Encryption method for generating secret key based on chip power consumption

Abstract

The invention belongs to the technical field of information security, and discloses an encryption method for generating a key based on chip power consumption, and the encryption method of the key comprises the following steps: 1, sampling a power consumption track; step 2, data processing; step 3, feature extraction; step 4, generating a key; step 5, presetting ID comparison judgment; step 6, variance judgment of the initial secret key ID; step 7, judging consistency; step 8, judging inconsistency; and step 9, comparing inconsistency. According to the method, the encryption key is generated by using the random variable, namely the power consumption during chip operation, so that the safety is remarkably improved, and even if an encryption algorithm and a communication protocol are mastered, the encryption algorithm and the communication protocol are difficult to crack; meanwhile, secret key generation and management can be achieved only through a conventional current measuring circuit, cost is remarkably reduced, and the risk that external storage depends on is reduced; in addition, the method also supports customized design and dynamic key updating, shows extremely high flexibility, and ensures the security and reliability of an encryption system.

Description

Technical Field

[0001] The present invention belongs to the technical field of information security, and in particular relates to an encryption method for generating a key based on chip power consumption. Background Art

[0002] As the core technologies of commercial satellites, the security and confidentiality of satellite service software and attitude and orbit control algorithms are of vital importance. However, most current devices lack effective protection mechanisms for algorithms built into the memory, which puts these key technologies at risk of being copied and illegally operated. To address this challenge, the industry has adopted two main technical solutions to generate and verify keys.

[0003] Technical solution 1 uses the unique serial number device ID inside the chip as the verification key, such as the 96-bit unique device identifier inside Xilinx's MPSoC device. This solution combines an external encryption chip to achieve encryption protection of the algorithm code embedded in the processor.

[0004] Disadvantages of Solution 1: This solution has disadvantages such as limited security, high management costs, and increased hardware costs. Attackers can obtain the serial number of the device through means such as emulators, and the algorithm used by the external encryption chip may also be cracked. In addition, each device uses its own serial number as a key, making it difficult for system administrators to manage and maintain these keys.

[0005] The second technical solution uses a physical unclonable method to generate an internal unique serial number device ID, such as using a timer to measure the frequency of an RC oscillator to generate a chip ID. This solution has a higher level of non-copyable security because the physical difference of each device generates a unique key.

[0006] Disadvantages of Technical Solution 2: This solution also has some problems, such as the frequency response of the crystal may be affected by environmental factors (such as temperature, voltage, etc.), resulting in unstable generated keys. This may lead to large deviations when comparing keys, thus affecting the stability of the working state of the genuine product.

[0007] In summary, both technical solutions have their advantages and disadvantages, and need to be selected and optimized according to specific needs and scenarios in practical applications. In order to solve the above problems and protect the key algorithms of the chip, the present invention proposes a protection mechanism combining software and hardware, which can prevent the internal algorithms of the processor memory from being stolen without the manufacturer's authorization. Only after the manufacturer's authorization and the authentication of the software algorithm between the processor and other protection chips, can the software and hardware of the entire device work normally. The encryption method based on chip power consumption to generate keys. Summary of the invention

[0008] The object of the present invention is to provide an encryption method for generating a key based on chip power consumption, so as to solve the problems raised in the above background technology.

[0009] In order to achieve the above object, the present invention provides the following technical solution: an encryption method for generating a key based on chip power consumption, the encryption method steps of the key are:

[0010] Step 1: Power consumption trace sampling: At a certain ambient temperature, the power consumption of the main chip is sampled to obtain sufficient data for key generation;

[0011] Step 2: Data processing: pre-process the sampled raw power consumption data to remove noise and interference; the pre-processing steps include filtering and averaging to ensure that the data fluctuates within a reasonable range;

[0012] Step 3: Feature extraction: extract some feature parameters from the preprocessed data, and use the mean and variance of the data as feature parameters reflecting the data distribution to generate the key.

