Tamper detection circuit and communication device

Abstract

The application discloses a tamper detection circuit and a communication device, the communication device comprising a power module, a processing module and a tamper detection module, the tamper detection module comprising the tamper detection circuit, the tamper detection circuit comprising a tamper switch, a first switch and a signal triggering module; the processing module is connected to the power module, the tamper detection module is connected to the power module and the processing module, and the tamper detection module is configured to send a power supply signal and a disassembly signal when detecting that the communication device is disassembled; wherein the power module is configured to power on the processing module in response to the power supply signal and control the processing module to start; after the processing module starts, the processing module destroys the data stored in the communication device in response to the disassembly signal. In the above manner, when the communication device is detected to be illegally disassembled in the shutdown state, the communication device can automatically power on and start, immediately realize self-destruction, delete a large amount of encrypted data, and improve the security of the communication device.

Description

Technical Field

[0001] This application relates to the field of electronic circuits, specifically to tamper detection circuits and communication equipment. Background Technology

[0002] Broadband communication equipment and multi-mode terminals (e.g., devices that can simultaneously support multiple wireless communication standards) are not only used for personal communication but also widely applied in commercial, industrial, and military fields. Traditionally, when terminal equipment is discarded or replaced, methods such as physically destroying storage media like hard drives and flash memory are often required to prevent the leakage of sensitive data. However, this method has certain limitations in practical operation.

[0003] Existing anti-tampering solutions generally work by automatically recognizing tampering and immediately initiating a self-destruct program to erase all data stored in the device, or by destroying the storage device to destroy the data. However, these solutions generally cannot immediately destroy all encrypted data upon tampering. They often require a manual restart of the terminal device, and the device can only detect tampering and execute self-destruction after being powered on again. Summary of the Invention

[0004] To address the aforementioned issues, this application provides an anti-tamper detection circuit and a communication device, which can improve the security of the communication device.

[0005] One technical solution adopted in this application is: providing an anti-tamper detection circuit, which includes: an anti-tamper switch, the first end of which is connected to the power module of the communication device, the second end of which is grounded, and the anti-tamper switch being configured to disconnect when the communication device is disassembled; a first switch, the first end of which is connected to the first end of the anti-tamper switch, and the control end of which is connected to the second end of the anti-tamper switch; and a signal trigger module, the first end of which is connected to the second end of the first switch, the second end of which is connected to the processing module of the communication device, and the third end of which is connected to the power module of the communication device; wherein, the first switch is configured to conduct the power module and the signal trigger module in response to the anti-tamper switch being disconnected; the signal trigger module is configured to generate a power supply signal and a disassembly signal in response to the anti-tamper switch being disconnected, so that when the communication device is in a powered-off state, the power module powers on the processing module in response to the power supply signal and controls the processing module to start; after the processing module starts, it destroys the data stored in the communication device in response to the disassembly signal.

[0006] In one embodiment, the signal triggering module includes: a disassembly signal generating unit, a first end of which is connected to a second end of a first switch, and a second end of which is connected to a processing module. The disassembly signal generating unit is configured to issue a disassembly signal in response to the tamper switch being disconnected.

[0007] In one embodiment, the disassembly signal generating unit includes: a first resistor, the first end of which is connected to the second end of a first switch; a second resistor, the first end of which is connected to the second end of the first resistor, and the second end of the second resistor is grounded; and a second switch, the first end of which is grounded, and the control terminal of the second switch is connected to the second end of the first resistor.

[0008] In one embodiment, the signal triggering module further includes: a power-on signal generating unit, a first end of which is connected to the second end of the first switch, and a second end of which is connected to the power module. The power-on signal generating unit is configured to issue a power-on signal in response to the tamper switch being open, so that when the communication device is in a power-off state, the power module powers on the processing module and controls the processing module to start in response to the power supply signal and the power-on signal.

[0009] In one embodiment, the power-on signal generating unit includes: a first capacitor, the first end of which is connected to the second end of a first switch; a third resistor, the first end of which is connected to the second end of the first capacitor; a third switch, the first end of which is grounded, the second end of which is connected to a power module, and the control terminal of which is connected to the second end of the third resistor; a fourth resistor, the first end of which is connected to the control terminal of the third switch, and the second end of which is grounded; and a second capacitor, the first end of which is connected to the first end of the fourth resistor, and the second end of which is grounded.

[0010] In one embodiment, the processing module includes: a narrowband processing unit connected to the second end of the disassembly signal generation unit; and a broadband processing unit connected to the second end of the disassembly signal generation unit; wherein, the power module powers on the narrowband processing unit in response to a power supply signal and controls the narrowband processing unit to start, and after the narrowband processing unit starts, it destroys the data stored in the communication device in response to the disassembly signal; the power module powers on the broadband processing unit in response to a power supply signal and a power-on signal and controls the broadband processing unit to start, and after the broadband processing unit starts, it destroys the data stored in the communication device in response to the disassembly signal.

[0011] In one embodiment, the disassembly signal generating unit includes: a first resistor, a first end of which is connected to a second end of a first switch; a second resistor, a first end of which is connected to a second end of the first resistor, and the second end of the second resistor is grounded; a second switch, a first end of which is grounded, and a control terminal of the second switch is connected to the second end of the first resistor; a first diode, the cathode of which is connected to the second end of the second switch, and the anode of which is connected to a broadband processing unit, and the anode of which is used to output a disassembly signal to the broadband processing unit; and a second diode, the cathode of which is connected to the second end of the second switch, and the anode of which is connected to a narrowband processing unit, and the anode of which is used to output a disassembly signal to the narrowband processing unit.

