Integrated Circuit Data Line Pre-Charge Attack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for protecting integrated circuits against attacks that manipulate memory content or read access during the pre-charge process are inefficient, particularly in terms of space usage and performance, as they require significant memory space for error correction codes or cannot utilize existing components for light detection during regular operation.
Innovation Solution
Utilizing existing data lines in integrated circuits as sensors by connecting them to source- or drain-areas of MOS-transistors, which can detect disturbances during pre-charge through voltage collapse, and employing a differential amplifier to monitor these lines for non-monotonic voltage changes, allowing for detection of attacks even when the memory is inactive.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If error correction codes are used to protect memory against manipulation, then security is improved, but memory space is excessively consumed
Solution Approach 1:
The patent makes existing data lines serve dual functions: carrying data signals during normal operation and acting as light sensors for attack detection when inactive. This eliminates the need for dedicated sensor components and their associated memory space, while maintaining security functionality.
Solution Approach 2:
The patent uses the integrated circuit's own existing infrastructure (data lines, wells) for attack detection rather than requiring separate dedicated components. The data lines self-serve as sensors during inactive periods, and the wells that are normally disturbed by attacks are themselves used as the detection mechanism.
2Reliability
If dedicated light detector components are added to detect attacks, then security is improved, but device complexity increases
Solution Approach 1:
Existing data lines are made to perform both their original function of carrying data and the additional function of serving as light sensors. This eliminates the need for separate dedicated light detector components, thereby reducing device complexity while maintaining security.
Solution Approach 2:
The patent uses the well regions as an intermediary mechanism that translates light absorption into detectable electrical signals. Rather than adding complex dedicated sensors, the well acts as a natural intermediary that converts optical attacks into electrical disturbances that can be detected by existing circuitry.
3Measurement precision
If separate sensor components are used for attack detection, then detection capability is improved, but manufacturing complexity increases
Solution Approach 1:
The patent utilizes existing data lines and well structures that are already part of the standard integrated circuit fabrication process. By making these existing structures serve dual purposes, the solution avoids adding new manufacturing steps or components, thereby maintaining ease of manufacture while improving detection capability.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This method effectively detects attacks on memory content and read access by monitoring pre-charge voltage changes, enhancing security without significant performance or space penalties, and is applicable to various integrated circuits, especially those in critical applications like smartcards.
Implementation Method 1
the use of a well diode as a light detector as described in the WO2004/047172 A1
Implementation Method 2
detect disturbances during pre-charge through voltage collapse, and employing a differential amplifier to monitor these lines for non-monotonic voltage changes
Data Source
Figure 1
AI summary
A method of controlling a pre-charge process of a data line (21, 22) in an integrated circuit (100) comprises the step of monitoring a rate of change of a voltage applied to the data line (21, 22) for enhancing the security. Further a respective integrated circuit (100) is disclosed.