Side-Channel Intrusion Detection via Dynamic Probe Positioning

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current systems lack effective methods for detecting malicious intrusions, unauthorized modifications, and tampering in digital circuits and computer-based systems, particularly in critical embedded systems and FPGAs, where physical side-channel information is not adequately utilized for anomaly detection.

Innovation Solution

The implementation of a fingerprinting system that uses side-channel information, such as power consumption and electromagnetic emissions, captured by probes to compare against reference data, alerting for anomalies and enabling automatic adjustments of probe positions for improved data quality.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If traditional intrusion detection methods are used in digital circuits, then system complexity is reduced, but detection precision and reliability of malicious intrusions are insufficient

Engineering Contradiction:
Improvedetection precisionVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent introduces side-channel probes as intermediary devices that indirectly detect circuit operations by measuring physical characteristics (power consumption, electromagnetic emissions) rather than directly monitoring digital signals. This intermediary approach enables detection of malicious intrusions through physical side-effects, improving detection precision while maintaining system architecture simplicity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces traditional electronic/digital intrusion detection methods with physical measurement approaches. Instead of using complex digital signal analysis, the system uses physical probes to measure power consumption and electromagnetic emissions, substituting mechanical/physical detection for electronic detection to achieve better intrusion visibility.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If side-channel probes are positioned manually for data collection, then device complexity is reduced, but measurement precision and data quality are insufficient

Engineering Contradiction:
Improvedata qualityVSAvoidprobe positioning system
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent implements dynamic probe positioning where the probe can be automatically adjusted to optimal locations based on real-time signal quality feedback. The system dynamically adapts probe positions during operation, using feedback loops to identify and move probes to locations that maximize side-channel signal quality, thereby improving measurement precision through automated positioning.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent incorporates feedback mechanisms where measurement quality is continuously evaluated and used to adjust probe positioning. The system monitors signal characteristics and provides feedback to positioning mechanisms, enabling automatic optimization of probe locations to achieve maximum data quality without manual intervention.

Inventive Principle:
Principle #23Feedback

3Adaptability or versatility

If fixed probe positions are used for side-channel information collection, then device complexity is reduced, but adaptability to different operational conditions is insufficient

Engineering Contradiction:
Improveadaptability to operational conditionsVSAvoidprobe positioning system
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent transforms fixed probe positioning into a dynamic system that can adapt to different operational conditions. The probe positioning mechanism responds to changing operational states by adjusting positions to maintain optimal signal quality across various workloads, temperatures, and operational modes, enabling the system to adapt to diverse conditions.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes the parameter of probe position from a fixed constant to a variable that can be adjusted based on operational conditions. By modifying position parameters dynamically in response to operational changes, the system maintains high measurement quality across different operating scenarios without requiring multiple fixed probes for each condition.

Inventive Principle:
Principle #35Parameter changes

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach enables robust anomaly detection and intrusion identification, enhancing the security and integrity assessment of digital systems by leveraging physical side-channel signals, thereby improving the detection of unauthorized activities and tampering.

Implementation Method 1

capture side-channel information, such as power consumption and electromagnetic emissions

Methodology Applied
Scientific EffectElectromagnetic radiation detection: Electromagnetic Induction

Implementation Method 2

power consumption and electromagnetic emissions, captured by probes

Methodology Applied
Scientific EffectPower consumption analysis: Joule Heating

Data Source

PatentUS11809552B2Systems, methods, and apparatuses for intrusion detection and analytics using power characteristics such as side-channel information collection
Publication Date: 2023.11.07 POWER FINGERPRINTING
  • US11809552B2 patent drawing
  • US11809552B2 patent drawing
  • US11809552B2 patent drawing

AI summary

Some embodiments described herein include a system that collects and learns reference side-channel normal activity, process it to reveal key features, compares subsequent collected data and processed data for anomalous behavior, and reports such behavior to a management center where this information is displayed and predefine actions can be executed when anomalous behavior is observed. In some instances, a physical side channel (e.g. and indirect measure of program execution such as power consumption or electromagnetic emissions and other physical signals) can be used to assess the execution status in a processor or digital circuit using an external monitor and detect, with extreme accuracy, when an unauthorized execution has managed to disrupt the normal operation of a target system (e.g., a computer system, etc.).