Device for identifying manipulation of quantum random number generator

Abstract

An apparatus (10) for identifying manipulation of a quantum random number generator comprises: a quantum random number generator (20) having a semiconductor substrate (22) comprising an entropy source (24) being a photon source (26) and a detector (28) configured to detect radiation emitted by the entropy source (24); and a steering detector (30) adapted to detect radiation detectable by the detector (28). The steering probe (30) is arranged around the probe (28). The steering detector is shielded relative to the entropy source (24) such that only radiation from outside the entropy source (24) can be detected.

Description

Technical Field

[0001] The present invention relates to a device for identifying manipulation of a quantum random number generator, an integrated circuit having such a device, a network having multiple quantum random number generators, and a corresponding method. Background Technology

[0002] In today's world, the secure and reliable generation of true random numbers is becoming increasingly important, especially for encryption and cryptography, but also applicable to networks without a central control or distributed networks. Security today often depends directly on the quality and unpredictability of random numbers. This is particularly true for encryption, authentication, and other security-related operations. Therefore, random number generators must generate absolutely unpredictable sequences, with quantum mechanisms and photon generation being among the best methods. For example, a computer is known from DE 10 2022 125 572 A1 that includes at least one quantum processor-based true random number generator (QRNG) as a random number generator with a high random bit output rate, particularly for encryption.

[0003] Random number generators, and especially quantum random number generators or QRNGs, are often interesting and valuable targets for attacks and cyberattacks. Therefore, they must be particularly resistant to manipulation from external or third-party sources.

[0004] To enhance security, a quantum random number generator (QRNG) is incorporated, comprising an entropy source and a detector serving as photons within a semiconductor substrate. The entropy source and detector are arranged perpendicularly to each other and to the surface of the semiconductor substrate, achieving exceptionally high random number data rates. This vertically arranged quantum random number generator within the semiconductor substrate guarantees that the generated random numbers are indeed random, unpredictable, and possess high entropy. "Entropy" here is understood as the uncertainty or information present in the random numbers, representing the degree of unpredictability. It can be verified using the guideline NIST SP800-22 developed by the National Institute of Standards and Technology (NIST).

[0005] The quantum random number generator (QRNG) is preferably monolithically constructed and integrally formed within a semiconductor substrate. In addition to the entropy source (photon source) and detector, other components are present in the semiconductor substrate. These components may include: one or more analog amplifiers and / or filtering circuits for preparing the output signal of the entropy source for subsequent analog-to-digital conversion; one or more one-bit analog-to-digital converters (ADCs), which in the case of a one-bit ADC may be a comparator; one or more time-to-digital converters (TDCs) and / or one or more time-to-pseudo-random number converters (TPRNCs) for associating a defined binary number with a time interval between two pulses of the entropy source; one or more entropy extraction devices for extracting one or more random bits from the binary number; one or more finite-state machines for converting the data stream of random bits into random numbers; one or more interfaces for one or more external computer systems to access the random numbers and / or for controlling the quantum random number generator; one or more components or parts for performing and / or supporting health checks on one or more of the components and / or their collaboration; and one or more components or parts for generating an internal operating voltage within the quantum random number generator to operate it.

[0006] For example, such or similar quantum random number generators (quantum-based random number generators) are known from DE 10 2023 126 168 A1 or WO 2024 / 074170 A1, which can be applied within the scope of this invention. Quantum random number generators for generating random numbers based on optical methods using one or more SPADs (Single Photon Avalanche Diodes) as detectors are also known from the article “Recent Advances and Future Perspectives of Single-Photon AvalancheDiodes for Quantum Photonics Applications” by Francesco Ceccarelli et al.; Adv. Quantum Technol. 2021, 4, 2000102.

[0007] For example, the article “Attacking quantum key distribution by light injection via ventilation openings” by Juan Carlos Garcia-Escartin et al. (PLOS ONE | https: / / doi.org / 10.1371 / journal.pone.0236630, August 3, 2020) has shown that it is possible to manipulate or predict random numbers by using external light incident interference and influencing the quantum random number generator.

[0008] The likelihood of identifying such attacks largely includes startup testing, online testing, and so-called complete failure testing. Startup testing checks if all components are functioning correctly when the QRNG is turned on. Online testing checks the quality of random numbers using statistical tests during QRNG operation or runtime. Complete failure testing identifies the complete failure of the QRNG's entropy source or detector. Such tests are described in Werner Schindler et al.'s article "Evaluation Criteria for True (Physical) RandomNumber Generators Used in Cryptographic Applications"; BS Kaliski Jr. et al. (Eds.): CHES 2002, LNCS 2523, pp. 431-449, 2003.

[0009] There remains a significant need to improve the security of quantum random number generators that use entropy sources or photon sources, and to make them robust against external influences, particularly against interference radiation or optical effects caused by photon radiation. Summary of the Invention

[0010] This objective is achieved by a device having the features of claim 1, an integrated circuit having the features of claim 19, a network having the features of claim 22, and a method having the features of claim 23.

[0011] In one aspect, the present invention relates to an apparatus for identifying manipulation of a quantum random number generator (QRNG), the apparatus comprising: a quantum random number generator having a semiconductor substrate and a manipulation detector. The quantum random number generator has a semiconductor substrate comprising an entropy source and a detector. The entropy source is a photon source. The detector is configured and positioned to detect radiation emitted by the entropy source. Here, the emitted radiation can be, for example, photon radiation. However, the radiation can also consist of a single photon, such that a receiver is accordingly configured to detect a single photon.

