Supply Chain Authentication Counter Sync Against Asynchronous Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The CTR-SHIELD protocol is vulnerable to asynchronous attacks, leading to asynchrony in counter information and potential permanent loss of availability due to counter exhaustion.
Innovation Solution
A method is introduced to detect asynchronous attacks by comparing counter values between a dielet and an authentication server, replacing messages with random values when an attack is detected, and synchronizing counter values using sensor status bits to prevent exhaustion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the CTR-SHIELD protocol is used to protect IC supply chain, then authentication and confidentiality are improved, but the system becomes vulnerable to asynchronous attacks causing counter information asynchrony
Solution Approach 1:
The patent applies preliminary action by establishing counter value synchronization before authentication occurs. The server预先 (in advance) sets up the counter value in the database, and the dielet stores its local counter value. Before each authentication, the system compares these pre-established counter values to detect asynchrony, preventing the harmful effect before it can compromise security.
Solution Approach 2:
The patent implements feedback by continuously monitoring and comparing counter values between the dielet and server during authentication processes. When asynchrony is detected through this feedback mechanism, the system responds by replacing the message with a random value, creating a closed-loop control that adapts to prevent further authentication failures.
2Productivity
If counter values are continuously incremented for authentication, then authentication capability is maintained, but permanent loss of availability occurs when counter exhaustion is reached
Solution Approach 1:
The patent applies beforehand cushioning by establishing a synchronization mechanism that prevents counter exhaustion from causing permanent availability loss. The server maintains a database of counter values and actively synchronizes them with dielets through authentication processes. This cushioning mechanism ensures that even if counters increment continuously, the system has backup synchronization paths to restore availability if exhaustion approaches.
Data Source
AI summary
Disclosed herein are a method for countering an asynchronous attack on a supply chain security protocol and an apparatus for the same. The method includes, in a supply chain security protocol performed by a terminal device into which a dielet is inserted and an authentication server, performing a self-generation mode in which a counter value within the dielet is registered in the authentication server, performing a read-out mode in which whether an asynchronous attack occurs is detected by comparing the counter values respectively stored in the dielet and the authentication server when a message for communication is sent, and replacing a message for the communication with a random value when an asynchronous attack is detected.


