Flip-Flop Sequence Detection for Laser Fault Injection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current countermeasures for laser fault injection attacks on cryptographic devices are incomplete, difficult to quantify, and costly, failing to provide comprehensive protection against such attacks.

Innovation Solution

A cryptographic integrated circuit (IC) with a fault injection attack detection cluster using Flip-Flops (FFs) configured to generate sequences of bits belonging to a set of allowed sequences, detecting anomalies and generating a signal for fault injection attacks, and a security manager to respond by modifying the cryptographic algorithm's output or disabling the IC if necessary.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If existing countermeasures (such as shielding or analog light sensors) are implemented to protect against laser fault injection attacks, then security protection is provided, but the device complexity increases and cost increases

Engineering Contradiction:
Improveprotection against laser fault injection attacksVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces physical/mechanical protection mechanisms (shielding, analog light sensors) with a digital detection system using Flip-Flops and logical gates. The detection cluster uses digital logic to monitor sequences of bits and identify fault injection attacks through pattern recognition, substituting mechanical/optical components with electronic/digital components that are more integrated and less complex.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent creates a digital model or representation of expected normal operation through predefined sequences of bits stored in Flip-Flops. The detection system compares actual operation against this digital model, identifying deviations that indicate attacks. This copying approach allows verification without physical sensors.

Inventive Principle:
Principle #26Copying

2Difficulty of detecting and measuring

If existing countermeasures (such as analog light sensors) are implemented to detect laser beams, then detection capability is provided, but the sensor occupies significant surface area and increases cost

Engineering Contradiction:
Improvedetection capabilityVSAvoidsensor surface area
Core Design Contradiction:
Difficulty of detecting and measuringVSArea of stationary object

Solution Approach 1:

The patent replaces physical light sensors with a digital detection system using Flip-Flops and logical gates. The detection cluster uses digital logic to monitor sequences of bits and identify fault injection attacks through pattern recognition, substituting mechanical/optical components with electronic/digital components that occupy minimal surface area.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent transitions from spatial detection (physical sensors occupying surface area) to temporal/digital detection (monitoring sequences of bits over time). Instead of detecting laser beams directly in physical space, the system detects attacks through changes in digital state sequences, moving the detection problem from spatial to temporal/domain space.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS11546132B2Detection of laser fault injection attacks on cryptographic devices
Publication Date: 2023.01.03 SECURE IC
  • US11546132B2 patent drawing
  • US11546132B2 patent drawing
  • US11546132B2 patent drawing

AI summary

Countermeasures against fault injection attacks of a cryptographic integrated circuit, and more specifically laser fault injection attacks are provided. The invention consists in generating sequences of bits belonging to a set of allowed sequences, and storing these sequences on a set of Flip-Flops. Then the sequences stored on the Flip-Flops are checked and, if they do not belong to the allowed sequence, this is the sign that a fault injection attack occurred and caused a bit flip in one of the flip-flops. An alarm signal is then generated.