Semiconductor Signal Detection Arrangement for Local Attack Identification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Semiconductor devices face challenges in detecting local attacks on internal signals, particularly on data busses and wires connected to latches, as global sensors are unable to effectively protect against probing and forcing attempts that aim to retrieve secret information.
Innovation Solution
A detection arrangement comprising a first and second input terminal and a comparison unit is used to compare signals at different stages of a driver within the semiconductor device, determining a time period of equality to detect potential attacks, with the comparison unit generating an alarm if the period exceeds a predefined threshold.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If global sensors are used to detect attacks, then the detection coverage is broad, but the detection precision for local attacks on specific internal signals is insufficient
Solution Approach 1:
The detection arrangement is segmented into multiple independent detection units, each monitoring specific internal signals (data busses, latch wires) separately. This allows precise detection of local attacks on individual signals without requiring complex global sensor systems, resolving the contradiction between detection precision and device complexity.
Solution Approach 2:
The patent implements local detection quality by placing dedicated detection mechanisms at specific locations within the semiconductor device where internal signals are most vulnerable to attack. Each detection unit is optimized for its specific signal path, providing high precision detection for local attacks while maintaining overall system simplicity.
2Reliability
If dedicated protection mechanisms are added for internal signals, then the security against local attacks is improved, but the device complexity increases
Solution Approach 1:
The detection arrangement merges security functions with existing driver circuitry by integrating detection units into the signal paths without adding separate complex protection systems. The detection mechanisms are combined with the driver stages, allowing security monitoring to be achieved through existing structural elements, thus improving reliability while minimizing complexity increase.
Solution Approach 2:
The detection units are designed with multi-functionality, serving both as signal monitoring mechanisms and as part of the driver circuitry. This universal approach allows the same structural elements to perform both driving and detection functions, improving security reliability without proportionally increasing device complexity.
3Measurement precision
If the detection threshold is set low to detect all anomalies, then the detection sensitivity is high, but false alarms during normal switching increase
Solution Approach 1:
The detection arrangement performs preliminary analysis by monitoring the temporal relationship between signals at different driver stages before triggering an alarm. The system pre-establishes expected time relationships between signal transitions, allowing it to distinguish between normal switching patterns and actual attacks, thus reducing false alarms while maintaining high detection sensitivity.
Solution Approach 2:
The system uses feedback mechanisms to continuously compare expected signal behavior with actual signal transitions. By feedback the temporal relationships between signals and comparing them against predefined thresholds, the system can dynamically adjust its detection sensitivity, reducing false alarms during normal switching while maintaining high sensitivity for actual attacks.
Data Source
AI summary
There is provided a detection arrangement for detecting an attack to internal signals in a semiconductor device. The detection arrangement comprises a first input terminal, a second input terminal, and a comparison unit. The first input terminal is adapted to receive a first signal being indicative for a signal at a first stage of a driver of the semiconductor device, the driver being capable to drive signals internally to the semiconductor device. The second input terminal is adapted to receive a second signal being indicative for a signal at a second stage of the driver of the semiconductor device. The comparison unit is adapted to compare the first signal and the second signal and to determine a time period during which the signals are equal, wherein the determined time period is indicative for a potential attack, if the determined time period is above a predefined threshold.