[0013] Step 4: Generate key: Combine and transform the extracted characteristic parameters using a general encryption algorithm including a hash function to generate an initial key ID;

[0014] Step 5: Preset ID comparison and judgment: Calculate the chip initial key ID through data processing and compare it with the preset ID to see if the two are consistent. If they are consistent, proceed to step 6; if not, proceed to step 9;

[0015] Step 6: initial key ID variance judgment; if the comparison result is consistent, that is, the current program is legal, then proceed to the initial key ID variance judgment; if the initial key ID variance judgment is consistent with the preset value range, execute step 7, otherwise execute step 8;

[0016] Step 7: The judgment is consistent; there is no need to update the preset ID, and the subsequent user program is executed normally;

[0017] Step 8: judge inconsistency; if the initial key ID variance judgement deviates from the preset value range beyond the range, it means that the current device or environment has changed to a certain extent, and the preset key ID needs to be updated to the current initial key ID and stored;

[0018] Step nine, if the comparison is inconsistent, it means that the module is damaged or not original. The timer is started, and the program will interrupt normal operation and issue an alarm, then exit the program.

[0019] Preferably, the higher the sampling frequency in step 1, the more detailed the acquired data will be, but it will also increase the amount of calculation and storage requirements.

[0020] Preferably, the sampling method in step 1 is to directly measure the power consumption of the chip using an external shunt resistor, and calculate the power consumption of the chip by measuring the voltage across the resistor.

[0021] Preferably, the step nine also includes: randomly rewriting 1K to 2K bytes in the control program code so that normal working state cannot be performed and the program enters an infinite loop state.

[0022] Preferably, the encryption algorithm adopted in step 4 includes but is not limited to MD5 or SHA to encrypt the characteristic parameters.

[0023] Preferably, the initial key ID is stored in step eight by hardware encrypted storage, an encrypted storage chip is designed on the board, and the key is stored in an encrypted memory; the key is only decrypted through a specific authorization and authentication mechanism when it is needed; and access rights are set at the same time to restrict access to the key to specific programs or users.

[0024] Preferably, the power consumption collection in step one is mainly divided into two parts: the temperature of the chip and the workload of the chip. The temperature collection relies on the temperature sensor to monitor the ambient temperature in real time, obtains different initial power consumption trajectories in different environments, and adds a certain change threshold, and uses temperature compensation technology to eliminate the impact of temperature on power consumption.

[0025] Preferably, the power consumption fluctuation caused by the change of the workload of the chip is collected by running a specific power consumption verification program after the chip is turned on.

[0026] The beneficial effects of the present invention are as follows:

[0027] 1. The present invention has achieved significant improvements in security. Most traditional chip encryption technologies rely on software algorithms, external key storage or physically unclonable functions, while the present invention takes a unique approach and uses the inherent physical property of the chip's power consumption during operation to generate encryption keys. The power consumption of a chip is affected by multiple factors such as its manufacturing process, operating environment, input data and operating instructions, and exhibits a high degree of randomness and unpredictability. This characteristic makes it difficult to obtain keys generated based on power consumption through algorithm analysis or password cracking, even if the encryption algorithm and communication protocol are mastered by attackers, thereby greatly enhancing security. In addition, by adjusting the chip's operating parameters, such as voltage, clock frequency and input data pattern, the power consumption pattern can be further complicated, making the inference of keys more difficult.

[0028] 2. The present invention performs well in cost control. Existing encryption methods often require additional hardware equipment or complex circuit design, resulting in increased manufacturing costs and complexity. The key generation and management method based on chip power consumption of the present invention can be implemented with only a conventional current measurement circuit, which significantly reduces costs. At the same time, the method also reduces dependence on external storage devices, avoiding the additional costs and risks of physical attacks and data leakage brought by traditional key storage methods. By generating the key directly inside the encryption storage chip and managing it through power consumption characteristics, dual optimization of cost and security is achieved.

[0029] 3. The present invention also shows unique advantages in terms of flexibility. Traditional encryption methods are often difficult to modify and upgrade after the design is completed. Although the software-based method has the ability to modify and upgrade, it requires recompiling and deploying the software, which is cumbersome. In contrast, the key generation and management method based on chip power consumption can be customized according to different application scenarios and security requirements, showing extremely high flexibility. In addition, the method also supports dynamic key updates, can monitor the power consumption changes of the chip in real time, and automatically update the key when an abnormality is found, thereby ensuring that the security and reliability of the encryption system are always maintained at the highest level. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] Figure 1 This is a flow chart of the generation, update and judgment of the key of the present invention. DETAILED DESCRIPTION

[0031] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0032] like Figure 1 As shown, an embodiment of the present invention provides an encryption method for generating a key based on chip power consumption, and the encryption method steps of the key are:

[0033] Step 1: Power consumption trace sampling: At a certain ambient temperature, the power consumption of the main chip is sampled to obtain sufficient data for key generation;

[0034] Step 2: Data processing: pre-process the sampled raw power consumption data to remove noise and interference; the pre-processing steps include filtering and averaging to ensure that the data fluctuates within a reasonable range;

[0035] Limiting the data value range to a certain interval facilitates subsequent processing and analysis.

