Security protection module, security chip, communication device and communication system

Abstract

The embodiment of the invention provides a security protection module, communication equipment and a communication system. Wherein the safety protection module comprises an active signal input end, top metal, an exclusive-OR gate unit, an OR gate, a gate unit, a verification unit and a register; the active signal input end is used for accessing communication data and transmitting the communication data to the top metal, the exclusive-OR gate unit and the gate unit in parallel; the output end of the top-layer metal is connected with the exclusive-OR gate unit; two output ends of the exclusive-OR gate unit are respectively connected with the other input end of the gate unit and the OR gate; the OR gate is used for outputting an attack mark indicating whether the top-layer metal is damaged or not; the gate unit, the check unit and the register are sequentially connected in series, the gate unit is an exclusive-OR gate unit or an OR gate unit, and the register is used for outputting check data output by the check unit; wherein when the attack mark shows that the top-layer metal is not damaged, if the output result of the gate unit is inconsistent with the communication data, the top-layer metal is damaged. Therefore, the communication security is improved.

Description

Technical Field

[0001] The present invention relates to the field of communication technology, and in particular to a security protection module, a security chip, a communication device and a communication system. Background Art

[0002] A security chip is a chip that can independently generate keys and perform encryption and decryption. It has an independent processor and storage unit inside, which can store keys and feature data, and provide encryption and security authentication services for devices. With the development of security chips, some technologies for attacking security chips have also appeared on the market, so the protection technology of security chips has received more and more attention.

[0003] However, some current protection technologies can no longer meet the security requirements of security chips in some specific scenarios, such as active shielding layer technology, also known as top metal protection layer technology. Its working principle is: through the top metal wiring of the security chip, such as Figure 1 As shown, Figure 1 It is a structural block diagram of a security chip in the related technology, which enables the active shielding layer module to form a complex wiring network to shield the normal logic of the chip, and at the same time cooperates with the relevant protection logic to detect the integrity of the top metal layer, so that when the top metal layer is damaged, it can execute protection measures to prevent sensitive information from further attacks.

[0004] See also Figure 2 , Figure 2 yes Figure 1 The structural block diagram of the active shielding layer module in the above protection logic is as follows: compare the output value of the active signal and the output value of the top metal wiring. When the two are equal, it means that the top metal is not damaged. On the contrary, when the two are not equal, it means that the top metal is damaged. At this time, the comparator will trigger the generation of the attack flag, and the security chip will execute the corresponding protection measures. However, for attackers based on reverse engineering, as long as the attack cost of the focused ion beam (FIB) is extremely low, the attack flag can be fixed to the state of "no attack" or "comparison passed", making the top metal lose its protection significance, and the attacker will be able to detect and attack the chip. Therefore, the current chip protection technology is relatively easy to be cracked, resulting in certain security risks in security chips. Summary of the invention

[0005] In view of this, an object of the present invention is to provide a security protection module, a security chip, a communication device and a communication system, so as to at least improve the communication security.

[0006] In order to achieve the above purpose, the technical solution adopted by the embodiment of the present invention is as follows:

[0007] A first aspect of an embodiment of the present invention provides a security protection module, comprising an active signal input terminal, a top metal, an XOR gate unit, an OR gate, a gate unit, a check unit and a register;

[0008] The active signal input terminal is used to access communication data and transmit the communication data in parallel to the top metal, the XOR gate unit and the gate unit;

[0009] The output terminal of the top metal layer is connected to the other input terminal of the XOR gate unit;

[0010] The two output ends of the XOR gate unit are respectively connected to the other input end of the gate unit and the OR gate; the OR gate is used to output an attack mark indicating whether the top metal layer is damaged;

[0011] The gate unit, the check unit and the register are connected in series in sequence, the gate unit is an XOR gate unit or an OR gate unit, and the register is used to output the check data output by the check unit;

[0012] Wherein, when the attack mark indicates that the top metal layer is not damaged, if the output result of the gate unit is inconsistent with the communication data connected to the active signal input terminal, it means that the top metal layer has been damaged.