[0012] This application also provides a communication device, which includes: a power module; a processing module connected to the power module; and an anti-tamper detection module connected to the power module and the processing module, wherein the anti-tamper detection module includes the anti-tamper detection circuit as described above.

[0013] In one embodiment, the power module includes: a backup battery connected to a first terminal of the tamper detection circuit's tamper switch; a first switching unit, a first terminal of which is connected to the backup battery, a second terminal of which is connected to the processing module, and a third terminal of which is connected to the signal triggering module of the tamper detection circuit. The first switching unit is configured to control the backup battery to supply power to the processing module in response to a power supply signal.

[0014] In one embodiment, the first switching unit includes: a third capacitor, the first end of which is connected to a backup battery and the second end of which is grounded; a fourth switch, the first end of which is connected to the first end of the third capacitor; a fifth resistor, the first end of which is connected to the first end of the fourth switch and the second end of which is connected to the control terminal of the fourth switch; a sixth resistor, the first end of which is connected to the control terminal of the fourth switch; and a fifth switch, the first end of which is grounded and the second end of which is connected to the second end of the sixth resistor, and the control terminal of the fifth switch is connected to a signal triggering module.

[0015] In one embodiment, the power module further includes: a main battery; a detection unit connected to the main battery, the detection unit being configured to detect whether the main battery is present; and a second switching unit, a first end of the second switching unit being connected to a second end of the first switching unit, the second end of the second switching unit being connected to the processing module, and a third end of the second switching unit being connected to the detection unit, the second switching unit being configured to control a backup battery to supply power to the processing module in response to the detection unit detecting that the main battery is not present.

[0016] In one embodiment, the second switching unit includes: a sixth switch, the second end of which is connected to the second end of a fourth switch, and the control end of the sixth switch is connected to a detection unit; a seventh switch, the first end of which is connected to the first end of the sixth switch, the second end of which is connected to a processing module, and the control end of the seventh switch is connected to the detection unit; and an eighth resistor, the first end of which is connected to the first end of the seventh switch, and the second end of which is connected to the control ends of the sixth and seventh switches.

[0017] In one embodiment, the detection unit includes a comparator, the input of which is connected to the main battery, and the output of which is connected to a second switching unit.

[0018] In one embodiment, the processing module includes a broadband processing unit and a narrowband processing unit connected to the second end of the second switching unit.

[0019] In one embodiment, the power module further includes a management unit connected to the tamper detection circuit, the second terminal of the second switching unit, and the broadband processing unit, wherein the management unit is configured to control the broadband processing unit to start in response to a power-on signal.

[0020] In one embodiment, the broadband processing unit and the narrowband processing unit have a low-power state. The power supply module powers on the narrowband processing unit in response to a power supply signal and controls the narrowband processing unit to enter the low-power state. The power supply module powers on the broadband processing unit in response to a power supply signal and a power-on signal and controls the broadband processing unit to enter the low-power state.

[0021] In one embodiment, when the communication device is powered on, the processing module destroys the data stored in the communication device in response to a disconnection signal.

[0022] This application provides an anti-tamper detection circuit and a communication device. The communication device includes a power module, a processing module, and an anti-tamper detection module. The anti-tamper detection module includes an anti-tamper detection circuit, which comprises an anti-tamper switch, a first switch, and a signal triggering module. The processing module is connected to the power module, and the anti-tamper detection module is connected to both the power module and the processing module. The anti-tamper detection module is configured to send a power supply signal and a disassembly signal when it detects that the communication device has been disassembled. The power module is configured to power on the processing module in response to the power supply signal and control the processing module to start. After starting, the processing module, in response to the disassembly signal, destroys the data stored in the communication device. Through this method, the communication device can automatically power on when it detects unauthorized disassembly while powered off, immediately self-destructing and deleting a large amount of encrypted data, thereby improving the security of the communication device. Attached Figure Description

[0023] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0024] in:

[0025] Figure 1 This is a schematic diagram of the structure of the first embodiment of the tamper detection circuit provided in this application;

[0026] Figure 2 This is a schematic diagram of the structure of the second embodiment of the tamper detection circuit provided in this application;

[0027] Figure 3 This is a schematic diagram of the structure of the third embodiment of the tamper detection circuit provided in this application;

[0028] Figure 4 This is a schematic diagram of the structure of the first embodiment of the communication device provided in this application;

[0029] Figure 5 This is a schematic diagram of the structure of the second embodiment of the communication device provided in this application;

[0030] Figure 6 This is a schematic diagram of the third embodiment of the communication device provided in this application. Detailed Implementation

[0031] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. It is understood that the specific embodiments described herein are only for explaining this application and not for limiting it. Furthermore, it should be noted that, for ease of description, only the parts related to this application are shown in the accompanying drawings, not all structures. All other embodiments obtained by those skilled in the art based on the embodiments of this application without creative effort are within the scope of protection of this application.

[0032] The terms "first," "second," etc., used in this application are used to distinguish different objects, not to describe a specific order. Furthermore, the terms "comprising" and "having," and any variations thereof, are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or apparatus that includes a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units not listed, or may optionally include other steps or units inherent to these processes, methods, products, or apparatuses.