[0036] Step 3: Feature extraction: extract some feature parameters from the preprocessed data, and use the mean and variance of the data as feature parameters reflecting the data distribution to generate the key.

[0037] Step 4: Generate key: Combine and transform the extracted characteristic parameters using a general encryption algorithm including a hash function to generate an initial key ID;

[0038] The specific operation is to input the characteristic parameters into the hash function to generate a fixed-length hash value as the initial key. Further, the characteristic parameters are encrypted using an encryption algorithm (including but not limited to MD5 or SHA, etc.) to generate an encrypted key ID.

[0039] Step 5: Preset ID comparison and judgment: Calculate the chip initial key ID through data processing and compare it with the preset ID to see if the two are consistent. If they are consistent, proceed to step 6; if not, proceed to step 9;

[0040] Step 6: initial key ID variance judgment; if the comparison result is consistent, that is, the current program is legal, then proceed to the initial key ID variance judgment; if the initial key ID variance judgment is consistent with the preset value range, execute step 7, otherwise execute step 8;

[0041] Step 7: The judgment is consistent; there is no need to update the preset ID, and the subsequent user program is executed normally;

[0042] Step 8: judge inconsistency; if the initial key ID variance judgement deviates from the preset value range beyond the range, it means that the current device or environment has changed to a certain extent, and the preset key ID needs to be updated to the current initial key ID and stored;

[0043] Step nine, if the comparison is inconsistent, it means that the module is damaged or not original. The timer is started, and the program will interrupt normal operation and issue an alarm, then exit the program.

[0044] Among them, the higher the sampling frequency in step one, the more detailed the data obtained, but it will also increase the amount of calculation and storage requirements.

[0045] The sampling method in step 1 is to directly measure the power consumption of the chip using an external shunt resistor, and calculate the power consumption of the chip by measuring the voltage across the resistor.

[0046] The sampling frequency and time interval can be adjusted according to specific application requirements.

[0047] Wherein, step nine also includes: randomly rewriting 1K to 2K bytes in the control program code, so that the normal working state cannot be carried out and the program enters an infinite loop state.

[0048] The encryption algorithm used in step 4 includes but is not limited to MD5 or SHA to encrypt the characteristic parameters.

[0049] Among them, the way to store the initial key ID in step eight is hardware encrypted storage. An encrypted storage chip is designed on the board to store the key in an encrypted memory. Only when the key is needed, it is decrypted through a specific authorization and authentication mechanism. At the same time, access rights are set to limit access to the key to specific programs or users.

[0050] Key update is an important part of ensuring the normal operation of encryption programs. As the device ages, the power consumption of the chip will also shift as the hardware age. When the key variance collected when the system is powered on exceeds the initial threshold, the program will not run normally. At this time, key updates can be triggered according to a certain time interval or specific event.

[0051] For example, after the system determines that the key is legal and started normally, it compares the variance of the currently calculated real-time key and records it. After a period of time, if it is found that the variance continues to expand and has a tendency to deviate from the set key ID, it is necessary to start the key update program, use the most recent 20 real-time keys as calculation input, and re-execute the key ID generation step to generate a new key ID. After the key is updated, the system will automatically restart to confirm that the new key is valid.

[0052] The updated key will still be stored in the external encrypted storage, while the old key will be destroyed.

[0053] Among them, the power consumption collection in step one is mainly divided into two parts: the temperature of the chip and the workload of the chip. Temperature collection relies on the temperature sensor to monitor the ambient temperature in real time, obtain different initial power consumption trajectories in different environments, and increase a certain change threshold. Temperature compensation technology is used to eliminate the impact of temperature on power consumption.