[0013] The security protection module provided by the embodiment of the present invention forms a first protection circuit through the top metal, XOR gate unit and OR gate, forms a second protection circuit through the XOR gate unit and gate unit, and forms a third protection circuit through the gate unit, check unit and register, so that when the top metal is destroyed due to the attack, the attack flag output by the first protection circuit is set to a state indicating that the top metal is not destroyed. However, since the top metal is destroyed, the output result of the XOR gate unit will inevitably change relative to the state that is not destroyed. The XOR gate unit is part of the second protection circuit, and its output result will affect the result of the gate unit of the second protection circuit, that is: when the top metal is not destroyed, the output result of the XOR gate unit and the output result obtained after the communication data is processed by the gate unit should be consistent with the communication data; when the top metal is destroyed, since the output result of the XOR gate unit changes relative to the state that the top metal is not destroyed, the output result of the XOR gate unit and the output result obtained after the communication data is processed by the gate unit at this time are inconsistent with the communication data. Thus, when the top metal layer is damaged and the attack flag is set to indicate that the top metal layer is not damaged, the communication device equipped with the security protection module can still find out whether it is attacked (i.e., whether the top metal layer is damaged), so as to start the protection measures in time, thereby improving the communication security. On this basis, the verification unit in the third protection circuit calculates the verification data for sending to the receiver based on the output result of the gate unit, so that the receiver can determine whether the sender is attacked based on the received communication data and the verification data, thereby realizing that when the sender is attacked, the receiver can also execute the corresponding protection measures in time to prevent the communication data between the two from being stolen, thereby further improving the communication security.

[0014] In an optional implementation manner, the two output ends of the XOR gate unit output the same result;

[0015] When the top metal layer is not damaged, the values ​​contained in the XOR results output by the XOR gate unit are the same, and the attack flag output by the OR gate is a first set value, which is used to indicate that the top metal layer is not damaged; when the top metal layer is damaged, the values ​​contained in the XOR results output by the XOR gate unit are different, and the attack flag output by the OR gate is a second set value, which is used to indicate that the top metal layer is damaged.

[0016] In an optional embodiment, the security protection module also includes a selector; the selector includes two input terminals, respectively used to access external communication data and internal communication data, or the selector also includes a third input terminal for accessing an internal random code stream; the output terminal of the selector is connected to the active signal input terminal.

[0017] By configuring a selector in the security protection module, the security protection module can not only generate verification data for sending to the recipient based on the internal communication data, but also calculate the legal verification data based on the external communication data sent by the recipient, and then compare the legal verification data with the external verification data sent by the recipient to determine whether the recipient is legal, so that the communication device configured with the security protection module provided by the embodiment of the present invention can identify whether the recipient is impersonated by the attack object, and further improve the communication security. In addition, the selector is also configured with an input end for accessing the internal random code stream, so that the security protection device can use the internal random code stream to perform self-checking when powered on to determine whether it has been attacked, so as to avoid the phenomenon of data reading and communication being stolen by the attacked party when being attacked, and further improve the communication security.

[0018] In an optional implementation, the number of XOR gates included in the XOR gate unit is the same as the number of bits of the communication data, and the number of gates included in the gate unit is the same as the number of bits of the communication data.

[0019] Through the above configuration, the XOR gate unit and the gate unit can process the communication data of the corresponding bit number normally to avoid errors.

[0020] According to a second aspect of an embodiment of the present invention, a security chip is provided, comprising a processor and a security protection module provided in any one of the first aspects above; an active signal output terminal of the processor is connected to an active signal input terminal of the security protection module, and a verification data input terminal of the processor is connected to an output terminal of the register.

[0021] A third aspect of an embodiment of the present invention provides a communication device, comprising the security protection module provided in any one of the first aspects above.

[0022] In an optional implementation, before the communication device sends the target data to the data recipient, the security protection module calculates sender verification data based on the target data, and sends the target data and the sender verification data to the data recipient.