[0033] In this document, the term "embodiment" means that a particular feature, structure, or characteristic described in connection with an embodiment may be included in at least one embodiment of this application. The appearance of this phrase in various places throughout the specification does not necessarily refer to the same embodiment, nor is it a separate or alternative embodiment mutually exclusive with other embodiments. It will be explicitly and implicitly understood by those skilled in the art that the embodiments described herein can be combined with other embodiments.

[0034] See Figure 1 , Figure 1 This is a schematic diagram of the structure of the first embodiment of the tamper detection circuit provided in this application. The tamper detection circuit 100 includes: an tamper switch SW, a first switch Q1, and a signal triggering module 10.

[0035] The tamper switch SW has its first terminal connected to the power module of the communication device, its second terminal grounded, and is configured to disconnect when the communication device is disassembled. The first terminal of the first switch Q1 is connected to the first terminal of the tamper switch SW, and the control terminal of the first switch Q1 is connected to the second terminal of the tamper switch SW. The first terminal of the signal trigger module 10 is connected to the second terminal of the first switch Q1, the second terminal of the signal trigger module 10 is connected to the processing module of the communication device, and the third terminal of the signal trigger module 10 is connected to the power module of the communication device.

[0036] The first switch Q1 is configured to connect the power module and the signal trigger module 10 in response to the tamper switch SW being disconnected. The signal trigger module 10 is configured to generate a power supply signal and a disassembly signal in response to the tamper switch SW being disconnected, so that when the communication device is in a powered-off state, the power module powers on the processing module in response to the power supply signal and controls the processing module to start. After the processing module starts, it destroys the data stored in the communication device in response to the disassembly signal.

[0037] In one application scenario, when a communication device is disassembled while powered off, the anti-tamper detection circuit 100 sends a power supply signal to the power module. Upon detecting the power supply signal, the power module powers on the processing module and controls it to start. Simultaneously, the anti-tamper detection circuit 100 also sends a disassembly signal to the processing module. Upon detecting the disassembly signal, the processing module determines that the communication device has been disassembled, and the communication device enters a self-destruct mode, causing the processing module to destroy the data stored in the communication device.

[0038] For example, for communication devices that can be set to power-on mode, the processing module will automatically turn on as long as the power module detects the power supply signal and supplies power to the processing module. That is, no power-on signal is required, and the processing module can also destroy the data stored in the communication device after detecting the disconnection signal. For communication devices that cannot be set to power-on mode, the power module needs to detect the power supply signal and then detect the power-on signal in order to control the processing module to turn on and perform the subsequent data destruction steps.

[0039] In another application scenario, when a communication device is disassembled while powered on, the tamper detection circuit 100 sends a power supply signal and a power-on signal. However, at this time, the processing module is already powered on, and the power supply module is also in normal power supply mode. Therefore, the power supply signal sent by the tamper detection circuit 100 is ignored, and the power-on and power-off signals are shielded to prevent the communication device from being powered off. Upon receiving the disassembly signal, the processing module immediately initiates a self-destruct mode, and the processing module destroys the data stored in the communication device.

[0040] In this embodiment, when the communication device is disassembled, regardless of whether the communication device is powered on or off, the processing module can determine that the communication device has been disassembled through the disassembly signal, thereby causing the communication device to immediately enter self-destruct mode, deleting a large amount of encrypted data, and improving the security of the communication device.

[0041] See Figure 2 , Figure 2 This is a schematic diagram of the structure of the second embodiment of the tamper detection circuit provided in this application. The tamper detection circuit 100 includes: an tamper switch SW, a first switch Q1, and a signal triggering module 10.

[0042] The tamper switch SW has its first terminal connected to the power module of the communication device, its second terminal grounded, and is configured to disconnect when the communication device is disassembled. The first terminal of the first switch Q1 is connected to the first terminal of the tamper switch SW, and the control terminal of the first switch Q1 is connected to the second terminal of the tamper switch SW. The first terminal of the signal trigger module 10 is connected to the second terminal of the first switch Q1, the second terminal of the signal trigger module 10 is connected to the processing module of the communication device, and the third terminal of the signal trigger module 10 is connected to the power module of the communication device.

[0043] The first switch Q1 is configured to connect the power module and the signal trigger module 10 in response to the tamper switch SW being disconnected. The signal trigger module 10 is configured to generate a power supply signal and a disassembly signal in response to the tamper switch SW being disconnected, so that when the communication device is in a powered-off state, the power module powers on the processing module in response to the power supply signal and controls the processing module to start. After the processing module starts, it destroys the data stored in the communication device in response to the disassembly signal.

[0044] For example, in order to limit the drive current at the control terminal of the first switch Q1, provide DC isolation and protection for the control terminal of the first switch Q1, and optimize the performance of the first switch Q1, a resistor can be connected to the control terminal of the first switch Q1, for example... Figure 2 The twelfth resistor R12 shown has its first end connected to the control terminal of the first switch Q1, and its second end grounded.

[0045] For example, when the tamper switch SW is in the closed state, the first switch Q1 is in the off state; when the tamper switch SW is in the open state, the first switch Q1 is in the on state, the voltage signal output from the second terminal of the first switch Q1 becomes high level, and this high level signal is output to the power module as a power supply signal through point A.