[0012] The manipulator detector is adapted to detect radiation that can be detected by the detector of the QRNG. Therefore, the manipulator detector can accordingly identify photon radiation and / or individual photons.

[0013] The entropy source and detector are preferably vertically integrated, such that the entropy source radiates perpendicular to the surface of the semiconductor substrate. Viewed from the surface, the entropy source is preferably closer to the surface than the detector. The entropy source is positioned away from the surface, radiating in a direction toward the detector. This results in a vertical arrangement of the entropy source and detector, in which the detector is positioned below the entropy source.

[0014] According to the present invention, the manipulator detector is arranged around the detector. Here, the distance from the detector is preferably in the micrometer range (µm range), and particularly preferably in the range of less than 100 µm, less than 50 µm, less than 20 µm, less than 10 µm, and less than 5 µm.

[0015] The manipulation detector is shielded relative to the entropy source, allowing it to detect radiation only from outside the entropy source. Therefore, the manipulation detector has a shielding element that prevents the measurement of radiation from the entropy source. Consequently, the manipulation detector does not detect radiation, photons, or single photons emitted from the entropy source. This ensures that the manipulation detector does not measure radiation emitted by the entropy source, but rather measures other radiation arriving at the quantum random number generator from outside the entropy source, preferably from outside the quantum random number generator. Therefore, by means of the manipulation detector, it is possible to identify external radiation and its effects based on radiation, particularly electromagnetic radiation, especially visible or invisible light.

[0016] In another aspect, the present invention relates to an integrated circuit having a semiconductor substrate in which a quantum random number generator is arranged, the quantum random number generator having an entropy source configured as a photon source and a detector for identifying radiation from the photon source. The integrated circuit (IC) has a manipulation detector configured and positioned to detect radiation to which the quantum random number generator is sensitive. The manipulation detector is arranged around the detector and is shielded relative to the entropy source, such that radiation without the entropy source is detected. Therefore, radiation without the entropy source is detected by the manipulation detector. Only radiation other than that from the entropy source is detected and probed. Therefore, for example, the effects of radiation or interference radiation or other similar radiation acting on the integrated circuit from the outside can be identified. The integrated circuit (IC) can include the quantum random number generator and the manipulation detector as described above. Therefore, the IC can be a specific embodiment of the device according to the present invention described above.

[0017] In another aspect, the present invention relates to a network having multiple quantum random number generators and at least one manipulation detector. Each quantum random number generator has a semiconductor substrate having a photon source configured as an entropy source and a detector. The detector is configured to detect radiation emitted by the entropy source. Here, the manipulation detector is configured such that radiation detectable by the detector of the random number generator is detected. Furthermore, the manipulation detector is shielded from the entropy source of the quantum random number generators in the network. In this way, radiation applied to the network from the outside, radiation without a fraction of radiation from the quantum random number generators, is detected. Here, multiple random number generators can share a single manipulation detector.

[0018] It is evident that multiple manipulation detectors can be incorporated into the network, with some or all of them integrated within a quantum random number generator, for example, within the semiconductor substrate of the quantum random number generator. Shielding of the manipulation detectors from entropy source radiation can be achieved by means of shielding elements, such as metal plates or metallized surfaces, or through a suitable spatial arrangement, for example, a suitable spatial arrangement within the semiconductor substrate. Therefore, the network can include multiple devices or components of devices according to the invention, as well as common manipulation detectors.

[0019] On the other hand, it relates to a QRNG, a corresponding method, a method corresponding to a device configuration, a vehicle, and a computer program product having program code for executing the steps of the method when executed on a computer or microprocessor. The vehicle and the device according to the invention form a system for identifying manipulation of a quantum random number generator.

[0020] Preferred designs of the invention are described in the dependent claims. It is readily understood that the features described above and those to be described below can be used not only in the combinations described separately, but also in other combinations or individually, without departing from the scope of the invention. In particular, the methods and computer program products can be implemented corresponding to the designs described for the apparatus in the dependent claims.

[0021] According to the present invention, manipulation of a quantum random number generator is identified within the device, the manipulation being performed through external action, i.e., action outside the random number generator. Specifically, the effects of interfering radiation are detected, particularly those caused by electromagnetic radiation and / or photon radiation and / or optical radiation in the visible or invisible range. This is achieved, in particular, when the manipulation detector is sensitive not only to the type of radiation detectable by the quantum random number generator's detector but also to other types of radiation. This can be accomplished by appropriately selecting the type and kind of manipulation detector, by setting the operating mode, or by selecting the detector voltage.

[0022] The manipulation detector can also be arranged outside the quantum random number generator. The manipulation detector can be a single, independent component. Alternatively and preferably, the manipulation detector is integrated into the quantum random number generator, at least into the semiconductor substrate of the generator. Preferably, the manipulation detector is monolithically constructed, just as the quantum random number generator can be monolithically constructed. The entropy source or photon source can be configured as a Si diode or a Zener diode. Preferably, the entropy source is a planar Zener diode, such as a Si-LED, arranged above the detector. Preferably, the detector is a planar SPAD. In a QRNG, the vertical integration of the entropy source and detector can preferably be designed such that the entropy source radiates perpendicular to the surface of the semiconductor substrate, preferably away from the surface, so that the detector arranged below the entropy source can be configured, for example, as a SPAD or DeepSPAD, and a compact design can be achieved.

[0023] In a preferred embodiment of the device, the shielding of the manipulator detector relative to the entropy source is achieved through the arrangement of the manipulator detector relative to the entropy source. This arrangement ensures that no radiation from the entropy source reaches the manipulator detector. Alternatively, and equally preferably, the shielding of the manipulator detector is achieved through a shielding element arranged between the manipulator detector and the entropy source. This arrangement also ensures that no radiation from the entropy source reaches the manipulator detector, and the latter is therefore unable to detect the radiation from the entropy source.