[0023] In an optional embodiment, the security protection module is a security protection module that is not configured with a selector; when the communication device receives external communication data and external verification data sent externally, it calculates the legal verification data of the external communication data through its own configured verification module, and compares the external verification data with the legal verification data for consistency. When the external verification data and the legal data are inconsistent, protection measures are initiated.

[0024] In an optional embodiment, the security protection module is a security protection module configured with a selector; when the communication device receives external communication data and external verification data sent externally, it controls the selector of the security protection module to access the external communication data, and calculates the legal verification data of the external communication data through the security protection module, and compares the external verification data with the legal verification data for consistency. When the external verification data and the legal data are inconsistent, the protection measures are initiated.

[0025] In an optional embodiment, the security protection module is a security protection module including a selector with three input terminals; when the communication device is powered on, the selector of the security protection module is controlled to access an internal random code stream, and the security protection module determines whether the top metal is damaged based on the internal random code stream, and when it is determined that the top metal is damaged, the protection measures are initiated.

[0026] According to a fourth aspect of an embodiment of the present invention, a communication system is provided, comprising a host and a slave connected in communication; at least one of the host and the slave is a communication device provided in any one of the third aspects above.

[0027] Since the security chip, communication device and communication system provided by the present invention include the security protection module provided by any one of the first aspects of the embodiments of the present invention, the communication device and communication system provided by the present invention also have the beneficial technical effects produced by the security protection module provided by any one of the first aspects above, which will not be repeated here.

[0028] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, preferred embodiments are given below and described in detail with reference to the accompanying drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings required for use in the embodiments are briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present invention and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without creative work.

[0030] Figure 1 A structural block diagram of a security chip in the related art is shown;

[0031] Figure 2 Shows Figure 1 The structural block diagram of the active shielding layer module in;

[0032] Figure 3 A structural block diagram of a security protection module provided by an embodiment of the present invention is shown;

[0033] Figure 4 A structural block diagram of another security protection module provided by an embodiment of the present invention is shown.

[0034] Icons: A-communication data, B-output result of top metal, C-output result of XOR gate unit, D-output result of gate unit, E-verification data output by verification unit. DETAILED DESCRIPTION

[0035] The following will be combined with the accompanying drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.

[0036] Therefore, the following detailed description of the embodiments of the present invention provided in the accompanying drawings is not intended to limit the scope of the invention claimed for protection, but merely represents selected embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without making creative work are within the scope of protection of the present invention.

[0037] It should be noted that like reference numerals and letters denote similar items in the following drawings, and thus, once an item is defined in one drawing, further definition and explanation thereof is not required in subsequent drawings.

[0038] In the description of the present invention, it should be noted that if terms such as orientation are mentioned, for example, "center", "up", "down", "left", "right", "vertical", "horizontal", "inside", "outside", etc., the orientation or position relationship indicated by these terms is based on the orientation or position relationship shown in the corresponding drawings, or the orientation or position relationship in which the product of the invention is usually placed when in use. It is only for the convenience of describing the present invention and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention. In addition, the terms "first", "second", "third", etc. are only used to distinguish the description, and cannot be understood as indicating or implying relative importance.

[0039] In addition, terms such as "horizontal" and "vertical" do not mean that the components are required to be absolutely horizontal or suspended, but can be slightly tilted. For example, "horizontal" may simply mean that its direction is more horizontal than "vertical", and does not mean that the structure must be completely horizontal, but can be slightly tilted.