[0046] In some embodiments, the signal triggering module 10 includes: a disassembly signal generating unit 11, the first end of the disassembly signal generating unit 11 being connected to the second end of the first switch Q1, the second end of the disassembly signal generating unit 11 being connected to the processing module, and the disassembly signal generating unit 11 being configured to issue a disassembly signal in response to the anti-tamper switch SW being disconnected.

[0047] In some embodiments, the disassembly signal generating unit 11 includes: a first resistor R1, a second resistor R2, and a second switch Q2. The first end of the first resistor R1 is connected to the second end of the first switch Q1; the first end of the second resistor R2 is connected to the second end of the first resistor R1, and the second end of the second resistor R2 is grounded; the first end of the second switch Q2 is grounded, and the control terminal of the second switch Q2 is connected to the second end of the first resistor R1.

[0048] For example, when the anti-tamper switch SW is in the off state, the first switch Q1 is in the on state. The high-level signal output from the second terminal of the first switch Q1 is output to the second switch Q2 through the first resistor R1, so that the second switch Q2 is turned on, and the voltage signal at point B is pulled low through the second switch Q2. This low-level signal is output to the processing module as a tamper signal.

[0049] In some embodiments, for communication devices that cannot be set to power-on mode, after the power module detects the power supply signal, it also needs to detect the power-on signal in order to control the processing module to start. Therefore, the signal triggering module 10 further includes a power-on signal generating unit 12. The first end of the power-on signal generating unit 12 is connected to the second end of the first switch Q1, and the second end of the power-on signal generating unit 12 is connected to the power module. The power-on signal generating unit 12 is configured to issue a power-on signal in response to the tamper switch SW being open, so that when the communication device is in the off state, the power module powers on the processing module and controls the processing module to start in response to the power supply signal and the power-on signal.

[0050] In some embodiments, the power-on signal generating unit 12 includes: a first capacitor C1, a third resistor R3, a third switch Q3, a fourth resistor R4, and a second capacitor C2. The first terminal of the first capacitor C1 is connected to the second terminal of the first switch Q1; the first terminal of the third resistor R3 is connected to the second terminal of the first capacitor C1; the first terminal of the third switch Q3 is grounded, the second terminal of the third switch Q3 is connected to the power module, and the control terminal of the third switch Q3 is connected to the second terminal of the third resistor R3; the first terminal of the fourth resistor R4 is connected to the control terminal of the third switch Q3, and the second terminal of the fourth resistor R4 is grounded; the first terminal of the second capacitor C2 is connected to the first terminal of the fourth resistor R4, and the second terminal of the second capacitor C2 is grounded.

[0051] For example, when the tamper switch SW is in the open state, the first switch Q1 is in the on state. The high-level signal output from the second terminal of the first switch Q1 reaches the first terminal of the first capacitor C1, causing the first terminal of the first capacitor C1 to be momentarily energized. At this time, the first capacitor C1 exhibits short-circuit characteristics to instantaneous voltage changes. Therefore, the voltage signal at the control terminal of the third switch Q3 instantaneously becomes a high-level signal, causing the third switch Q3 to conduct. This causes the voltage signal at point C to be pulled low through the third switch Q3, and this low-level signal is output to the power module as a power-on signal. At the same time, the first capacitor C1, the third resistor R3, and the fourth resistor R4 form an RC charging circuit. When the capacitance value of the first capacitor C1 and the resistance values ​​of the third resistor R3 and the fourth resistor R4 are a certain fixed value, the charging time of the first capacitor C1 is fixed. When the first capacitor C1 is fully charged, the voltage signal level at the control terminal of the third switch Q3 becomes low. At this time, the third switch Q3 is in the off state, and the power-on signal generation unit 12 stops sending the power-on signal.

[0052] See Figure 3 , Figure 3 This is a schematic diagram of the structure of the third embodiment of the tamper detection circuit provided in this application. The tamper detection circuit 100 includes: an tamper switch SW, a first switch Q1, and a signal triggering module 10.

[0053] The tamper switch SW has its first terminal connected to the power module of the communication device, its second terminal grounded, and is configured to disconnect when the communication device is disassembled. The first terminal of the first switch Q1 is connected to the first terminal of the tamper switch SW, and the control terminal of the first switch Q1 is connected to the second terminal of the tamper switch SW. The first terminal of the signal trigger module 10 is connected to the second terminal of the first switch Q1, the second terminal of the signal trigger module 10 is connected to the processing module of the communication device, and the third terminal of the signal trigger module 10 is connected to the power module of the communication device.

[0054] The first switch Q1 is configured to connect the power module and the signal trigger module 10 in response to the tamper switch SW being disconnected. The signal trigger module 10 is configured to generate a power supply signal and a disassembly signal in response to the tamper switch SW being disconnected, so that when the communication device is in a powered-off state, the power module powers on the processing module in response to the power supply signal and controls the processing module to start. After the processing module starts, it destroys the data stored in the communication device in response to the disassembly signal.

[0055] Figure 3 The tamper detection circuit 100 shown is... Figure 2 The main difference in the tamper detection circuit 100 shown is the addition of components to the tamper signal generation unit 11. Therefore, the following mainly describes the additional components in the tamper signal generation unit 11. For other components in the tamper detection circuit 100, please refer to [link to relevant documentation]. Figure 2The related descriptions of the illustrated embodiments, for example Figure 3 The power-on signal generation unit 12 in the middle can be found in Figure 2 The description of the power-on signal generation unit 12 is omitted here.