[0024] Therefore, the shielding of the manipulator detector results in the utilization or creation of a shadow region of the entropy source. Here, the shadow region of the entropy source is a region where no entropy source radiation occurs. Therefore, no radiation from the entropy source can be detected in this region. According to this preferred embodiment, the manipulator detector is arranged in the shadow region. The shadow region can be inherent to the entropy source, i.e., it exists on its own. This can be achieved, for example, by arranging the various doped surfaces within the semiconductor substrate and by correspondingly arranging the manipulator detector within the semiconductor substrate. Alternatively, the shadow region can also be generated by means of a shielding member or shielding element, thus artificially creating the shadow region.

[0025] The shielding of the manipulator detector results in the absence of radiation from either the entropy source or the photon source in each radiation detection. Therefore, the reception of radiation from the entropy source is eliminated through shielding. This shielding is particularly effective when the manipulator detector is positioned in the shadow region of the entropy source, where the shadow region is either pre-defined by the photon source or created by means of shielding elements.

[0026] In another preferred embodiment, the manipulation detector is a photodiode or an avalanche diode. Preferably, the manipulation detector is a single-photon avalanche diode (SPAD), which makes it possible to detect single photons as well. In another equally preferred embodiment, the manipulation detector is configured as a "deep-SPAD," an n-SPAD, or a p-SPAD. Here, the n-SPAD has corresponding near-surface n-doping; the p-SPAD has corresponding near-surface p-doping. In this way, different sensitivities can be created, especially for light in different wavelength ranges. For example, the p-SPAD is highly sensitive to high-energy radiation (especially blue or green light). The n-SPAD is sensitive to low energy. Therefore, it responds sensitively to red or infrared light.

[0027] Here, "deepSPAD" refers to the arrangement of avalanche diodes in a semiconductor substrate, as described, for example, in DE 10 2023126 168 A1. Such embodiments are also preferably detectors for quantum random number generators.

[0028] In another embodiment, the manipulation detector is integrated into the semiconductor substrate of the quantum random number generator. Here, it can be arranged next to the detector or at the same height as the detector. The same height position is characterized by having the same vertical distance to the surface of the semiconductor substrate. Here, the horizontal distance, i.e., the distance parallel to the surface of the semiconductor substrate, can be varied and depends on spatial relationships or further requirements. In particular, the distance between the manipulation detectors can be chosen to be large enough that the manipulation detectors are arranged in the shaded region of the entropy source.

[0029] Alternatively, the manipulation detector can also be arranged at a different height within the semiconductor substrate than the original detector. Thus, the distance to the semiconductor substrate surface differs from the distance from the detector to the surface. Therefore, the manipulation detector is positioned next to the entropy source or photon source. The distance in the direction parallel to the surface can be varied and can be configured according to the design of the quantum random number generator.

[0030] Alternatively, and equally preferably, the manipulation detector can be disposed outside the semiconductor substrate. Here, the manipulation detector can be a separate element or component disposed in a semiconductor substrate different from the semiconductor substrate associated with the quantum random number generator or outside the semiconductor substrate associated with the quantum random number generator.

[0031] In a preferred embodiment of the invention, the device includes a plurality of manipulation detectors. The manipulation detectors are preferably spatially distributed around the entropy source. Particularly preferably, this arrangement is spatially uniform. This is especially possible when there are significantly more than two, for example four, six, eight, twelve, sixteen, or more manipulation detectors. The number of manipulation detectors can vary depending on the implementation. Even in a spatially uniform arrangement around the entropy source, when the manipulation detectors are disposed within a semiconductor substrate, each manipulation detector can be arranged at a different horizontal height, i.e., at a different distance from the surface of the semiconductor substrate. The same applies to externally arranged manipulation detectors. Multiple manipulation detectors improve the recognition of manipulation.

[0032] In a preferred embodiment of the device having multiple manipulation detectors, it is possible to propose that two of the manipulation detectors are different. Preferably, the manipulation detectors are so different that they differ in configuration, type, operation, and / or operating voltage. For example, one manipulation detector can be configured as an n-SPAD, and the other as a p-SPAD. In this way, a wide range of light waves can be received. It is also possible to configure one manipulation detector as a photodiode, another as an avalanche diode, and a third as a SPAD. Although the sensitivity of a photodiode is significantly lower than that of an avalanche diode or a SPAD, a photodiode, like an avalanche diode, has a higher dynamic range than a SPAD. Therefore, a photodiode saturates later than a SPAD. This prevents the detector from being driven into saturation by strong external interference radiation or strong ambient light, making the manipulation detector quasi-blind and no longer able to detect external influences. This is prevented, in particular, by using multiple different types of manipulation detectors.

[0033] Preferably, the manipulation detectors are divided into at least two groups, each group comprising detectors of the same type. However, these groups may have different types. In a further specific embodiment, three or four groups of manipulation detectors are provided. For example, in this case, these groups may be operable using different operating voltages.

[0034] Also preferably, there are only two sets of manipulating detectors, one of which has the same operating voltage as the detectors in the quantum random number generator. In this way, only another different operating voltage must be provided inside the device.

[0035] In another preferred embodiment, the device has multiple manipulation detectors, some or all of which are combined or connected to form a photomultiplier tube. The connected manipulation detectors are preferably of the same type, such as photodiodes or avalanche diodes. For example, the connected manipulation detectors are of the same SPAD type.

