Smart Card Reader Infinite Loop Detection and Power Cut
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The standard ISO 7816 protocol lacks a mechanism to handle smart cards entering infinite loops during fault injection attacks, leading to prolonged manual intervention and inefficiencies in testing the resistance of smart cards against such attacks.
Innovation Solution
A smart card reader is designed to detect malfunctioning conditions, such as premature counter expiration or excessive protocol message receipt, allowing for automatic reinitialization of the card by cutting the power signal, thereby preventing infinite loops without manual intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the standard ISO 7816 protocol mechanism is used to handle card unresponsiveness, then the reader can recover from normal card blockages, but it cannot detect and handle infinite loops caused by fault injection attacks, requiring manual intervention
Solution Approach 1:
The patent applies preliminary action by implementing a detector that proactively monitors for infinite loop conditions before they cause prolonged operational issues. The detector continuously checks for malfunctioning conditions (such as excessive protocol byte 0x60 transmissions) and automatically triggers reinitialization when thresholds are exceeded, eliminating the need for manual intervention during fault injection attacks
Solution Approach 2:
The patent implements feedback mechanisms where the detector monitors card behavior in real-time, specifically tracking the frequency of protocol byte transmissions. When the detector identifies patterns consistent with infinite loops (excessive protocol bytes without proper command-response cycles), it provides feedback by automatically commanding reinitialization of the smart card, creating a closed-loop control system that self-corrects without human input
2Reliability
If manual card removal and reinsertion is performed to reset infinite loops, then the card can be recovered from attack states, but significant time is lost during evaluation and testing processes
Solution Approach 1:
The patent applies self-service by enabling the reader system to automatically detect and recover from infinite loop conditions without requiring external manual intervention. The detector monitors for malfunctioning conditions and autonomously commands reinitialization of the smart card by cutting power, allowing the system to service itself during attack scenarios and eliminating time-consuming manual card handling
Solution Approach 2:
The system performs preliminary detection and automatic reinitialization before the infinite loop condition can cause prolonged operational disruption. By continuously monitoring for error patterns and pre-emptively triggering reinitialization when thresholds are exceeded, the system recovers from attack states automatically, saving evaluation time during security testing
3Adaptability or versatility
If the reader waits for protocol byte 0x60 from the card, then normal extended commands can execute properly, but the reader remains stuck in wait status when the card enters an infinite loop
Solution Approach 1:
The patent implements feedback control by monitoring the ratio and frequency of protocol byte 0x60 transmissions versus actual command executions. When the detector identifies an abnormal pattern (excessive protocol bytes indicating infinite loop), it overrides the normal wait behavior and triggers automatic reinitialization, allowing the system to adapt between supporting extended commands and recovering from attack states
Solution Approach 2:
The patent applies dynamics by making the reader's operational mode flexible - it can dynamically switch between normal command execution mode (waiting for protocol bytes) and recovery mode (automatic reinitialization). The detector continuously adjusts the system state based on observed card behavior, transitioning from passive waiting to active intervention when malfunctioning conditions are detected
Data Source
AI summary
A smart card reader capable of transmitting a power signal to a smart card to determine a duration WT called Waiting Time in keeping with the standard ISO 7816 and sending commands to the smart card, the reader comprising a detector for detecting a malfunctioning condition of the smart card and being configured to cut the power signal when the malfunctioning condition is fulfilled. This reader is remarkable in that the malfunctioning condition is different to reaching, by a counter configured to be incremented with the time from the sending of a command to the smart card, of a value corresponding to the duration WT elapsed from the sending of the command or reinitialization of the counter in response to the receipt of a protocol message of the smart card.