Programmable Integrated Circuit Tampering Detection via Data Randomization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for detecting tampering with data in programmable integrated circuits are inadequate, as they can be tampered with before authentication tags are checked, and modifications must conform to specific data transfer protocols, making it challenging to effectively detect alterations.
Innovation Solution
The method involves modifying data to introduce randomness and inserting redundancy check values, such as random bits or cyclic redundancy checks, to enable error detection and encryption, allowing for the detection of tampering by performing error detection on each instruction and using multiple encoded values to confuse adversaries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication tags are used to verify data integrity, then data security is improved, but tampering can still occur before the authentication tag is checked
Solution Approach 1:
The patent applies preliminary action by inserting redundancy check values (such as parity bits or checksums) into the data stream before transmission and authentication tag verification. These redundancy values enable detection of tampering attempts that occur before the authentication tag is checked, preventing unauthorized modifications from going undetected.
Solution Approach 2:
The patent uses redundancy check values as intermediary elements between the data and the authentication tag. These intermediary values serve as an additional layer of verification that can detect tampering attempts before the final authentication check, acting as a mediator that protects against premature or partial modifications.
2Ease of manufacture
If data transfer protocols are used to control data transmission, then data transmission is standardized, but modifications to detect tampering must conform to the protocol
Solution Approach 1:
The patent applies segmentation by dividing the data stream into segments and inserting redundancy check values at specific intervals or at the beginning/end of each segment. This allows the tampering detection mechanism to work within existing data transfer protocols while adding detection capability without requiring complete protocol redesign.
Solution Approach 2:
The patent uses parameter changes by modifying specific bits or bytes in the data stream to create redundancy check values. These parameter modifications (such as adding parity bits or checksum fields) can be integrated into existing protocol parameters, allowing tampering detection without fundamentally changing the data transfer protocol structure.
3Reliability
If randomness is introduced into data to prevent tampering, then detection capability is improved, but data processing complexity increases
Solution Approach 1:
The patent applies copying by creating redundant copies of data or data portions and using these copies to generate check values. Instead of completely transforming the data with randomness, the patent creates copies that can be processed to generate redundancy check values, reducing the computational complexity while maintaining detection capability.
Solution Approach 2:
The patent uses simple, lightweight redundancy check values (such as parity bits or simple checksums) that are computationally inexpensive to calculate and verify. These disposable-like check values provide effective tampering detection without requiring complex, resource-intensive processing, making the solution practical for embedded systems.
Data Source
AI summary
A method of enabling detection of tampering with data provided to a programmable integrated circuit is described. The method comprises modifying a portion of the data to establish randomness in the data; and inserting, by a computer, a redundancy check value in the portion, wherein the redundancy check value is based upon the modified portion of the data. A programmable integrated circuit is also described.