Circuit Element Dummy Value Insertion for Side-Channel Attack Resistance

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for protecting electronic devices from unauthorized access through side-channel attacks, such as power analysis, are inadequate as they rely on measurable signals that can be inferred by attackers, especially when repeated measurements integrate low-amplitude signals.

Innovation Solution

The implementation of a method that dynamically inserts a dummy value into circuit elements in succession with a secret value, obscuring power consumption patterns by introducing masking transitions that an attacker cannot predict, thereby foiling side-channel attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If existing protection methods against side-channel attacks are used, then some security protection is provided, but the power consumption patterns remain predictable and can be inferred by attackers through repeated measurements

Engineering Contradiction:
Improvesecurity protectionVSAvoidpredictable power consumption patterns
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

A dummy value generator is introduced as an intermediary component that produces dummy values to be inserted into the data path alongside or instead of actual secret data. This intermediary mechanism masks the real data transitions, making power consumption patterns unpredictable to attackers while maintaining legitimate data processing functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary actions by inserting dummy values into circuit elements before the actual secret value is loaded, or in addition to it. This preliminary masking action ensures that even if an attacker measures power consumption, they cannot distinguish between transitions caused by dummy values and those caused by secret values, thereby preventing side-channel attacks.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If dummy values are inserted into circuit elements to mask transitions, then side-channel attack resistance is improved, but device complexity increases

Engineering Contradiction:
Improveside-channel attack resistanceVSAvoidcircuit element operations
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The dummy value generator is designed to work with existing circuit elements and can be integrated into various parts of the system without requiring complete redesign. The same mechanism can be applied to different circuit elements (registers, buffers, memory) making the solution universally applicable while managing complexity through standardized implementation.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

Instead of modifying every circuit element individually, the system creates copies of data (dummy values) that mimic the behavior of real data in terms of power consumption characteristics. These dummy values are inserted into the data path using existing switching mechanisms, avoiding the need to redesign fundamental circuit architecture.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS9135453B2Preventing data extraction by side-channel attack
Publication Date: 2015.09.15 CISCO TECHNOLOGY INC
  • US9135453B2 patent drawing
  • US9135453B2 patent drawing
  • US9135453B2 patent drawing

AI summary

A method for data transfer includes receiving a control signal triggering a transfer of a secret value into an element (24) of a circuit (20). In response to the control signal, a dummy value (42, 50) and the secret value are inserted in succession into the element of the circuit.