[0036] Therefore, the detector can be either a deep-SPAD or another photodetector or SPAD that is mounted in the surrounding environment and capable of detecting ambient light or interference radiation. It can be a simple photodiode, or a conventional n-SPAD or p-SPAD. An implementation using a "low-voltage SPAD" with a lower operating voltage is also possible. Combinations of different detector types are possible and preferred.

[0037] Using multiple manipulation detectors in the form of SPADs is advantageous because each SPAD has a so-called dark count rate. Therefore, an event can be detected even when no external light falls on the detector. Using multiple SPADs as manipulation detectors eliminates false triggering and misidentification of manipulation. Simultaneous triggering by multiple SPADs or multiple manipulation detectors is attributed to external light, i.e., interfering light or external influences or other interfering radiation.

[0038] When manipulating the detectors as photomultiplier tubes, it is preferable to use SPADs of the same type and with the same operating voltage. Therefore, only one evaluation or readout electronics is needed, in addition to a different operating voltage. It is also possible to operate the monitoring detectors or the manipulating detectors separately, for example, when they are to operate in different operating modes or different sensitivity ranges. Combining various photodiode or SPAD types, which typically have different sensitivities depending on the wavelength of the light or the wavelength of the incoming radiation, is also conceivable and desirable.

[0039] In a preferred embodiment, the manipulation detector is equipped with an optical window. The semiconductor substrate (or this area) is also preferably equipped with an optical window associated with the manipulation detector. This prevents shielding through the metal surface. This increases the detector's sensitivity to radiation from the outside.

[0040] In a preferred embodiment, the device has an evaluation unit by means of which the detector can be evaluated and / or manipulated and measurement results can be compared. Here, the identification of an event is understood as the measurement result.

[0041] The evaluation unit is preferably configured to identify manipulation from the measurement results or detected events of the manipulation detector. Preferably, the evaluation unit is configured to identify manipulation from the measurement results or determined events of both the detector and the manipulation detector, wherein a comparison standard is preferably used. Here, the number of events determined by the detector and the manipulation detector can be counted. Manipulation is identified when the absolute value of the difference between the two event counts is less than a preset threshold.

[0042] This also applies when using and evaluating multiple manipulation detectors. Here, manipulation is identified when multiple, preferably all, or particularly preferably at least 90%, more preferably at least 80%, more preferably at least 70%, and more preferably at least 50% of all manipulation detectors simultaneously detect the event. In this context, "simultaneously" means within the processing cycle of the processor, evaluation unit, or evaluation electronics.

[0043] A preferred embodiment of the device includes a second quantum random number generator. This can be meaningful when multiple real random numbers need to be generated simultaneously and / or independently of each other.

[0044] Another preferred configuration proposes using and employing the detector of the second quantum random number generator as a manipulation detector. The second detector, i.e., the detector of the second quantum random number generator, subsequently serves as the manipulation detector. In this case, the device may not include a separate, explicitly defined manipulation detector, but rather only include the detector of the second generator. Alternatively, the detector of the second quantum random number generator can be used as an additional manipulation detector, i.e., as a second or additional manipulation detector, to increase the independence of the manipulation detector and improve the identification of manipulation.

[0045] When the entropy source of the second quantum random number generator is turned off or not in operation, for example, for power saving reasons (such as when a high data rate is not required), the detector of the second quantum random number generator is subsequently used and employed as a manipulation detector. It is then no longer used as an entropy source. In a preferred embodiment, the second quantum random number generator can be implemented unmasked, i.e., without outward shielding or masking.

[0046] A preferred embodiment of the device proposes that the manipulation detector at least identifies the type of radiation emitted by the entropy source. Therefore, the manipulation detector is sensitive to radiation generated by the entropy source. More preferably, the manipulation detector is also sensitive to any type of radiation that the quantum random number generator's detector is sensitive to (i.e., radiation that the detector can detect). However, particularly preferably, the manipulation detector has a larger sensitivity range than the detector. Therefore, the manipulation detector is capable of detecting radiation in a wider frequency range or a wider wavelength range. In this way, the identification of broad-spectrum interference radiation is ensured. The manipulation detector is therefore an external light detector or an external radiation detector.

[0047] If one or more of the manipulator detectors are triggered (simultaneously or quasi-simultaneously, i.e., within the same processing cycle), this can trigger a measure in the quantum random number generator. In this case, an attack or influence is suspected, or manipulation is identified. For example, a message can be output to the controller, or the generation of random numbers can be stopped.

[0048] In general, the device according to the invention has the advantage that, through the monolithic construction of the quantum random number generator, attacks caused by incident external radiation or incident external light can be locally detected, enabling timely action as described above. This is important for ensuring the security of applications in which a quantum random number generator is used and where its random numbers are processed.

[0049] In a particular embodiment of an integrated circuit having a semiconductor substrate, at least a second quantum random number generator is integrated within the integrated circuit (IC). Preferably, at least one of the quantum random number generators is shielded or shielded to resist interference radiation from the outside. When using multiple quantum random number generators, it is particularly preferable to turn off the entropy source of at least one of the quantum random number generators and use its detector as a manipulation detector. In the case of more than two quantum random number generators, all other entropy sources of the other quantum random number generators, except for one, can be turned off, allowing the detectors of said random number generators to be used as additional manipulation detectors.

[0050] A network having multiple quantum random number generators (QRNGs) and at least one manipulation detector is a possible application of QRNGs with enhanced security against external manipulation, particularly radiation and / or optical manipulation. This also includes manipulation with photons or single photons. The manipulation detector is adapted and configured to detect radiation that can be detected by the detector. The manipulation detector is shielded relative to the quantum random number generators such that the detected radiation does not contain radiation from one of the entropy sources of the network's QRNG. The network can include multiple nodes, where each node can include a control unit and / or a QRNG. The manipulation detector is preferably included in at least one of the nodes.

