Ring Oscillator Tamper Detection Through Frequency Comparison

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Integrated circuits face challenges in detecting tampering attempts, such as unauthorized access or physical modifications, which can disrupt sensitive information like cryptographic keys, as existing tamper detection methods are not effective in identifying changes in frequency characteristics of ring oscillators.

Innovation Solution

A tamper detection system utilizing a ring oscillator with sensing nodes dispersed throughout the IC, which detects changes in frequency by comparing oscillation frequencies between multiple ring oscillators, triggering a countermeasure response when deviations exceed a tolerance value, and employing sensing nodes strategically placed in metal layers to cover circuit blocks and prevent probe contact.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If sensing nodes are dispersed throughout the IC to detect tampering, then tamper detection capability is improved, but device complexity increases

Engineering Contradiction:
Improvetamper detection capabilityVSAvoidcircuit complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The IC is divided into multiple regions with sensing nodes dispersed throughout, each node independently monitoring its local area. This segmentation allows comprehensive tamper detection across the entire device while maintaining modular simplicity in each individual sensing node, resolving the contradiction between detection capability and device complexity

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The ring oscillator circuit serves multiple functions: it generates clock signals for normal operation and simultaneously acts as a tamper detection sensor. By making the oscillator frequency sensitive to environmental changes caused by tampering while maintaining its clock generation function, the system achieves improved detection capability without adding separate dedicated sensing circuits, thus avoiding increased device complexity

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Measurement precision

If multiple ring oscillators are used for frequency comparison, then measurement precision is improved, but device complexity increases

Engineering Contradiction:
Improvefrequency change detection accuracyVSAvoidoscillator circuit complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

Multiple ring oscillators are combined in a parallel configuration where each oscillator independently monitors frequency changes. Their outputs are fed into a comparison circuit that identifies deviations from expected frequency relationships. This merging approach improves measurement precision through cross-validation while using standardized identical oscillator designs, preventing exponential growth in device complexity

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The system monitors changes in oscillation frequency parameters of multiple ring oscillators to detect tampering. By tracking frequency parameter variations and comparing them against expected relationships between oscillators, the system achieves high measurement precision for detecting environmental changes caused by tampering, while the parameter-based approach allows simple comparison logic rather than complex analysis circuits

Inventive Principle:
Principle #35Parameter changes

3Reliability

If sensing nodes are placed at top-most metal layer to cover chip areas, then tamper detection coverage is improved, but ease of manufacture worsens

Engineering Contradiction:
Improvetamper detection coverageVSAvoidfabrication difficulty
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

Sensing nodes are pre-integrated into the metal layer structure during the standard IC fabrication process, before the chip is assembled or deployed. The sensing nodes are formed as part of the top-most metal layer using conventional photolithography and metal deposition techniques, ensuring they are already in place to detect any future tampering attempts. This preliminary integration improves detection coverage while maintaining ease of manufacture by using existing fabrication capabilities

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The sensing nodes are constructed using the same metal layer materials and fabrication processes as the rest of the IC interconnect structure. By making the sensing nodes homogeneous with the surrounding metal infrastructure rather than using different materials or special fabrication steps, the system achieves comprehensive tamper detection coverage while maintaining ease of manufacture through standardized processes

Inventive Principle:
Principle #33Homogeneity

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Effectively protects sensitive information by accurately identifying tampering attempts through frequency changes, triggering appropriate countermeasures such as system reset or obfuscation, thereby preventing unauthorized access and maintaining security.

Implementation Method 1

The described tamper detection and corresponding circuitry can detect tampering by identifying a change in frequency characteristics of a ring oscillator

Methodology Applied
Scientific EffectFrequency change detection:

Data Source

PatentEP3830735B1Tamper detection in integrated circuits
Publication Date: 2023.02.22 ARM LTD
  • EP3830735B1 patent drawingFigure 1A~1B
  • EP3830735B1 patent drawingFigure 2A~2B
  • EP3830735B1 patent drawingFigure 2C

AI summary

A system with tamper detection can include at least one ring oscillator and a detection circuit coupled to the at least one ring oscillator to detect change in frequency greater than a tolerance. Each ring oscillator can include a plurality of inverters where at least one intermediate node coupling an output of one of the plurality of inverters and an input to another of the plurality of inverters is a sensing node of a plurality of sensing nodes for the system. Outputs from two or more ring oscillators can be compared and a signal to initiate a countermeasure response can be generated when the outputs have a difference greater than a tolerance value.