Error Detection Checking Circuit for Data Processor Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional UmSLC modules for checking error detection functionality in data processing means, such as chip cards, are inadequate as they only detect certain types of attacks and cannot differentiate between correct and incorrect execution of error detection functionality, leading to potential manipulation and data compromise.

Innovation Solution

An apparatus and method that includes a control means to simulate errors in the data processing means during operation, checking if an error signal is generated correctly, and if not, triggering an alarm to indicate an attack, thereby enhancing security by ensuring manipulation is detected.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional UmSLC modules are used to check error detection functionality, then the checking mechanism is simple and easy to implement, but the security is insufficient as they cannot detect all types of attacks and cannot differentiate between correct and incorrect execution

Engineering Contradiction:
ImprovesecurityVSAvoidchecking mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The control means intentionally introduces artificial errors into the data processing means before the error detection functionality executes. This preliminary action creates a known test condition where the system should detect an error, allowing verification that the error detection functionality is working correctly rather than just checking if it produces any output.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system monitors whether the error detection functionality correctly identifies the artificially introduced errors. This feedback mechanism verifies the operational status of the error detection functionality, allowing the system to determine if the error detection is working properly or has been compromised by an attack.

Inventive Principle:
Principle #23Feedback

2Adaptability or versatility

If analog sensors are used for attack detection, then the detection mechanism is straightforward, but the sensors are only sensitive to certain types of attacks and can be manipulated to not detect errors

Engineering Contradiction:
Improveattack detection capabilityVSAvoidvulnerability to manipulation
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The data processing means performs self-testing by having the control means introduce artificial errors and monitoring whether the error detection functionality correctly identifies them. This self-service approach allows the system to verify its own security status without relying on external sensors that can be manipulated, making the detection capability adaptable to various attack types while reducing vulnerability to manipulation.

Inventive Principle:
Principle #25Self-service

3Reliability

If error detection functionality is continuously monitored, then security against manipulation is improved, but the device complexity and computational overhead increase

Engineering Contradiction:
Improvemanipulation detectionVSAvoidmonitoring system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The control means periodically introduces artificial errors into the data processing means at specific intervals or under specific conditions, rather than continuously monitoring every operation. This periodic testing approach maintains security against manipulation by regularly verifying error detection functionality while reducing device complexity and computational overhead compared to continuous monitoring.

Inventive Principle:
Principle #19Periodic action

Data Source

PatentUS8918679B2Apparatus and method for checking an error detection functionality of a data processor
Publication Date: 2014.12.23 INFINEON TECHNOLOGIES AG
  • US8918679B2 patent drawing
  • US8918679B2 patent drawing
  • US8918679B2 patent drawing

AI summary

An apparatus for checking an error detection functionality of a data processing circuit, comprising an arithmetic logic unit, which provides an output datum based on an input datum, and an error detection circuit that executes the error detection functionality and detects an error based on the output datum during correct execution of the error detection functionality, and generates an error signal, if an error is present, which comprises a control circuit that passes the error signal through to an error signal output in a normal operating mode, and blocks the error signal in a checking mode, does not let the error signal pass to the error signal output, influences the arithmetic logic unit, the error detection circuit or the input datum such that the error detection circuit detects an error during correct execution of the error detection functionality, and, if no error signal is received in response to influencing, outputs an alarm signal indicating an incorrect execution of the error detection functionality.