IC Voltage Monitoring Circuit for Glitch Attack Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Integrated circuits (ICs) are vulnerable to various types of voltage and frequency attacks, which can compromise their security functions and lead to unauthorized access to confidential data, as existing detection methods are not effective in distinguishing between legitimate clock fluctuations and malicious voltage-based attacks.
Innovation Solution
The implementation of an Attack Protection Circuit (APC) within the IC, comprising an analog front-end circuit and a digital averaging circuit, which compares the supply voltage to multiple thresholds and estimates duty-cycles to detect and trigger alerts for potential attacks, including high/low voltage spikes and average attacks, regardless of clock signal operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If voltage-based attack detection is implemented, then security against voltage glitch attacks is improved, but false detection due to clock jitter and voltage variations remains a problem
Solution Approach 1:
The detection system is divided into multiple independent voltage-dependent circuits, each monitoring specific voltage thresholds. This segmentation allows the system to distinguish between normal voltage variations and malicious attacks by analyzing patterns across multiple detection points rather than relying on a single threshold.
Solution Approach 2:
The system continuously monitors voltage levels and feeds back detection results to adjust monitoring parameters. The multiple voltage-dependent circuits provide feedback signals that are analyzed collectively to determine whether a voltage attack is occurring, enabling the system to adapt to normal voltage fluctuations while maintaining sensitivity to attacks.
2Adaptability or versatility
If multiple voltage thresholds are monitored, then detection coverage against various attack types is improved, but circuit complexity increases
Solution Approach 1:
Multiple voltage-dependent circuits are designed to perform multiple functions simultaneously. Each circuit monitors specific voltage thresholds and can detect different types of attacks (glitch attacks, average attacks, spike attacks) depending on the voltage levels being monitored. This multi-functionality allows comprehensive attack coverage without proportionally increasing overall system complexity.
Solution Approach 2:
The outputs from multiple voltage-dependent circuits are combined and analyzed together to make attack detection decisions. By merging the detection signals from various circuits, the system achieves comprehensive attack type coverage while using a unified analysis mechanism rather than separate detection paths for each attack type.
3Reliability
If voltage monitoring is performed continuously, then attack detection capability is improved, but power consumption increases
Solution Approach 1:
Instead of continuous monitoring, the system uses periodic sampling of voltage levels through the voltage-dependent circuits. The circuits are configured to trigger on specific voltage threshold violations, enabling间断式 (intermittent) monitoring that maintains attack detection capability while reducing power consumption compared to continuous analog monitoring.
Solution Approach 2:
The system uses multiple simple voltage-dependent circuits with fixed thresholds rather than a single complex continuous monitoring system. Each circuit is designed to be simple and low-power, sacrificing individual circuit sophistication for overall system efficiency and reduced power consumption while maintaining comprehensive detection capability.
Data Source
AI summary
An Integrated Circuit (IC) includes functional circuitry and attack-protection circuitry (APC). The functional circuitry is to receive a supply voltage from a power-supply input. The APC is coupled to the power-supply input and includes a front-end circuit and an averaging circuit. The front-end circuit is to compare the supply voltage to a plurality of voltage thresholds, and to output a respective plurality of indications that indicate whether the supply voltage violates the respective voltage thresholds. The averaging circuit is to estimate, for a selected subset of the indications, respective duty-cycles at which the indications in the subset exceed the respective voltage thresholds. The APC is to trigger one or more attack detection events in response to the indications and the duty-cycles.