[0051] A quantum random number generator (particularly suitable for the aforementioned device) has a semiconductor substrate comprising an entropy source and a detector. The entropy source is a photon source. The detector is configured to detect radiation emitted by the entropy source, wherein the photon source and the detector are arranged in the semiconductor substrate such that the photon source is positioned between the detector and the surface of the semiconductor substrate. The entropy source and the detector are arranged vertically about the surface normal of the substrate.

[0052] Preferably, the entropy source of the QRNG is a planar Zener diode, which radiates radiation over a large area into a planar detector arranged below the entropy source. Preferably, the area of ​​the entropy source corresponds to the area of ​​the detector, and particularly preferably, the areas are equal. The planar element has a planar extension. The planar extension forms the active region of the element, i.e., the region from which radiation can be emitted or detected. Therefore, radiation can be emitted or detected from each point of the planar extension. The planar Zener diode and / or detector or SPAD is not a point source or point receiver. Its area preferably has long and short sides of equal length or unequal length and is limited by them. The areas can be of equal size or in the same dimension.

[0053] In a preferred embodiment, the entropy source of the QRNG is a planar Zener diode. One or more SPADs are disposed in the semiconductor substrate, preferably arranged below the entropy source. Particularly preferably, one SPAD is a detector, and the one or more SPADs form one or more manipulation detectors.

[0054] Preferably, the detector is an avalanche diode, more preferably a SPAD. Preferably, the detector is manipulated in the semiconductor substrate such that it is arranged in a non-radiative region free from entropy source radiation, i.e., in a shaded region.

[0055] In a preferred design, the entropy source of the QRNG is positioned between a metal layer, preferably forming a metal cap, and the detector. The metal layer redirects radiation emitted by the entropy source towards the detector and / or shields against radiation from the environment. This provides protection against external manipulation of the QRNG. This protection can be further improved using the aforementioned device.

[0056] Preferably, the entropy source and the detector are monolithically formed in a semiconductor substrate, and more preferably, the entropy source is arranged above the detector. Particularly preferably, a metal layer arranged above the entropy source is also integrated into the QRNG.

[0057] Such QRNGs can be formed or manufactured, for example in CMOS or BCD (bipolar-CMOS-DMOS) processes, and preferably also include a manipulation detector: An entropy source in the form of a photon source is formed within a semiconductor substrate; a detector in the form of an avalanche diode or SPAD is formed below the entropy source within the semiconductor substrate (viewed from the surface of the semiconductor substrate). Here, the entropy source and detector are preferably formed monolithically within the semiconductor substrate. Alternatively, a metal layer can be arranged or formed above the entropy source to shield against radiation from the environment. The metal layer can be integrated into the semiconductor substrate. Attached Figure Description

[0058] The present invention will be described and explained in more detail below with reference to selected embodiments taken in conjunction with the accompanying drawings. Wherein: Figure 1 A device according to the invention is shown for identifying manipulation of a quantum random number generator; Figure 2 This illustrates another alternative implementation of the device; Figure 3 Another variation of a preferred embodiment of the device is shown; Figure 4 A variant of a quantum random number generator with multiple manipulating detectors is shown; Figure 5 Alternative implementations of a device with a quantum random number generator and multiple manipulation detectors of different types are shown; Figure 6 A network having multiple devices according to the present invention is shown; Figure 7 A schematic flow diagram of the method according to the present invention is shown, and Figure 8 An application example of the device according to the present invention is shown. Detailed Implementation

[0059] Figures 1 to 6 Several embodiments of the device 10 according to the invention for identifying manipulation of a random number generator are shown.

[0060] Figure 1 A device 10 according to the invention, having a quantum random number generator 20 and a manipulation detector 30, is shown. The quantum random number generator 20 has a semiconductor substrate 22, which includes an entropy source 24 and a detector 28. The entropy source 24 is a photon source 26. The detector 28 is configured and positioned to detect radiation emitted by the entropy source 24. The operation of such a quantum random number generator 20 is known from the prior art.

[0061] The manipulator 30 is arranged in the device 10 such that it is positioned in a shielded or shadowed region 32. The shadowed region 32 relates to the entropy source 24 and is the region where radiation from the entropy source 24 or the photon source 26 does not reach but is shielded from such radiation.

[0062] The device 10 also includes an evaluation unit 40 for processing the measurement results and detections of the detector 28 and the manipulation detector 30. This processing specifically includes identifying interference radiation or external light intrusion, and identifying the possibility of influence or other external manipulation, preferably optical manipulation. The evaluation unit 40 may include a processor. The evaluation unit may also be integrated into the quantum random number generator 20.

[0063] The output interface 50 is configured and used to: output manipulation signals generated by the evaluation unit 40 to identify manipulation, for example, output to a controller or other components or connected components, parts, devices or systems in the environment.

[0064] Figure 1 An optional shield 34 is also shown, which may be created, for example, by means of a metal plate or metal layer 36. Thus, it is possible to define a shaded area 32 in which the manipulator detector 30 is arranged by means of the shield 34.

[0065] Figure 2 An alternative embodiment of device 10 is shown. Here, the quantum random number generator 20 having its semiconductor substrate 22 also includes a manipulation detector 30. In other words, the manipulation detector 30 is integrated into the semiconductor substrate 22. In this case, an optional shielding 34 can also be implemented, for example, through a metal layer 36.

