Perturbation Attack Detection in Digital Circuits

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for detecting and preventing fault injection attacks on digital circuits are suboptimal, failing to provide full protection and efficient real-time detection and localization of perturbations.

Innovation Solution

A device comprising metallic layers with signal transmission lines, a random number generator, and managers to transmit and measure random signal values, comparing transmission times to predefined thresholds to detect and localize perturbation attacks, which can be caused by power glitches, clock tampering, laser, or electromagnetic injections.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If existing detection methods are used, then some level of fault detection is achieved, but real-time detection and localization capability is insufficient

Engineering Contradiction:
Improvedetection precisionVSAvoidresponse time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The digital circuit is divided into multiple zones with dedicated detection lines in different metallic layers. Each zone has its own transmitter and receiver buffers, enabling independent monitoring. This segmentation allows precise localization of faults to specific zones while maintaining real-time detection capability across the entire circuit.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Detection lines are arranged in multiple metallic layers (horizontal and vertical orientations) to create a three-dimensional detection network. This multi-dimensional arrangement enables accurate spatial localization of faults by detecting perturbations in different layers and orientations, improving both detection precision and response time.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Reliability

If comprehensive protection against all attack types is implemented, then security coverage is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity coverageVSAvoidcircuit complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The detection device uses a universal architecture that can detect multiple types of attacks (electromagnetic radiation, laser, power glitches, clock tampering) through the same metallic layer structure and buffer system. The detection lines in different layers serve multiple functions by monitoring various attack vectors simultaneously, providing comprehensive security coverage without proportionally increasing complexity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

Transmitter and receiver buffers act as intermediary elements between the detection lines and the processing logic. These buffers simplify the overall system architecture by providing standardized interfaces for signal transmission and reception across multiple metallic layers, reducing the complexity of coordinating comprehensive multi-layer detection.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Measurement precision

If multiple metallic layers with horizontal and vertical lines are used, then localization accuracy is improved, but manufacturing complexity increases

Engineering Contradiction:
Improvelocalization accuracyVSAvoidmanufacturing ease
Core Design Contradiction:
Measurement precisionVSEase of manufacture

Solution Approach 1:

The manufacturing process is segmented into standard semiconductor fabrication steps for creating multiple metallic layers. Each layer is processed independently using conventional photolithography and etching techniques, making the complex multi-layer structure manufacturable with existing industrial processes while maintaining high localization accuracy.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Different metallic layers are assigned specific orientations (horizontal in first layer, vertical in second layer) to optimize detection for particular attack directions. This local differentiation in layer properties enables accurate localization of attack sources while using standard manufacturing techniques that can accommodate such targeted design variations.

Inventive Principle:
Principle #3Local quality

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Enables real-time detection and accurate localization of perturbation attacks, protecting digital circuits by exploiting the sensitivity of wire delays to temperature, voltage, and length variations, effectively countering electromagnetic radiation-based attacks.

Implementation Method 1

a first metallic layer and a second metallic layer arranged on the digital circuit, the first metal layer comprising a plurality of signal transmission lines routed horizontally, the second metal layer comprising a plurality of signal transmission lines routed vertically

Methodology Applied
Scientific EffectElectrical signal transmission: Conduction (electrical)

Implementation Method 2

The receiver manager is configured to receive the random signal values from the transmitter manager through the one or more receiver buffers connected to the receiver manager, measure a transmission time corresponding to a time of transmission of the received random signal values

Methodology Applied
Scientific EffectElectromagnetic induction: Electromagnetic Induction

Data Source

PatentUS11930098B2Devices and methods for the detection and localization of fault injection attacks
Publication Date: 2024.03.12 SECURE IC
  • US11930098B2 patent drawing
  • US11930098B2 patent drawing

AI summary

A device for detecting perturbation attacks performed on a digital circuit is provided. The device comprises: a first metallic layer and a second metallic layer arranged on the digital circuit, the first metal layer comprising a plurality of signal transmission lines routed horizontally, the second metal layer comprising a plurality of signal transmission lines routed vertically, the device comprising one or more transmitter buffers and one or more receiver buffers, a transmitter buffer and a receiver buffer being connected by each signal transmission line; a random number generator configured to generate random signal values; the device further comprising a transmitter manager connected to one or more transmitter buffers and a receiver manager connected to one or more receiver buffers, wherein: the transmitter manager is configured to transmit random signal values generated by the random number generator over the signal transmission lines of the first metallic layer and the second metallic layer, the receiver manager is configured to receive random signal values from the transmitter manager through the one or more receiver buffers connected to the receiver manager, measure a transmission time corresponding to a time of transmission of the received random signal values, and compare the transmission time to a predefined timing interval to detect perturbation attacks.