IC Package Voltage Attack Detection With Distributed Flip-Flop Sensors
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems are inadequate in detecting and counteracting physical hacker attacks that modify chip voltage values locally, such as Local EM Attacks (LEMA) and Laser Fault Injection Attacks (LFIA), which can compromise sensitive information without opening the package.
Innovation Solution
A method involving a high number of distributed detectors (sensors) over an integrated circuit package, using flip-flops and logic gates to detect voltage variations, generating alarm signals, and employing Nested Vector Interrupt Control (NVIC) for sophisticated interrupt management to counter attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If traditional detection methods are used, then device complexity is low, but detection precision is insufficient for localized voltage modifications
Solution Approach 1:
The chip is divided into multiple detection zones with distributed detectors (sensors) placed at different locations. Each detector monitors voltage variations in its specific zone, enabling localized detection of hacker attacks while maintaining overall system simplicity through modular architecture.
Solution Approach 2:
Detectors act as intermediary elements between the voltage supply network and the control logic. These detectors sense voltage variations caused by hacker attacks and convert them into detectable signals, bridging the gap between physical voltage changes and digital response mechanisms.
2Reliability
If distributed detectors are deployed across the chip, then detection coverage is improved, but manufacturing complexity increases
Solution Approach 1:
The detection system is segmented into independent detector units that can be distributed across the chip. This segmentation allows for standardized manufacturing of individual detector modules that can be systematically integrated, reducing overall manufacturing complexity despite increased detection coverage.
Solution Approach 2:
The system allows dynamic configuration of detector parameters and detection thresholds. This flexibility enables adaptation to different manufacturing variations and chip layouts, making the system easier to manufacture across different production batches while maintaining comprehensive detection coverage.
3Adaptability or versatility
If multiple detector types are used, then detection versatility is improved, but device complexity increases
Solution Approach 1:
The detector architecture employs universal detector units that can function in multiple detection modes. These multi-functional detectors can adapt to different attack types (voltage modification, electromagnetic attacks, laser fault injection) without requiring completely separate detection systems, thus maintaining versatility while controlling complexity.
Solution Approach 2:
The detection system implements dynamic detector configuration where detector types and parameters can be adjusted based on detected threats. This dynamic adaptability allows the system to handle diverse attack scenarios with a unified detector base, improving versatility without permanently increasing hardware complexity.
4Measurement precision
If detectors are placed in sensitive areas, then detection precision is improved, but ease of operation decreases due to setup requirements
Solution Approach 1:
Detectors are pre-configured and pre-positioned in optimal locations during chip manufacturing. This preliminary action ensures that detectors are already in the best positions for detecting voltage variations in sensitive areas, eliminating the need for complex post-manufacturing setup and calibration operations.
Solution Approach 2:
The detection system implements self-calibration and self-configuration capabilities. Detectors automatically adjust their parameters and thresholds based on the operational environment and detected patterns, reducing the need for manual setup and making the system easier to operate while maintaining high detection precision in sensitive areas.
Data Source
AI summary
Hacker attacks that involve stimulating voltage variations in an integrated circuit package are detected by deploying a network of elementary detectors distributed across the integrated circuit package. Each detector is positioned at a respective location within the package and is configured to generate an alarm signal in response to a voltage variation occurring at that specific location. The elementary detectors include a first component and a second component (such as flip-flops) with respective outputs configured to be set to complementary binary levels. Logic circuitry is coupled to the outputs of the first and second components and is designed to generate an alarm signal when the outputs of the first and second components no longer exhibit complementary binary levels, indicating a hacker attack involving a localized voltage variation within the integrated circuit package.