Glitch Detection Circuitry Mitigates Processor Power Supply Attacks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Payment terminals are vulnerable to processor glitch attacks, where attackers attempt to induce abnormal conditions to access or manipulate payment information, leading to fraudulent transactions and data breaches.
Innovation Solution
Incorporating glitch detection and mitigation circuitry within the payment terminal's power supply system, which monitors voltage fluctuations and anomalous processing operations to identify and respond to potential attacks by generating a glitch indicator, storing relevant information in battery-backed memory, and executing corrective actions such as delaying operations or disabling components.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If glitch detection and mitigation circuitry is incorporated into the power supply system, then security against processor glitch attacks is improved, but device complexity increases
Solution Approach 1:
The glitch detection circuitry is integrated within the existing power supply system rather than being implemented as a separate external component. The monitoring circuit is combined with the voltage regulator and power management integrated circuit (PMIC), allowing security functionality to be embedded in the existing power delivery infrastructure. This merging approach improves security while minimizing the increase in device complexity by reusing existing power supply components.
Solution Approach 2:
The power supply system is designed to perform multiple functions: it provides voltage regulation for normal operation and simultaneously performs glitch detection and security monitoring. The monitoring circuit uses the same power supply nodes to both deliver power and detect abnormal conditions, making the system multi-functional. This universality allows security capabilities to be added without requiring entirely separate dedicated hardware for detection.
2Measurement precision
If monitoring of voltage fluctuations and processing operations is implemented, then detection accuracy of glitch attacks is improved, but use of energy increases
Solution Approach 1:
The monitoring circuit performs partial monitoring by focusing only on critical power supply nodes and specific voltage thresholds that are most indicative of glitch attacks. Rather than continuously monitoring all voltage fluctuations with high precision, the system monitors for specific anomaly patterns that exceed predetermined thresholds. This partial monitoring approach maintains adequate detection accuracy while reducing the energy consumption compared to comprehensive continuous monitoring.
Solution Approach 2:
The system implements feedback mechanisms where the monitoring circuit continuously observes power supply conditions and adjusts its monitoring intensity based on detected anomalies. When normal operating conditions are detected, monitoring operates at a lower energy state. When suspicious patterns are detected, the system increases monitoring precision and triggers corrective actions. This feedback-based adaptive monitoring balances detection accuracy with energy consumption by intensifying monitoring only when necessary.
Data Source
AI summary
A transaction device includes a bootloader that a processing unit executes during device startup. The bootloader causes the processing unit to access values from a persistent memory that are relevant to whether a glitch has occurred on a power supply for the processing unit. Based on the values that are acquired from the persistent memory, the processing unit may implement countermeasures, such as disabling certain device operations or delaying the device booting process.