[0040] In the embodiments of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "set", "install", "connect", "connection", etc. should be understood in a broad sense, for example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection, or an electrical connection; it can be directly connected, or connected through an intermediate medium, or it can be the internal communication of two components. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

[0041] In order to solve the technical problem that the top metal of the security chip is easily cracked in the related art, which leads to a great security risk in the security chip, the embodiment of the present invention first provides a security protection module, wherein the top metal, the XOR gate unit and the OR gate form a first protection circuit, the XOR gate unit and the gate unit form a second protection circuit, and the gate unit, the check unit and the register form a third protection circuit, so that when the top metal is destroyed due to the attack, the attack flag output by the first protection circuit is set to a state indicating that the top metal is not destroyed, but because the top metal is destroyed, the output result of the XOR gate unit will inevitably change relative to the state that is not destroyed, and the XOR gate unit is part of the second protection circuit, and its output result will affect the result of the gate unit of the second protection circuit, that is: when the top metal is not destroyed, the output result of the XOR gate unit and the output result obtained after the communication data is processed by the gate unit should be consistent with the communication data; when the top metal is destroyed, since the output result of the XOR gate unit changes relative to the state that the top metal is not destroyed, the output result of the XOR gate unit and the output result obtained after the communication data is processed by the gate unit at this time are inconsistent with the communication data. Thus, when the top metal layer is damaged and the attack flag is set to indicate that the top metal layer is not damaged, the communication device equipped with the security protection module can still find out whether it is attacked (i.e., whether the top metal layer is damaged), so as to start the protection measures in time, thereby improving the communication security. On this basis, the verification unit in the third protection circuit calculates the verification data for sending to the receiver based on the output result of the gate unit, so that the receiver can determine whether the sender is attacked based on the received communication data and the verification data, thereby realizing that when the sender is attacked, the receiver can also execute the corresponding protection measures in time to prevent the communication data between the two from being stolen, thereby further improving the communication security.

[0042] The following, combined Figure 3 For a description of the security protection module provided by the embodiment of the present invention, please refer to Figure 3 , Figure 3It is a structural block diagram of a security protection module provided by an embodiment of the present invention; the security protection module includes an active signal input terminal, a top metal, an XOR gate unit, an OR gate, a gate unit, a verification unit and a register.

[0043] The active signal input terminal is used to access communication data and transmit the communication data in parallel to the top metal layer, the XOR gate unit and the gate unit.

[0044] The output terminal of the top metal layer is connected to the other input terminal of the XOR gate unit.

[0045] The two output ends of the XOR gate unit are respectively connected to the other input end of the gate unit and the OR gate; the OR gate is used to output an attack mark indicating whether the top metal layer is damaged.

[0046] The gate unit, the verification unit and the register are connected in series in sequence, the gate unit is an XOR gate unit or an OR gate unit, and the register is used to output the verification data output by the verification unit.

[0047] Wherein, when the attack mark indicates that the top metal layer is not damaged, if the output result of the gate unit is inconsistent with the communication data connected to the active signal input terminal, it means that the top metal layer has been damaged.

[0048] In addition, the structure and technical principles of the top metal layer can refer to the relevant technology and will not be elaborated here.

[0049] The security protection module provided in the embodiment of the present invention can be used as an independent circuit module product and assembled in a security chip or communication device; it can also be used as a part of a security chip or communication device and assembled in the security chip or communication device before leaving the factory and sold together with the security chip or communication device. The communication device includes but is not limited to: the host and slave in the master-slave communication system, and other devices that need to consider communication security.

[0050] When the security protection module provided by the embodiment of the present invention is applied to a communication device, the working principle of the security protection module is described below by taking the communication device as a slave as an example:

[0051] Please continue reading Figure 3 When the slave needs to send communication data to the host, the communication data is used as the active signal of the security protection module and input to the security protection module through the active signal input terminal of the security protection module. At this time, the signal A at the active signal input terminal is the communication data. Then, after the communication data A is processed by the top metal, the output result of the top metal is B.

[0052] Subsequently, the XOR gate unit will perform XOR operations on each bit of the communication data A and each bit of the output result B, respectively, to obtain the result C formed by XORing the corresponding bits of the communication data A and the corresponding bits of the output result B one by one. At this time, if the top metal is not damaged, for example, the wiring network is complete, then each bit of the result C is 0, on the contrary, if the top metal is damaged, for example, the wiring network is incomplete, then the XOR result of the bit corresponding to the damaged wiring in the top metal is 1, that is, the corresponding bit in the result C is 1.