[0056] For example, the processing module includes a narrowband processing unit and a broadband processing unit. The narrowband processing unit is connected to the second terminal of the disassembly signal generating unit 11; the broadband processing unit is connected to the second terminal of the disassembly signal generating unit 11. The power module powers on the narrowband processing unit in response to a power supply signal and controls the narrowband processing unit to start. After starting, the narrowband processing unit destroys the data stored in the communication device in response to the disassembly signal. The power module powers on the broadband processing unit in response to both the power supply signal and the power-on signal and controls the broadband processing unit to start. After starting, the broadband processing unit destroys the data stored in the communication device in response to the disassembly signal.

[0057] In one application scenario, when the processing module includes both a broadband processing unit and a narrowband processing unit, the voltage amplitudes of the output signals of the broadband processing unit and the narrowband processing unit may be different. Therefore, isolation devices are required to prevent backflow overvoltage. In one embodiment, isolation can be achieved by setting up diodes.

[0058] like Figure 3 As shown, the disassembly signal generation unit 11 includes: a first resistor R1, a second resistor R2, a second transistor Q2, a first diode D1, and a second diode D2. The first terminal of the first resistor R1 is connected to the second terminal of the first transistor Q1; the first terminal of the second resistor R2 is connected to the second terminal of the first resistor R1, and the second terminal of the second resistor R2 is grounded; the first terminal of the second transistor Q2 is grounded, and the control terminal of the second transistor Q2 is connected to the second terminal of the first resistor R1; the cathode of the first diode D1 is connected to the second terminal of the second transistor Q2, and the anode of the first diode D1 is connected to the processing module 20; the cathode of the second diode D2 is connected to the second terminal of the second transistor Q2, and the anode of the second diode D2 is connected to the processing module 20.

[0059] See Figure 4 , Figure 4 This is a schematic diagram of the structure of the first embodiment of the communication device provided in this application. The communication device 1000 includes a power module 200, a processing module 300, and an anti-tamper detection module 400.

[0060] The processing module 300 is connected to the power module 200, and the anti-tamper detection module 400 is connected to both the power module 200 and the processing module 300. The anti-tamper detection module 400 includes the anti-tamper detection circuit 100 as described above, which will not be repeated here.

[0061] See Figure 5 , Figure 5This is a schematic diagram of the structure of the second embodiment of the communication device provided in this application. The communication device 1000 includes a power module 200, a processing module 300, and an anti-tamper detection module 400.

[0062] The processing module 300 is connected to the power module 200, and the anti-tamper detection module 400 is connected to both the power module 200 and the processing module 300. The anti-tamper detection module 400 includes the anti-tamper detection circuit 100 as described above, which will not be repeated here.

[0063] In some embodiments, the power module 200 includes a backup battery and a first switching unit 210. The backup battery is connected to the first terminal of the tamper switch SW of the tamper detection circuit 100; the first terminal of the first switching unit 210 is connected to the backup battery, the second terminal of the first switching unit 210 is connected to the processing module 300, and the third terminal of the first switching unit 210 is connected to the signal triggering module 10 of the tamper detection circuit 100. The first switching unit 210 controls the backup battery to supply power to the processing module 300 in response to a power supply signal.

[0064] In some embodiments, the first switching unit 210 includes: a third capacitor C3, a fourth switch Q4, a fifth resistor R5, a sixth resistor R6, and a fifth switch Q5. The first terminal of the third capacitor C3 is connected to a backup battery, and the second terminal of the third capacitor C3 is grounded. The first terminal of the fourth switch Q4 is connected to the first terminal of the third capacitor C3, and the second terminal of the fourth switch Q4 is connected to the processing module 300. The first terminal of the fifth resistor R5 is connected to the first terminal of the fourth switch Q4, and the second terminal of the fifth resistor R5 is connected to the control terminal of the fourth switch Q4. The first terminal of the sixth resistor R6 is connected to the control terminal of the fourth switch Q4. The first terminal of the fifth switch Q5 is grounded, and the second terminal of the fifth switch Q5 is connected to the second terminal of the sixth resistor R6. The control terminal of the fifth switch Q5 is connected to the signal triggering module 10.

[0065] For example, when the power module 200 only includes a backup battery, if the communication device 1000 is disassembled, the tamper switch SW is disconnected. The power supply signal generated by the signal trigger module 10 of the tamper detection circuit 100 is input to the control terminal of the fifth switch Q5, and the fifth switch Q5 is turned on, causing the fourth switch Q4 to also be turned on. The power supply path from the backup battery to the processing module 300 is then connected, causing the processing module 300 to start. After receiving the disassembly signal, the communication device 1000 immediately enters self-destruct mode, and the processing module 300 destroys the data stored in the communication device 1000.

[0066] In some embodiments, the first switching unit 210 further includes a third diode D3 and a seventh resistor R7. To avoid reverse overvoltage, isolation can be achieved by setting the third diode D3. The cathode of the third diode D3 is connected to the control terminal of the fifth switch Q5, and the anode of the third diode D3 is connected to the second terminal of the first switch Q1. The first terminal of the seventh resistor R7 is connected to the control terminal of the fifth switch Q5, and the second terminal of the seventh resistor R7 is grounded.

