horizontal axis represents time, and the vertical axis represents vibration V [dB].

[0198] Reference Fig.19 , the vibration V measured by the measuring unit 111 changes as the physical attack on the device 1 proceeds. In more detail, when an illegal user approaches the device 1 and the distance between the illegal user and the proximity sensor 70 is less than a specified value, the vibration V increases as the illegal user approaches. Moreover, when the device 1 is unsealed by the illegal user and the illegal operation of the illegal user ends, the vibration V decreases to less than the specified value. In addition, when the device 1 is illegally unsealed, the vibration V also changes as the unsealing behavior proceeds. For example, when the device 1 is unsealed, the base portion 2A and the cover portion 2B of the frame 2 are separated, causing the signal line 5 to be disconnected, and the vibration V is reduced to zero.

[0199] Every time the measurement information M4 is received from the measurement unit 111 , the detection processing unit 121 compares the vibration V indicated by the received measurement information M4 with a predetermined threshold value, thereby determining the progress state P of the physical attack on the device 1 .

[0200] For example, when the vibration V indicated by the measurement information M4 received from the measuring unit 111 at time tds is smaller than the threshold value ThD11 , the detection processing unit 121 determines that the device 1 is in the stable state Ps in which no physical attack has been performed.

[0201] When the vibration V indicated by the measurement information M4 received from the measuring unit 111 at time td1 after time tds becomes greater than the threshold value ThD11, the detection processing unit 121 determines that the state has changed from the stable state Ps to the close state P1. The detection processing unit 121 outputs the detection result JD1 indicating the change from the stable state Ps to the close state P1 to the main function unit 31.

[0202] When the vibration V indicated by the measurement information M4 received from the measuring unit 111 at time td2 after time td1 becomes greater than the threshold value ThD12, the detection processing unit 121 determines that the state P has changed from the approaching state P1 to the contacting state P2. The detection processing unit 121 outputs the detection result JD2 indicating the change from the approaching state P1 to the contacting state P2 to the main function unit 31.

[0203] When the vibration V indicated by the measurement information M4 received from the measuring unit 111 after time td2 continues to be above the threshold value ThD12 for a predetermined time, the detection processing unit 121 determines that the progress state P has changed from the contact state P2 to the destructive state P3. Furthermore, the detection processing unit 121 outputs the detection result JD3 indicating the change from the contact state P2 to the destructive state P3 to the main function unit 31.

[0204] When it is determined that the progress state P changes from the contact state P2 to the destruction state P3, and the vibration V indicated by the measurement information M4 received from the measuring unit 111 at time td3 after time td2 decreases to less than the threshold value ThD11, the detection processing unit 121 determines that the progress state P changes from the destruction state P3 to the destruction completed state P4. Furthermore, the detection processing unit 121 outputs the detection result JD4 indicating the change from the destruction state P3 to the destruction completed state P4 to the main function unit 31.

[0205] Fig. 20 This is a diagram showing another example of the vibration measurement result in the detection device according to the second embodiment of the present disclosure. Fig. 20 It means to use Figure 1 A graph showing the time series change of the vibration Vd when the drill bit moves in the negative Z direction to destroy the device 1. Fig. 20 In the figure, the horizontal axis represents time, and the vertical axis represents vibration Vd [dB].

[0206] Reference Fig. 20 The vibration Vd measured by the measuring unit 111 changes as the physical attack on the device 1 progresses. More specifically, when the tip of the drill bit moving in the negative Z direction contacts the device 1, the vibration Vd increases. Furthermore, when the drill bit penetrates the upper surface of the frame 2, the vibration Vd decreases to less than a specified value.

[0207] Every time the measurement information M4 is received from the measurement unit 111 , the detection processing unit 121 compares the vibration Vd indicated by the received measurement information M4 with a predetermined threshold value, thereby determining the progress state P of the physical attack on the device 1 .

[0208] For example, when the vibration Vd indicated by the measurement information M4 received from the measuring unit 111 at time tds is smaller than the threshold ThD22 , the detection processing unit 121 determines that the device 1 is in the stable state Ps in which no physical attack has been performed.

[0209] When the vibration Vd indicated by the measurement information M4 received from the measuring unit 111 at time td2 after time tds becomes greater than the threshold value ThD22, the detection processing unit 121 determines that the state has changed from the stable state Ps to the contact state P2. The detection processing unit 121 outputs the detection result JD2 indicating the change from the stable state Ps to the contact state P2 to the main function unit 31.

[0210] When the vibration Vd indicated by the measurement information M4 received from the measuring unit 111 after time td2 continues to be above the threshold value ThD22 for a predetermined time, the detection processing unit 121 determines that the progress state P is transitioned from the contact state P2 to the destructive state P3. Furthermore, the detection processing unit 121 outputs the detection result JD3 indicating the transition from the contact state P2 to the destructive state P3 to the main function unit 31.

[0211] When it is determined that the progress state P changes from the contact state P2 to the destruction state P3, and the vibration Vd indicated by the measurement information M4 received from the measuring unit 111 at time td3 after time td2 becomes, for example, less than the threshold value ThD22, the detection processing unit 121 determines that the progress state P changes from the destruction state P3 to the destruction completed state P4. Furthermore, the detection processing unit 121 outputs the detection result JD4 indicating the change from the destruction state P3 to the destruction completed state P4 to the main function unit 31.