[0053] Next, the OR gate performs an OR operation on all bits of the result C. From the above description of C, it can be seen that when and only when each bit of C is 0, the attack flag outputs a logic 0, indicating that the top metal is not damaged and the communication data can pass safely. On the contrary, if one of the bits of C is not 0, the attack flag outputs a logic 1, indicating that the top metal is being attacked. At this time, the slave will execute protection measures, such as resetting or issuing a warning to the associated device to remind the associated device of the communication risk, or reminding the relevant user through the associated device to solve the security problem in time. Although the above example uses each bit of C being 0 as an XOR result example in which the top metal is not damaged, in other variant embodiments, the XOR gate unit can be replaced with an XNOR gate unit. At this time, each bit in C is 1 to indicate that the top metal is not damaged. That is, when the top metal is not damaged, the XOR result output by the XOR gate unit contains the same value, and the attack flag output by the OR gate is a first set value, which is used to indicate that the top metal is not damaged; when the top metal is damaged, the XOR result output by the XOR gate unit contains a different value, and the attack flag output by the OR gate is a second set value, which is used to indicate that the top metal is damaged. It can be seen that the slave can determine whether to execute the protection measure according to the value output by the attack flag.

[0054] In addition, in the above example, the attack flag is output as 0 when the top metal is not damaged, and is output as 1 when the top metal is being attacked. It can be seen that the first set value is 0 and the second set value is 1. However, in other variant embodiments, the two can be exchanged, that is, the first set value can be 1 and the second set value can be 0. Based on this, the attack flag is output as 1 when the top metal is not damaged, and is output as 0 when the top metal is being attacked.

[0055] At the same time or subsequently, the gate unit continues to perform an OR operation or an XOR operation on each bit of the communication data A and each bit of the output result C, respectively, to obtain a corresponding result D. Since the gate unit is an OR gate unit or an XOR gate unit, it can be known that when the top metal has not been attacked or the wiring is complete, D=A, and conversely, when the top metal has been attacked or the wiring is incomplete, D≠A. It should be noted that, since the gate unit is an OR gate unit, as long as there is 1 in one of the corresponding bits of A and C, the result after the OR operation of the corresponding bit is 1. For example, A=10, C=10, then the result D obtained after the XOR operation of the corresponding bits in A and C is 10. It can be seen that in this case, even if C indicates that the top metal has been damaged, the result D obtained after the gate unit performs OR processing on A and C is still related to A. It can be seen that the gate unit using the OR gate unit will have certain security vulnerabilities. Therefore, in order to solve this technical problem, in some embodiments, the gate unit is preferentially configured as an XOR gate unit. Continuing with the above example, after using the XOR gate unit as the gate unit, the result D obtained after the XOR operation on the above A and C is 00, which is obviously different from A. It can be seen that it can correctly detect whether the top metal is damaged.

[0056] Next, the value of D will be passed to the verification unit to calculate the verification data to obtain the verification data E. After the verification data E is stored in the register, the register can send the verification data E to the host through the IIC serial communication bus.

[0057] It can be seen that when the top metal is damaged, even if the attacker fixes the attack flag to the pass state, that is, the state indicating that the top metal is not damaged, the verification data calculated by the security protection module will still be affected by the attack. At this time, the security protection module cannot calculate the correct verification data. Therefore, when the host receives the communication data and verification data sent by the slave, it only needs to calculate the verification data based on the communication data and compare the calculated verification data with the verification data sent by the slave to find out whether the slave is attacked, and when it is determined that the slave is attacked, the corresponding protection measures are promptly executed.

[0058] In the above, the communication data may include but is not limited to: instruction data, text data, password data and true random numbers.

[0059] In addition, it can be seen from the above that both the XOR gate unit and the gate unit need to perform relevant gate operations on each bit of the data received at their two input ends respectively. Therefore, in order to ensure the smooth progress and correct execution of the gate operations of the two sets of input data, the number of XOR gates included in the XOR gate unit is the same as the number of bits of the communication data, and the number of gates included in the gate unit is the same as the number of bits of the communication data.