[0066] The output interface 50 is located outside the quantum random number generator 20. The evaluation unit 40 can be integrated into the generator or located externally.

[0067] In an alternative embodiment, the manipulation detector 30 is included in a semiconductor substrate 22, which also includes the semiconductor substrate of the quantum random number generator 20. Preferably, the manipulation detector 30 and the quantum random number generator 20 are arranged on the same semiconductor substrate 22. However, it can also be arranged outside the quantum random number generator 20.

[0068] Figure 3 An alternative configuration of the device 10 with two quantum random number generators 20 is shown, which share a manipulation detector 30. The quantum random number generators 20 and the manipulation detector 30 can both be arranged on the same semiconductor substrate 22. An optional shield 34 can also be provided to create a shaded region 32 in which the manipulation detector 30 is arranged. In this way, it is additionally ensured that radiation from the photon source 26 of the quantum random number generator 20 does not reach the manipulation detector 30.

[0069] In this embodiment, it is possible that the photon source 26 of one of the quantum random number generators 20 is not operating or is turned off. The detector 28 of the generator can then be operated as another manipulation detector 30.

[0070] The manipulation detector 30 is preferably configured with an optical window to prevent outward obstruction through the metal surface. As a result, the manipulation detector 30 is more sensitive to external radiation, i.e., radiation from outside the device that can be used to influence or manipulate the quantum random number generator 20.

[0071] Figure 4Another embodiment of a device 10 is shown, having a quantum random number generator 20 and a plurality of manipulation detectors 30 arranged around the quantum random number generator 20. In this embodiment, the manipulation detectors 30 surround the quantum random number generator 20. Exemplarily, eight manipulation detectors 30 are provided. It goes without saying that other numbers of manipulation detectors can also be used, such as two, four, six, eight, nine, ten, twelve, fourteen, sixteen, eighteen, or twenty-four.

[0072] Multiple manipulation detectors 30 can be, for example, SPADs. In a simple variation (as shown here), the manipulation detectors 30 can all be SPADs of the same type. They preferably operate on only one operating voltage. Therefore, only another operating voltage is required for the device. The voltage source is not shown in any of the figures shown.

[0073] Manipulation detectors 30 of the same type shown herein can be combined or connected to form photomultiplier tubes. It is possible to manipulate the manipulation detector 30 individually, for example, by placing it in different operating modes or by making it operate with different sensitivity ranges.

[0074] Generally, the manipulation detector 30 configured as a SPAD can operate at different voltages. Here, three different operating modes can typically be set: photodiode mode, avalanche photodiode mode (avalanche mode), and SPAD mode. Generally, the sensitivity of the manipulation detector 30 increases with increasing voltage. That is, when the manipulation detector 30 operates in SPAD mode, it can detect less light, down to detecting a single photon or a single light particle. In SPAD mode, the voltage is the highest, typically above the breakdown voltage. In avalanche mode, the voltage is below the breakdown voltage; here, the sensitivity is classified as moderate. In photodiode mode, the manipulation detector operates at a low operating voltage. In this mode, the sensitivity is lowest. However, the dynamic range is highest, which decreases as the voltage increases. The higher the voltage applied to the manipulation detector 30, the lower the dynamic range, i.e., the lower the optical power causing detector saturation.

[0075] Figure 5 Showing according to Figure 4 An alternative implementation of the device. In the example, two different types of manipulation detectors 30 are used, which surround the quantum random number generator 20, i.e., are arranged around it. For example, one type of manipulation detector 30 can consist of n-SPAD detectors 38 and a second type of manipulation detector 30 can consist of p-SPAD detectors 39.

[0076] Figure 6A network 60 according to the invention is shown, having multiple quantum random number generators 20 and a control unit 62, wherein the control unit 62 is configured and used for communication between the various quantum random number generators 20 in the network 60. Figure 6 Only the quantum random number generator 20 is shown; the quantum random number generator can, of course, be integrated into the device 10 and thus also include the manipulation detector 30. Alternatively, each network node 64 formed by the quantum random number generator 20 and the manipulation unit 62 may have a separate manipulation detector 30. Alternatively, one or more nodes 64 may be configured as manipulation detectors 30 and also supply them to other nodes 64. The manipulation unit 62 also enables communication between the various nodes 64.

[0077] Figure 7 The basic flow of a method according to the invention for identifying manipulation of a quantum random number generator by external influence is shown. This identification is performed by means of a manipulation detector 30. The quantum random number generator 20 has a semiconductor substrate 22, which includes an entropy source 24 as a photon source 26 and a detector 28 configured to detect radiation emitted by the entropy source 24.

[0078] In the first step S10, the manipulation detector 30 is read. In another step S12, external manipulation, particularly external optical manipulation or influence, is identified. The identification in step S12 is performed according to a preset standard. This can be a manipulation identification standard or a comparison standard.

[0079] In another step S14, the manipulation signal is generated and further processed. This further processing can, for example, be forwarded via output interface 50 to transmit the manipulation signal to the controller or a higher-level unit or other component of the device or system, allowing for further processing there. Alternatively or additionally, the manipulation signal can be processed directly in the device according to the invention, and, for example, cause the quantum random number generator 20 to shut down.

[0080] In a preferred embodiment of the method, step S12 includes additional optional steps S20 to S28 to perform identification of external manipulation according to a standard.