[0067] See Figure 6 , Figure 6 This is a structural schematic diagram of the third embodiment of the communication device provided in this application. The communication device 1000 includes a power module 200, a processing module 300, and an anti-tamper detection module 400.

[0068] The processing module 300 is connected to the power module 200, and the anti-tamper detection module 400 is connected to both the power module 200 and the processing module 300. The anti-tamper detection module 400 includes the anti-tamper detection circuit 100 as described above, which will not be repeated here.

[0069] Figure 6 The communication device 1000 shown is Figure 5 The main difference between the communication device 1000 and the one shown is the addition of components to the power module 200, and the descriptions of the processing module 300 and storage module 500. Therefore, the following mainly describes the added components to the power module 200, the processing module 300, and the storage module 500. For other components in the communication device 1000, please refer to [link to documentation]. Figure 5 The related descriptions of the illustrated embodiments, for example Figure 6 The first switching unit 210 in the middle can be seen in Figure 5 The description of the first switching unit 210 in the process will not be repeated here.

[0070] In some embodiments, the power module 200 further includes: a main battery, a detection unit 220, and a second switching unit 230; the detection unit 220 is connected to the main battery and is configured to detect whether the main battery is present; the first end of the second switching unit 230 is connected to the second end of the first switching unit 210, the second end of the second switching unit 230 is connected to the processing module 300, the third end of the second switching unit 230 is connected to the detection unit 220, and the second switching unit 230 is configured to control the backup battery to supply power to the processing module 300 in response to the detection unit 220 detecting that the main battery is not present.

[0071] In some embodiments, the second switching unit 230 includes a sixth switch Q6, a seventh switch Q7, and an eighth resistor R8. The second end of the sixth switch Q6 is connected to the second end of the fourth switch Q4, and the control end of the sixth switch Q6 is connected to the detection unit 220. The first end of the seventh switch Q7 is connected to the first end of the sixth switch Q6, the second end of the seventh switch Q7 is connected to the processing module 300, and the control end of the seventh switch Q7 is connected to the detection unit 220. The first end of the eighth resistor R8 is connected to the first end of the seventh switch Q7, and the second end of the eighth resistor R8 is connected to the control ends of the sixth switch Q6 and the seventh switch Q7.

[0072] Specifically, when the main battery is present, the backup battery does not supply power to the processing module 300; instead, the main battery supplies power to the processing module 300 after voltage reduction. When the main battery is not present, if the communication device 1000 is disassembled, the tamper switch SW is open. Then, through the first switching unit 210 and the second switching unit 230, the backup battery supplies power to some circuits of the processing module 300, enabling some hardware and software to operate. This ensures that the processing module 300 can destroy the data stored in the tamper detection circuit 100 without consuming excessive power from the backup battery. When the main battery is not present and the communication device 1000 has not been disassembled, the tamper switch SW is closed. Then, through the first switching unit 210 and the second switching unit 230, the backup battery supplies power only to the tamper detection circuit 100, thereby reducing the consumption of the backup battery.

[0073] In this embodiment, the first switch Q1, the second switch Q2, the third switch Q3, the fourth switch Q4, the fifth switch Q5, the sixth switch Q6, and the seventh switch Q7 can be transistors, such as triodes, field-effect transistors, thyristors, and other devices that can perform switching functions. These devices are common devices in the field, and will not be described in detail in this embodiment.

[0074] In some embodiments, the detection unit 220 includes a comparator U, the input of which is connected to the main battery, and the output of which is connected to the second switching unit 230.

[0075] In some embodiments, the detection unit 220 further includes: a fourth diode D4, a fifth diode D5, a sixth diode D6, a fourth capacitor C4, a ninth resistor R9, a tenth resistor R10, a fifth capacitor C5, and an eleventh resistor R11. The anode of the fourth diode D4 is connected to the main battery; the cathode of the fifth diode D5 is connected to the anode of the fourth diode D4; the cathode of the sixth diode D6 is connected to the anode of the fifth diode D5, and the anode of the sixth diode D6 is connected to the processing module 300; the first terminal of the fourth capacitor C4 is connected to the cathode of the sixth diode D6, and the second terminal of the fourth capacitor C4 is grounded; the first terminal of the ninth resistor R9 is connected to the cathode of the fourth diode D4; the first terminal of the tenth resistor R10 is connected to the second terminal of the ninth resistor R9, and the second terminal of the tenth resistor R10 is grounded; the first reset terminal nMR of the comparator U is connected to the first terminal of the tenth resistor R10 and the VCC terminal of the comparator U, and the second reset terminal nRESET of the comparator U is connected to the control terminals of the sixth switch Q6 and the seventh switch Q7; the first terminal of the fifth capacitor C5 is connected to the first terminal of the tenth resistor R10, and the second terminal of the fifth capacitor C5 is grounded; the first terminal of the eleventh resistor R11 is connected to the second reset terminal nRESET of the comparator U, and the second terminal of the eleventh resistor R11 is grounded.