[0054] Among them, the power consumption fluctuation caused by the change of the chip's workload is collected by running a specific power consumption verification program after powering on.

[0055] The overall method for generating and updating keys based on chip power consumption includes the above-mentioned links such as utilizing chip power consumption characteristics, stabilizing power consumption measures, key generation process, storage and update mechanism, and the collaborative working mode between them.

[0056] Generates key protection processor-embedded algorithms based on chip power consumption, a software flow chart that covers the logic and steps of a series of operations from power consumption sampling to key generation, storage, and update at the software level.

[0057] By protecting these key technical points and processes, the unique encryption method of the present invention can be realized and distinguished from the existing technology in terms of technical innovation, security, cost advantage and flexibility.

[0058] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0059] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. An encryption method for generating a key based on chip power consumption, characterized in that: The encryption method steps for this key are: Step 1: power consumption trajectory sampling; At a certain ambient temperature, the power consumption of the main chip is sampled to obtain sufficient data for key generation; Step 2: data processing; Pre-process the sampled raw power consumption data to remove noise and interference; The preprocessing steps include filtering and de-averaging to ensure that the data fluctuates within a reasonable range; Step 3: feature extraction; Extract some characteristic parameters from the preprocessed data, and calculate the mean and variance of the data as characteristic parameters reflecting the data distribution; used for key generation; Step 4: Generate key: Combine and transform the extracted characteristic parameters using a general encryption algorithm including a hash function to generate an initial key ID; Step 5: Preset ID comparison and judgment: Calculate the chip initial key ID through data processing and compare it with the preset ID to see if the two are consistent. If they are consistent, proceed to step 6; if not, proceed to step 9; Step 6: initial key ID variance judgment; if the comparison result is consistent, that is, the current program is legal, then proceed to the initial key ID variance judgment; if the initial key ID variance judgment is consistent with the preset value range, execute step 7, otherwise execute step 8; Step 7: judge the agreement; There is no need to update the preset ID, and subsequent user programs can be executed normally; Step 8: judge inconsistency; if the initial key ID variance judgement deviates from the preset value range beyond the range, it means that the current device or environment has changed to a certain extent, and the preset key ID needs to be updated to the current initial key ID and stored; Step nine, compare inconsistencies; This indicates that the module is damaged or not produced by the original manufacturer. The timer is started, and the program will interrupt normal operation, issue an alarm, and exit the program.

2. The encryption method for generating a key based on chip power consumption according to claim 1, characterized in that: The higher the sampling frequency in step 1, the more detailed the data obtained will be, but it will also increase the amount of calculation and storage requirements.

3. The encryption method for generating a key based on chip power consumption according to claim 1, characterized in that: The sampling method in the step 1 is to directly measure the power consumption of the chip using an external shunt resistor, and calculate the power consumption of the chip by measuring the voltage across the resistor.

4. The encryption method for generating a key based on chip power consumption according to claim 1, characterized in that: The step nine also includes: randomly rewriting 1K to 2K bytes in the control program code so that the normal working state cannot be carried out and the program enters an infinite loop state.

5. The encryption method for generating a key based on chip power consumption according to claim 1, characterized in that: The encryption algorithm used in step 4 includes but is not limited to MD5 or SHA to encrypt the characteristic parameters.

6. The encryption method for generating a key based on chip power consumption according to claim 1, characterized in that: The initial key ID is stored in step eight by hardware encryption storage, and an encryption storage chip is designed on the board to store the key in an encrypted memory; Decryption is performed only when the key is needed through a specific authorization and authentication mechanism; at the same time, access permissions are set to limit access to the key to specific programs or users.

7. The encryption method for generating a key based on chip power consumption according to claim 1, characterized in that: The power consumption collection in step 1 is mainly divided into two parts: the temperature of the chip and the workload of the chip. The temperature collection relies on the temperature sensor to monitor the ambient temperature in real time, obtain different initial power consumption trajectories in different environments, and add a certain change threshold. The temperature compensation technology is used to eliminate the impact of temperature on power consumption.

8. The encryption method for generating a key based on chip power consumption according to claim 1, characterized in that: The power consumption fluctuation caused by the change of the workload of the chip is collected by running a specific power consumption verification program after the chip is turned on.

Images