Randomized Fuse Sensing for Storage Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current fuse sensing protocols are vulnerable to side channel attacks such as Differential Electromagnetic Analysis (DEMA), Differential Power Analysis (DPA), and Latent Trait Models (LTM), as they follow a predictable sequence, allowing hackers to determine fuse values.
Innovation Solution
Implementing a randomized fuse sensing order using an on-die programmable fuse controller with a sequencer and linear feedback shift register (LFSR) to randomly select fuse rows for sensing, combined with redundant fusing and error correction mechanisms, to prevent hackers from determining the state of the fuses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If fuse sensing is performed in a fixed predictable sequence, then the sensing process is simple and efficient, but the device becomes vulnerable to side channel attacks
Solution Approach 1:
The fuse sensing protocol transitions from a static fixed sequence to a dynamic randomized sequence. A random number generator (RNG) is introduced to generate random row addresses during each sensing operation, making the sensing sequence unpredictable and preventing side channel attacks while maintaining operational efficiency
Solution Approach 2:
The row address parameter is changed from a fixed deterministic value to a random value generated by an RNG. This parameter change ensures that each sensing operation accesses rows in a different order, eliminating the predictability that side channel attacks exploit
2Reliability
If randomization is introduced to prevent side channel attacks, then security is improved, but the sensing protocol becomes more complex
Solution Approach 1:
The fuse controller performs self-randomization by incorporating an on-die random number generator that automatically generates random row addresses during sensing operations. This eliminates the need for external randomization mechanisms and keeps the complexity contained within the controller itself
Solution Approach 2:
The fuse controller is designed to perform multiple functions: traditional fuse sensing, random number generation, and randomized addressing. By combining these functions in a single controller unit, the patent avoids adding separate complex subsystems while achieving security through randomization
Data Source
AI summary
In accordance with some embodiments, the way in which the fuses are sensed and, particularly, their order may be made more random so that it is much more difficult to simply exercise the device and determine all the values of the storage elements within the fuse array. One result is a more secure storage device.