[0076] Specifically, when the main battery is present, the signal BATSBU_EN1 output from the second reset terminal nRESET of comparator U is a high-level signal. BATSBU_EN1 is output to the control terminals of the sixth switch Q6 and the seventh switch Q7, causing the sixth switch Q6 and the seventh switch Q7 to be in the off state. The power supply path from the backup battery to the processing module 300 is closed. At this time, the backup battery cannot supply power to the processing module 300, and the power supply to the processing module 300 is provided by the main battery after voltage reduction. When the main battery is not present, the second reset terminal nRESET of comparator U... When the SET output signal BATSBU_EN1 goes low, it turns on the sixth switch Q6 and the seventh switch Q7. When the tamper switch SW is off, the power supply signal from the tamper detection circuit 100 is output to the anode of the third diode D3, causing D3 to conduct. This turns on the fifth switch Q5, which in turn turns on the fourth switch Q4. The power supply path from the backup battery to the processing module 300 is then established, and the processing module 300 is activated. Upon detecting a tamper signal, the processing module 300 destroys the data stored in the tamper detection circuit 100. Similarly, when the tamper switch SW is closed, the power supply path from the backup battery to the processing module 300 is closed, ensuring that the backup battery's power is not consumed.

[0077] In some embodiments, the processing module 300 includes a broadband processing unit 310 and a narrowband processing unit 320; the narrowband processing unit 320 is connected to the second end of the second switching unit 230.

[0078] In some embodiments, the broadband processing unit 310 and the narrowband processing unit 320 have a low-power state. The power supply module 200 powers on the narrowband processing unit 320 in response to a power supply signal and controls the narrowband processing unit 320 to enter the low-power state. The power supply module 200 powers on the broadband processing unit 310 in response to a power supply signal and a power-on signal and controls the broadband processing unit 310 to enter the low-power state.

[0079] In some embodiments, the power module 200 further includes a management unit 240 connected to the tamper detection circuit 100, the second terminal of the second switching unit 230, and the broadband processing unit 310. The management unit 240 is configured to control the broadband processing unit 310 to start in response to a power-on signal.

[0080] In some embodiments, the communication device 1000 further includes a storage module 500 connected to a broadband processing unit 310, which is configured to destroy the data stored in the storage module 500 in response to a disconnection signal.

[0081] Specifically, the storage module 500 stores a large amount of encrypted data, such as video data. When the communication device 1000 is powered off and the tamper switch SW is open, the tamper detection circuit 100 sends a power supply signal. If the main battery is not present, the backup battery will be switched to power the device. Upon receiving the power-on signal, the management unit 240 controls the small system within the broadband processing unit 310 to start. At this time, the processors in the broadband processing unit 310 and the narrowband processing unit 320 detect the tamper signal, determine that the communication device 1000 has been tampered with, and cause the communication device 1000 to enter a power-saving self-destruct mode. Power-saving self-destruction refers to supplying power only to some necessary circuits (for example, providing low-voltage power only to the small systems of broadband processing unit 310 and narrowband processing unit 320) to ensure that the small systems of broadband processing unit 310 and narrowband processing unit 320 can operate normally without consuming too much power from the backup battery, thereby extending the battery's operating time. For example, only the broadband and narrowband small systems run the BootLoader program, while other non-essential circuits and software are not enabled, and the data stored in the storage module 500 is erased in the shortest possible time. At the same time, important data stored inside the broadband processing unit 310 and narrowband processing unit 320, such as keys, are destroyed.

[0082] In the several embodiments provided in this application, it should be understood that the disclosed methods and devices can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For instance, the division of modules or units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed.

[0083] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment, depending on actual needs.

[0084] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0085] The above description is merely an embodiment of this application and does not limit the patent scope of this application. Any equivalent structural or procedural transformations made using the content of this application's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of this application.

Claims

1. A tamper-proof detection circuit, characterized in that, The tamper detection circuit, applied to communication equipment, includes: A tamper switch, wherein the first terminal of the tamper switch is connected to the power module of the communication device, the second terminal of the tamper switch is grounded, and the tamper switch is configured to disconnect when the communication device is disassembled; A first switch, the first end of which is connected to the first end of the tamper switch, and the control end of which is connected to the second end of the tamper switch; A signal triggering module, wherein a first end of the signal triggering module is connected to a second end of the first switch, a second end of the signal triggering module is connected to a processing module of the communication device, and a third end of the signal triggering module is connected to a power module of the communication device; The first switch is configured to connect the power module and the signal triggering module in response to the tamper switch being open; the signal triggering module is configured to generate a power supply signal and a disassembly signal in response to the tamper switch being open, so that when the communication device is in a powered-off state, the power module powers on the processing module in response to the power supply signal and controls the processing module to start; after the processing module starts, it destroys the data stored in the communication device in response to the disassembly signal.

2. The tamper detection circuit according to claim 1, characterized in that, The signal triggering module includes: A disassembly signal generating unit is provided, wherein a first end of the disassembly signal generating unit is connected to a second end of the first switch, and a second end of the disassembly signal generating unit is connected to the processing module. The disassembly signal generating unit is configured to emit the disassembly signal in response to the tamper switch being opened.

3. The tamper detection circuit according to claim 2, characterized in that, The disassembly signal generation unit includes: A first resistor, the first end of which is connected to the second end of the first switch; The second resistor has a first end connected to the second end of the first resistor, and the second end of the second resistor is grounded. The second switch has its first terminal grounded and its control terminal connected to the second terminal of the first resistor.