[0060] It can be seen from the above records that although the communication device equipped with the above-mentioned security protection module can detect whether it is attacked, and can let the legitimate communication object discover whether it is attacked, the attacked communication device will still respond to the received communication data and verification data, and use other verification modules configured outside the security protection module to calculate the verification data based on the received communication data. At this time, the calculated verification data is likely to be the same as the received verification data, resulting in the communication device being unable to identify whether the current data sender is legitimate. For example, assuming that the attacked communication device is a slave, the slave is unable to detect whether the current data sender is a legitimate host or an attacker pretending to be a host. In other words, at this time, the attacker only needs to obtain the verification data using the verification data calculation rules of the verification module configured inside the slave to deceive the slave, so that the slave responds to relevant instructions and obtains the private data in the slave. Therefore, in order to solve this technical problem, in some embodiments, the embodiments of the present invention also provide a corresponding solution, that is, please refer to Figure 4 , Figure 4 It is a structural block diagram of another security protection module provided by an embodiment of the present invention. The security protection module provided by the embodiment of the present invention may also include a selector; the selector includes two input terminals, which are respectively used to access external communication data and internal communication data, or the selector also includes a third input terminal for accessing an internal random code stream; the output terminal of the selector is connected to the active signal input terminal.

[0061] Next, we will take the slave device as an example to explain the configuration of Figure 4 The slave of the security protection module shown in the figure realizes the working principle of identifying whether the sender is a legitimate host or an impersonated host:

[0062] Please continue reading Figure 4 When the slave receives the external communication data and external verification data sent by the sender, it first controls the selector of the security protection module to access the external communication data, and uses it as an active signal to input it to the security protection module through the active signal input terminal. At this time, the signal A at the active signal input terminal is the external communication data. Then, after the communication data A is processed by the top metal, the output result of the top metal is B.

[0063] Subsequently, the XOR gate unit will perform XOR operations on each bit of the communication data A and each bit of the output result B, respectively, to obtain the result C. At this time, if the top metal is not damaged, for example, the wiring network is complete, then each bit of the result C is 0, on the contrary, if the top metal is damaged, for example, the wiring network is incomplete, then the XOR result of the bit corresponding to the damaged wiring in the top metal is 1, that is, the corresponding bit in the result C is 1.

[0064] Next, the OR gate performs an OR operation on all bits of the result C. From the above description of C, we can see that if and only if each bit of C is 0, the attack flag outputs logic 0, indicating that the top metal is not damaged and the communication data can pass safely. On the contrary, if one bit of C is not 0, the attack flag outputs logic 1, indicating that the top metal is being attacked, and the slave will execute protection measures.

[0065] At the same time or subsequently, the gate unit continues to perform an OR operation or an XOR operation on each bit of the external communication data A and each bit of the output result C, respectively, to obtain a corresponding result D. Since the gate unit is an OR gate unit or an XOR gate unit, it can be known that when the top metal has not been attacked or the wiring is complete, D=A, and conversely, when the top metal has been attacked or the wiring is incomplete, D≠A. It should be noted that, since the gate unit is an OR gate unit, as long as there is 1 in one of the corresponding bits of A and C, the result after the OR operation of the corresponding bit is 1. For example, A=10, C=10, then the result D obtained after the XOR operation of the corresponding bits in A and C is 10. It can be seen that in this case, even if C indicates that the top metal has been damaged, the result D obtained after the gate unit performs OR processing on A and C is still related to A. It can be seen that the gate unit using the OR gate unit will have certain security vulnerabilities. Therefore, in order to solve this technical problem, in some embodiments, the gate unit is preferentially configured as an XOR gate unit. Continuing with the above example, after using the XOR gate unit as the gate unit, the result D obtained after the XOR operation on the above A and C is 00, which is obviously different from A. It can be seen that it can correctly detect whether the top metal is damaged.

