Parallel Digital Sensor Arrays for IC Perturbation Attack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for protecting integrated circuits from perturbation attacks, such as fault injection attacks, are inadequate due to their reliance on sensors that trigger Boolean alarms, making it difficult to distinguish between false positives and actual attacks, and are not compatible with the fast reaction times required by cryptographic algorithms like AES-128, which executes in a limited number of clock cycles.
Innovation Solution
A system comprising a sensing unit with multiple digital sensors arranged in parallel, each providing a binary output, and an analysis unit that generates a multi-bit vector to detect perturbation attacks, using techniques like Hamming distance analysis and machine learning algorithms to classify attacks and differentiate between false and true positives, while also monitoring aging and physical parameters.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If conventional sensors with Boolean alarms are used to detect perturbation attacks, then the detection mechanism is simple, but it is difficult to distinguish between false positives and actual attacks
Solution Approach 1:
The patent divides the detection system into multiple digital sensors (at least two) arranged in parallel, each providing independent binary outputs. This segmentation allows the system to analyze multiple detection signals simultaneously, improving the ability to distinguish true attacks from false positives through combined analysis rather than relying on a single Boolean alarm
Solution Approach 2:
The patent transitions from single-bit Boolean alarms to multi-bit binary vectors by combining outputs from multiple sensors. This dimensional expansion creates a richer detection space where attack patterns can be differentiated from normal variations through Hamming distance analysis and machine learning classification
2Speed
If conventional alarm-based detection is used, then the response mechanism is simple, but the reaction time is too slow for cryptographic algorithms like AES-128
Solution Approach 1:
The patent implements preliminary classification of detection signals using machine learning algorithms trained on normal versus attack patterns. This preliminary action enables the system to quickly identify and respond to genuine attacks while filtering out false positives, reducing the time needed for analysis and response
Solution Approach 2:
The patent replaces conventional mechanical alarm-based detection with electronic digital sensor arrays and computational analysis methods. This substitution enables faster processing and classification of detection signals, achieving the speed requirements for protecting time-critical cryptographic operations
3Reliability
If multiple digital sensors are used to improve detection accuracy, then the ability to classify attacks improves, but the device complexity increases
Solution Approach 1:
The patent designs digital sensors with universal functionality that can detect multiple types of perturbations (power supply variations, clock frequency changes, temperature fluctuations) through a common binary output interface. This multi-functionality allows reliable attack detection across different threat types without proportionally increasing system complexity
Solution Approach 2:
The patent uses identical or similar digital sensor units arranged in parallel, where each sensor is a copy of the others. This copying approach simplifies the overall system design by using standardized modules rather than complex heterogeneous sensor arrays, maintaining reliability through redundancy while controlling complexity
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
There is provided a device of protecting an Integrated Circuit from perturbation attacks. The device comprises a sensing unit (30) configured to detect a perturbation attack, the sensing unit comprising a set of digital sensors comprising at least two sensors, the sensors being arranged in parallel. Each digital sensor provides a digitized bit output having a binary value, in response to input data, the sensing unit being configured to deliver at least one binary vector comprising a multi-bit value, the multi-bit value comprising at least two bit outputs provided by the set of digital sensors. The sensing device (3) further comprising an analysis unit (31), the analysis unit being configured to receive at least one binary vector provided by the sensing unit (30), the analysis unit being configured to detect a perturbation attack from the at least one binary vector.