[0081] In optional step S20, photon radiation is emitted using entropy source 24 or photon source 26. Step S22, receiving the radiation using detector 28, follows immediately. In step S24, detector 28 is read. Step S26 includes comparing the measurements from detector 28 with the measurements from manipulating detector 30. Here, the detector measurements are understood to identify the event occurring in the detector. How this is performed is known in the prior art, for example from DE 102022152572 A1, WO2024 / 074170 A1, or DE 10223126268 A1.

[0082] In another step S28, a determination is made based on the comparison of measured values ​​and a preset comparison standard: it is expected that external manipulation or external influence (e.g., due to radiation, particularly due to external influence from optical radiation) is expected. This determination is further processed as a standard in step S12, such that in the case of a positive determination, i.e., assuming an influence has occurred, a manipulation signal can be generated.

[0083] Figure 8 A vehicle 70 is shown having a device 10 according to the invention, wherein the device 10 is capable of, for example, including, according to... Figures 1 to 5 One of the variations described above or according to Figure 6 Network 60. Therefore, vehicle 70 and device 10 form a system comprising both components. For example, device 10 can be configured as an integrated circuit within the system, such that the integrated circuit is built into vehicle 70. Preferably, data within vehicle 70 is encrypted using device 10 or a quantum random number generator 20 included in device 10. Alternatively, and equally preferably, device 10 is used to encrypt communication within vehicle 70 or with components outside vehicle 70. For example, random numbers generated by the quantum random number generator 20 of device 10 can be used for communication between vehicle 70 and the car key, for example, to encrypt the communication so that it can proceed without interference.

[0084] Alternatively, it is also possible to include a network 60 in the vehicle 70, such that the vehicle 70 and the network 60 having multiple devices 10 or multiple quantum random number generators 20 form a system.

[0085] The present invention has been fully described and illustrated with reference to the accompanying drawings and specification. The descriptions and explanations should be interpreted as examples and not as limiting. The invention is not limited to the disclosed embodiments. Other embodiments or variations will be apparent to those skilled in the art upon use of the invention and upon detailed analysis of the drawings, disclosure, and subsequent claims.

[0086] In patent claims, the words "comprising" and "having" do not exclude the presence of other elements or steps. The indefinite articles "a" or "an" do not exclude the presence of a majority. A single element or unit can perform the function of multiple components in the parts proposed in the patent claim. Elements, units, devices, and systems can be implemented partially or wholly in hardware and / or software. The mere mention of certain measures in several different dependent patent claims should not be construed as meaning that a combination of said measures cannot be used equally advantageously.

[0087] List of reference numerals 10 Equipment 20 Quantum Random Number Generator 22 Semiconductor substrate 24 Entropy Source 26 Photon Sources 28 detectors 30. Manipulating the detector 32 Shaded areas 34 Shielding 36 Metal Layers 38 n-SPAD 39 p-SPAD 40 Evaluation Units 50 Output Interfaces 60 Network 62 control units 64 nodes 70 vehicles

Claims

1. A device for identifying manipulation of a quantum random number generator, comprising: A quantum random number generator (20) having a semiconductor substrate (22) including an entropy source (24) as a photon source (26) and a detector (28) constituting a means of detecting radiation emitted by the entropy source (24). and Manipulating detector (30), said manipulating detector being adapted to detect radiation that can be detected by said detector (28); in The manipulation detector (30) is arranged around the detector (28); The manipulation detector (30) is shielded relative to the entropy source (24) so ​​that it can only detect radiation from outside the entropy source (24).

2. The device according to claim 1, characterized in that, The shielding of the manipulation detector (30) relative to the entropy source (24) is achieved by the arrangement of the manipulation detector (30) relative to the entropy source (24) such that no radiation from the entropy source (24) reaches the manipulation detector (30); or by a shielding element arranged between the manipulation detector (30) and the entropy source (24) such that no radiation from the entropy source (24) reaches the manipulation detector (30).

3. The device according to any one of the preceding claims, characterized in that, The manipulation detector (30) is a photodiode, avalanche diode, single-photon avalanche diode (SPAD), preferably a DeepSPAD, n-SPAD (38) or p-SPAD (39).

4. The device according to any one of the preceding claims, characterized in that, The manipulation detector (30) is integrated in the semiconductor substrate (22).

5. The device according to any one of the preceding claims, characterized in that, The device (10) includes a plurality of manipulation detectors (30), which are preferably spatially distributed around the entropy source (24), and particularly preferably spatially uniformly distributed around the entropy source (24).

6. The device according to claim 5, characterized in that, At least two of the manipulation detectors (30) are different, preferably in that the at least two manipulation detectors are different in configuration, type, operation and / or operating voltage.

7. The device according to claim 5 or 6, characterized in that, The plurality of manipulator detectors (30) are combined or connected to form a photomultiplier tube and are preferably of the same type, preferably SPADs of the same SPAD type.

8. The device according to any one of the preceding claims, characterized in that, The device (10) includes an evaluation unit (40) by means of which the detector (28) and the manipulation detector (30) can be evaluated and the measurement results compared, wherein the evaluation unit (40) is configured to: identify manipulation from the measurement results of the detector (28) and the manipulation detector (30), preferably according to a comparison criterion.

9. The device according to any one of the preceding claims, characterized in that, The device (10) has a second quantum random number generator (20), and preferably, when the entropy source (24) of the second quantum random number generator (20) is turned off or not running, the detector (28) of the second quantum random number generator (20) is the manipulation detector (30).

10. The device according to any one of the preceding claims, characterized in that, The manipulation detector (30) identifies at least the type of radiation emitted by the entropy source (24), preferably detects any type of radiation that the detector (28) is sensitive to, and particularly preferably the manipulation detector (30) has a greater sensitivity range than the detector (28).