[0212] In the detection device 102 according to the second embodiment of the present disclosure, the measurement IC 110 and the microphone 170 measure the sound pressure S and the sound pressure Sd, but the present invention is not limited thereto. The measurement IC 110 and the microphone 170 may not measure either the sound pressure S or the sound pressure Sd.

[0213] In the detection device 102 according to the second embodiment of the present disclosure, the measurement IC 110 and the vibration sensor 180 measure the vibration V and the vibration Vd, but the present invention is not limited thereto. The measurement IC 110 and the vibration sensor 180 may measure neither the vibration V nor the vibration Vd.

[0214] In addition, in the detection device 102 according to the second embodiment of the present disclosure, the measurement unit 111 measures the sound pressure S and the vibration V, but the present invention is not limited thereto. The measurement unit 111 may not measure either the sound pressure S or the vibration V. In other words, the detection device 102 may not include either the microphone 170 or the vibration sensor 180.

[0215] In addition, the detection device 102 involved in the second embodiment of the present disclosure is formed to have a structure including a CPU 30, an input-output circuit 40, a power circuit 50, and a storage device 60, but is not limited to this. The detection device 102 may also be a structure that does not have a part or all of the CPU 30, the input-output circuit 40, the power circuit 50, and the storage device 60. The detection device 102 only needs to have a structure that includes at least any one of the measurement IC 110, the CPU 120, the microphone 170, and the vibration sensor 180. In this case, for example, the detection device 102 is mounted as a post-installed device on the device 1 including the CPU 30, the input-output circuit 40, the power circuit 50, and the storage device 60.

[0216] The above embodiments should be considered to be illustrative in all aspects and not restrictive. The scope of the present invention is indicated by the claims rather than the above description, and is intended to include all changes within the meaning and scope equivalent to the claims.

[0217] The above description includes the following additional features.

[0218] [Supplement 1] A detection device comprising:

[0219] a measuring unit that measures a physical quantity related to a device equipped with the detection device; and

[0220] a detection unit that detects the progress of multiple stages of the physical attack on the device based on the measurement result of the measurement unit,

[0221] The detection unit detects, as the attack, an act of destroying the device, an act of illegally opening the device, and an act of installing in the device a signal line for illegally tapping communications in the device.

[0222] Description of Reference Numerals

[0223] 1: device; 2: housing; 2A: base; 2B: cover; 3: connector; 4: circuit board; 5: signal line; 10, 110: measurement IC; 11, 111: measurement unit; 20, 120: CPU; 21, 121: detection processing unit; 22: authentication unit; 30: CPU; 31: main function unit; 32: deletion unit; 33: output unit; 40: input / output circuit; 50: power supply circuit; 51: power supply for device; 52 : Emergency power supply; 60: Storage device; 61: Storage unit; 70: Proximity sensor; 71: Substrate; 71A, 71B: Surface; 72, 72A, 72B: Electrode; 73A, 73B, 73C: Conductor; 74A, 74B: Passive element; 101, 102: Detection device; 170: Microphone; 180: Vibration sensor; PA1, PB1, PC1: First end; PA2, PB2, PC2: Second end.

Claims

1. A detection device, comprising: a measuring unit that measures a physical quantity related to a device equipped with the detection device; and The detection unit detects the progress status of multiple stages of the physical attack on the device based on the measurement result of the measurement unit.

2. The detection device according to claim 1, wherein: The measuring section measures various physical quantities related to the device.

3. The detection device according to claim 1 or 2, wherein: The measuring unit measures at least one of an electrostatic capacitance between an electrode provided in the detection device and the object performing the attack and a static magnetic field between an electrode provided in the detection device and the object as a physical quantity related to the device.

4. The detection device according to any one of claims 1 to 3, wherein: The measuring section measures at least any one of vibration and sound pressure of the device as a physical quantity related to the device.

5. The detection device according to claim 4, wherein: The measuring unit measures the vibration and the sound pressure of a predetermined frequency component.

6. The detection device according to any one of claims 1 to 5, wherein: The detection unit detects a proximity state as the attack state, wherein the object that attacks is not in contact with the device and a distance between the object and the device is smaller than a predetermined value.

7. The detection device according to claim 6, wherein: The detection unit also detects at least one of a contact state, a destruction state, and a destruction completion state as the progress state, wherein the contact state is a state in which the object is in contact with the device, the destruction state is a state in which the destruction behavior of the device is in progress, and the destruction completion state is a state in which the destruction behavior of the device is completed.

8. The detection device according to any one of claims 1 to 7, wherein: The detection unit stores the detection result of the progress status in a storage unit.

9. The detection device according to any one of claims 1 to 8, wherein: The detection device further includes a processing unit, and the processing unit performs a predetermined defense process when the attack is detected by the detection unit. The processing unit performs different defense processes according to the stage of the progress status detected by the detection unit.

10. The detection device according to claim 9, wherein: The processing unit performs at least one of data deletion, data backup, notification of detection results to an external device other than the device, restriction of restart of the device, and partial or complete cessation of the operation of the device as the defense processing.

11. A detection method is a detection method in a detection device, comprising the following steps: measuring a physical quantity associated with a device equipped with the detection device; and The progress status of multiple stages of the physical attack on the device is detected based on the measurement results of the physical quantity related to the device.

Images