[0066] Next, the value of D will be transmitted to the verification unit to calculate the verification data to obtain the verification data E, which will be output by the verification unit to the processor of the slave.

[0067] Subsequently, the slave will compare the verification data E and the external verification data to see if they are consistent. If they are consistent, it means that the current sender is a legitimate host, and the slave can work normally. If they are inconsistent, it means that the current sender is impersonating the host, and the slave can trigger an error code and not respond to subsequent commands from the sender. This makes it possible for an attacker to destroy the top metal of the slave and not be able to impersonate the host and continue to simulate communication with the slave.

[0068] It can be seen that by configuring a selector in the security protection module, the security protection module can not only generate verification data for sending to the recipient based on the internal communication data, but also calculate the legal verification data based on the external communication data sent by the recipient, and then compare the legal verification data with the external verification data sent by the recipient to determine whether the recipient is legal, so that the communication device configured with the security protection module provided by the embodiment of the present invention can identify whether the recipient is impersonated by the attack object, thereby further improving the communication security.

[0069] In addition, to further improve the security of communication, in an embodiment where the selector is also configured with an input terminal for accessing an internal random code stream, the communication device can generate an internal random code stream when powered on, and control the selector to select the internal random code stream so that the internal random code stream is input into the security protection device to determine whether it has been attacked or whether the top metal wiring is intact. The relevant principles can be found in the above records and will not be repeated here. Thus, the security protection module uses the internal random code stream for self-checking to determine whether it has been attacked, thereby avoiding the phenomenon of data being read and communicated under attack and being stolen by the attacked party, which can further improve the security of communication.

[0070] In any of the above embodiments, the verification unit may be configured with any algorithm for implementing verification calculation, for example, a cyclic redundancy check algorithm (CRC), an addition algorithm, or a subtraction algorithm, but not limited thereto.

[0071] Corresponding to the embodiment of the security protection module, an embodiment of the present invention further provides a security chip, which includes a processor and the security protection module in any of the above embodiments of the present invention; the active signal output end of the processor is connected to the active signal input end of the security protection module, and the verification data input end of the processor is connected to the output end of the register.

[0072] Corresponding to the embodiment of the security protection module, an embodiment of the present invention further provides a communication device, which includes the security protection module 100 in any of the above embodiments of the present invention.

[0073] Based on this, before the communication device sends the target data to the data recipient, the security protection module calculates the sender verification data based on the target data, and sends the target data and the sender verification data to the data recipient.

[0074] Based on any embodiment of the security protection module that does not include a selector, when the communication device receives external communication data and external verification data sent externally, it calculates the legal verification data of the external communication data through its own configured verification module, and compares the external verification data with the legal verification data for consistency. When the external verification data and the legal data are inconsistent, protection measures are initiated.

[0075] Based on any embodiment of the security protection module including a selector, when the communication device receives external communication data and external verification data sent from the outside, it controls the selector of the security protection module to access the external communication data, and calculates the legal verification data of the external communication data through the security protection module, and compares the external verification data with the legal verification data to see if they are consistent. When the external verification data and the legal data are inconsistent, protection measures are initiated.

[0076] Based on any embodiment of the security protection module including a selector with three input terminals, when the communication device is powered on, the selector of the security protection module is controlled to access the internal random code stream, and the security protection module determines whether the top metal is damaged based on the internal random code stream, and when it is determined that the top metal is damaged, the protection measures are initiated.

[0077] Corresponding to the embodiment of the security protection module, an embodiment of the present invention further provides a communication system, which includes a host and a slave connected in communication; at least one of the host and the slave is a communication device in any of the above embodiments of the present invention.

[0078] In some embodiments, in order to improve the communication security between the host and the slave, to more effectively prevent the top metal from being quickly cracked, and to prevent the impersonated communication partner from stealing more important data, the host and the slave are respectively configured with a security protection module in any of the above embodiments.