11. The device according to any one of the preceding claims, characterized in that, The entropy source (24) of the quantum random number generator (20) is configured as a planar Zener diode, preferably as a silicon LED, and the planar Zener diode is arranged above the detector (28), which is preferably a planar SPAD.

12. A quantum random number generator, particularly suitable for a quantum random number generator of a device according to any one of the preceding claims, having a semiconductor substrate (22) comprising an entropy source (24) as a photon source (26) and a detector (28) constituting for detecting radiation emitted by the entropy source (24); wherein the photon source (26) and the detector (28) are arranged in the semiconductor substrate (22) such that the photon source (26) is disposed between the detector (28) and the surface of the semiconductor substrate (22).

13. The quantum random number generator according to the preceding claim, characterized in that, The entropy source (24) is a planar Zener diode that radiates radiation over a large area into a planar detector arranged below the entropy source (24), wherein preferably the area of ​​the entropy source (24) corresponds to the area of ​​the detector (28), and particularly preferably the areas are equal.

14. The quantum random number generator according to any one of claims 12 to 13, characterized in that, The entropy source (24) is a planar Zener diode, and one or more SPADs are provided in the semiconductor substrate, wherein preferably one or more SPADs are arranged below the entropy source, and particularly preferably one SPAD is a detector (28), and one or more SPADs form a manipulation detector (30).

15. The quantum random number generator according to any one of claims 12 to 14, characterized in that, The detector (28) is an avalanche diode, preferably a SPAD, and a manipulation detector (30) is arranged in the semiconductor substrate (22) such that the manipulation detector is located in a radiation-free region where there is no radiation from the entropy source (24).

16. The quantum random number generator according to any one of claims 12 to 15, characterized in that, The entropy source (24) is arranged between the metal layer and the detector (28), the metal layer preferably forming a metal cover, wherein the metal layer directs the radiation emitted by the entropy source (24) toward the detector (28) and / or forms a shield against radiation from the environment.

17. The quantum random number generator according to any one of claims 12 to 16, characterized in that, The entropy source (24) and the detector (28) are monolithically formed in the semiconductor substrate (22), preferably the entropy source (24) is arranged above the detector (28), and particularly preferably the metal layer is arranged above the entropy source (24).

18. A vehicle (70) having the equipment (10) according to any one of the preceding claims.

19. An integrated circuit having a semiconductor substrate (22) in which a quantum random number generator (20) is arranged, the quantum random number generator having an entropy source (24) configured as a photon source (26) and a detector (28) for identifying radiation from the photon source (26), characterized in that, The integrated circuit includes a manipulation detector (30) configured to: detect radiation sensitive to the detector (28), and the manipulation detector is arranged around the detector (28), and the manipulation detector is shielded relative to the entropy source (24) such that no radiation from the entropy source (24) is detected.

20. The integrated circuit according to the preceding claim, characterized in that, The integrated circuit includes at least one second quantum random number generator (20), wherein preferably at least one of the quantum random number generators (20) is shielded or shielded to resist interference radiation from the outside, wherein preferably the entropy source (24) of at least one quantum random number generator (20) is turned off and the detector (28) of the quantum random number generator is the manipulation detector (30).

21. The integrated circuit according to the preceding claim, characterized in that, The integrated circuit is built into the vehicle (70) and is preferably capable of being used to encrypt data and / or communication between the vehicle (70) and components inside or outside the vehicle (70).

22. A network (60) having a plurality of quantum random number generators (20) and at least one manipulation detector (30), wherein each quantum random number generator (20) has a semiconductor substrate (22) comprising an entropy source (24) as a photon source (26) and a detector (28) constituting for detecting radiation emitted by the entropy source (24), and wherein The manipulation detector (30) is configured to: detect radiation that can be detected by the detector (28) and be shielded relative to the entropy source (24) of the quantum random number generator (20).

23. A method for identifying manipulation of a quantum random number generator (20) by means of a manipulation detector (30), wherein the quantum random number generator (20) has a semiconductor substrate (22) comprising an entropy source (24) as a photon source (26) and a detector (28) constituting for detecting radiation emitted by the entropy source (24), the method comprising the steps of: -Read the manipulation detector (30); -Identify the anticipated external manipulation based on preset criteria; - Generate and further process manipulation signals.

24. The method according to the preceding claim, characterized in that, The steps for identifying anticipated external manipulation based on preset criteria include the following: - Photon radiation can be optionally emitted by means of the entropy source (24); - Receive radiation by means of the detector (28); - Read the detector; - Compare the measured values ​​of the detector (28) with the measured values ​​of the manipulating detector (30); - Based on the comparison and the preset comparison criteria, it is determined that external manipulation is expected to exist.

25. A method for manufacturing a quantum random number generator (20), preferably a quantum random number generator (20) according to any one of claims 12 to 16, the method comprising the following steps: - An entropy source in the form of a photon source within a semiconductor substrate; -A detector in the form of an avalanche diode or SPAD is formed below the entropy source when viewed from the surface of the semiconductor substrate. The entropy source and the detector are monolithically formed in the semiconductor substrate.

26. The method according to the preceding claim, further comprising the following steps: - A manipulation detector is formed in the semiconductor substrate such that the manipulation detector is arranged in a non-radiative region where there is no radiation from the entropy source (24).

27. The method according to claim 25 or 26, characterized in that, The entropy source and the detector are manufactured using CMOS or BCD technology, and preferably the manipulation detector is also manufactured using CMOS or BCD technology.

28. The method according to any one of claims 25 to 27, further comprising the following steps: - A metal layer is formed above the entropy source to shield against radiation from the environment.

Images