4. The tamper detection circuit according to claim 2, characterized in that, The signal triggering module further includes: A power-on signal generating unit is provided, wherein a first end of the power-on signal generating unit is connected to a second end of the first switch, and a second end of the power-on signal generating unit is connected to the power supply module. The power-on signal generating unit is configured to issue a power-on signal in response to the tamper switch being open, so that when the communication device is in a power-off state, the power supply module powers on the processing module and controls the processing module to start in response to the power supply signal and the power-on signal.

5. The tamper detection circuit according to claim 4, characterized in that, The power-on signal generating unit includes: A first capacitor, wherein a first terminal of the first capacitor is connected to a second terminal of the first switch; A third resistor, the first end of which is connected to the second end of the first capacitor; The third switch has a first terminal grounded, a second terminal connected to the power module, a control terminal connected to the second terminal of the third resistor, and the second terminal of the third switch is used to output the power-on signal. The fourth resistor has its first end connected to the control terminal of the third switch and its second end grounded. The second capacitor has its first terminal connected to the first terminal of the fourth resistor, and its second terminal grounded.

6. The tamper detection circuit according to claim 4, characterized in that, The processing module includes: Narrowband processing unit, connected to the second end of the disassembly signal generation unit; Broadband processing unit, connected to the second end of the disassembly signal generation unit; The power module powers on the narrowband processing unit in response to the power supply signal and controls the narrowband processing unit to start. After the narrowband processing unit starts, it destroys the data stored in the communication device in response to the disassembly signal. The power module powers on the broadband processing unit in response to the power supply signal and the power-on signal and controls the broadband processing unit to start. After the broadband processing unit starts, it destroys the data stored in the communication device in response to the disassembly signal.

7. The tamper detection circuit according to claim 6, characterized in that, The disassembly signal generation unit includes: A first resistor, the first end of which is connected to the second end of the first switch; The second resistor has a first end connected to the second end of the first resistor, and the second end of the second resistor is grounded. The second switch has its first terminal grounded and its control terminal connected to the second terminal of the first resistor. A first diode, the cathode of which is connected to the second terminal of the second switch, and the anode of which is connected to the broadband processing unit, the anode of which is used to output the disassembly signal to the broadband processing unit; The second diode has its cathode connected to the second terminal of the second switch and its anode connected to the narrowband processing unit. The anode of the second diode is used to output the disassembly signal to the narrowband processing unit.

8. A communication device, characterized in that, The communication device includes: Power module; The processing module is connected to the power module; A tamper detection module is connected to the power module and the processing module, and the tamper detection module includes the tamper detection circuit as described in any one of claims 1-7.

9. The communication device according to claim 8, characterized in that, The power module includes: A backup battery is connected to the first terminal of the tamper detection circuit's tamper switch. A first switching unit has a first end connected to the backup battery, a second end connected to the processing module, and a third end connected to the signal triggering module of the anti-tamper detection circuit. The first switching unit is configured to control the backup battery to supply power to the processing module in response to the power supply signal.

10. The communication device according to claim 9, characterized in that, The first switching unit includes: A third capacitor, the first terminal of which is connected to the backup battery, and the second terminal of which is grounded; The fourth switch has its first end connected to the first end of the third capacitor and its second end connected to the processing module. The fifth resistor has its first end connected to the first end of the fourth switch, and its second end connected to the control end of the fourth switch. The sixth resistor, the first end of which is connected to the control terminal of the fourth switch; The fifth switch has its first terminal grounded, its second terminal connected to the second terminal of the sixth resistor, and its control terminal connected to the signal triggering module.

11. The communication device according to claim 9, characterized in that, The power module also includes: Main battery; A detection unit, connected to the main battery, is configured to detect whether the main battery is in place; A second switching unit has a first end connected to the second end of the first switching unit, a second end connected to the processing module, and a third end connected to the detection unit. The second switching unit is configured to control the backup battery to supply power to the processing module in response to the detection unit detecting that the main battery is not in place.

12. The communication device according to claim 11, characterized in that, The second switching unit includes: A sixth switch, the second end of which is connected to the second end of the fourth switch, and the control end of the sixth switch is connected to the detection unit; The seventh switch has its first end connected to the first end of the sixth switch, its second end connected to the processing module, and its control end connected to the detection unit. The eighth resistor has its first end connected to the first end of the seventh switch, and its second end connected to the control terminals of the sixth and seventh switches.

13. The communication device according to claim 11, characterized in that, The detection unit includes: A comparator, the input of which is connected to the main battery, and the output of which is connected to the second switching unit.

14. The communication device according to claim 9, characterized in that, The processing module includes: Broadband processing unit; Narrowband processing unit, connected to the second terminal of the second switching unit; and / or The power module further includes a management unit connected to the anti-tamper detection circuit, the second terminal of the second switching unit, and the broadband processing unit. The management unit is configured to control the broadband processing unit to start in response to the power-on signal.

15. The communication device according to claim 14, characterized in that, The broadband processing unit and the narrowband processing unit have a low-power state. The power module powers on the narrowband processing unit in response to the power supply signal and controls the narrowband processing unit to enter the low-power state. The power module powers on the broadband processing unit in response to the power supply signal and the power-on signal and controls the broadband processing unit to enter the low-power state.

16. The communication device according to claim 8, characterized in that, When the communication device is powered on, the processing module destroys the data stored in the communication device in response to the disconnect signal.

Images