[0079] In the above, the security protection principles of the security chip, communication device and communication system can refer to the relevant records of the security protection module in any embodiment of the present invention, which will not be repeated here.

[0080] It is worth noting that the technical features or technical solutions in any of the above embodiments of the present invention can be combined or combined with each other as long as there is no contradiction in the combination or combination.

[0081] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A safety protection module, characterized in that: It includes an active signal input terminal, a top metal, an XOR gate unit, an OR gate, a gate unit, a check unit and a register; The active signal input terminal is used to access communication data and transmit the communication data in parallel to the top metal, the XOR gate unit and the gate unit; The output terminal of the top metal layer is connected to the other input terminal of the XOR gate unit; The two output ends of the XOR gate unit are respectively connected to the other input end of the gate unit and the OR gate; the OR gate is used to output an attack mark indicating whether the top metal layer is damaged; The gate unit, the check unit and the register are connected in series in sequence, the gate unit is an XOR gate unit or an OR gate unit, and the register is used to output the check data output by the check unit; Wherein, when the attack mark indicates that the top metal layer is not damaged, if the output result of the gate unit is inconsistent with the communication data connected to the active signal input terminal, it means that the top metal layer has been damaged.

2. The safety protection module according to claim 1, characterized in that: The two output ends of the XOR gate unit output the same result; When the top metal layer is not damaged, the values ​​contained in the XOR results output by the XOR gate unit are the same, and the attack flag output by the OR gate is a first set value, which is used to indicate that the top metal layer is not damaged; when the top metal layer is damaged, the values ​​contained in the XOR results output by the XOR gate unit are different, and the attack flag output by the OR gate is a second set value, which is used to indicate that the top metal layer is damaged.

3. The safety protection module according to claim 1 or 2, characterized in that: It also includes a selector; the selector includes two input terminals, which are respectively used to access external communication data and internal communication data, or the selector also includes a third input terminal, which is used to access an internal random code stream; the output terminal of the selector is connected to the active signal input terminal.

4. The safety protection module according to claim 1, characterized in that: The number of XOR gates included in the XOR gate unit is the same as the number of bits of the communication data, and the number of gates included in the gate unit is the same as the number of bits of the communication data.

5. A security chip, characterized in that: It comprises a processor and the safety protection module according to any one of claims 1 to 4; the active signal output terminal of the processor is connected to the active signal input terminal of the safety protection module, and the verification data input terminal of the processor is connected to the output terminal of the register.

6. A communication device, characterized in that: The invention comprises the safety protection module according to any one of claims 1 to 4.

7. The communication device according to claim 6, characterized in that Before the communication device sends the target data to the data recipient, the security protection module calculates the sender verification data based on the target data, and sends the target data and the sender verification data to the data recipient.

8. The communication device according to claim 6 or 7, characterized in that: The safety protection module is the safety protection module described in claim 1, 2 or 4; When the communication device receives external communication data and external verification data sent from the outside, it calculates the legal verification data of the external communication data through its own configured verification module, and compares the external verification data with the legal verification data to see if they are consistent. When the external verification data and the legal data are inconsistent, protection measures are initiated.

9. The communication device according to claim 6 or 7, characterized in that: The safety protection module is the safety protection module according to claim 4; When the communication device receives external communication data and external verification data sent from the outside, it controls the selector of the security protection module to access the external communication data, and calculates the legal verification data of the external communication data through the security protection module, and compares the external verification data with the legal verification data to see if they are consistent. When the external verification data and the legal data are inconsistent, the protection measures are initiated.

10. The communication device according to claim 9, characterized in that The safety protection module is a safety protection module including a selector of three input terminals; When the communication device is powered on, the selector of the security protection module is controlled to access the internal random code stream, and the security protection module determines whether the top metal is damaged based on the internal random code stream, and starts protection measures when it is determined that the top metal is damaged.

11. A communication system, characterized in that: The invention comprises a master and a slave connected in communication; at least one of the master and the slave is the communication device according to any one of claims 6 to 10.

Images