Hardware Trojan Detection via Sensor Partitioning

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for verifying the integrity of electronic circuits against hardware Trojans are limited in circuit coverage, require expensive equipment, and are not suitable for industrial deployment due to high computational costs and the need for a reference circuit, which is costly to produce.

Innovation Solution

A system with sensors integrated into the electronic circuit to measure manufacturing process variations and operating conditions, providing digital output that can detect and locate hardware Trojans by comparing sensor partitions with a model partition, and using a processing unit to authenticate the circuit based on intrinsic physical characteristics.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication is carried out using a secret key stored in memory, then the circuit can be authenticated, but the cost increases and the method is not perfectly robust against cloning

Engineering Contradiction:
Improveauthentication robustnessVSAvoidpersonalization cost
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent replaces the software-based secret key storage and hashing mechanism with a hardware-based Physical Unclonable Function (PUF) that leverages intrinsic physical characteristics of the circuit. This substitution provides inherent resistance to cloning attacks while eliminating the need for expensive personalization phases and external database storage, as the authentication credentials are physically embedded in the circuit's manufacturing variations.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The PUF structure enables the circuit to authenticate itself using its own intrinsic physical characteristics without requiring external reference data or complex key management infrastructure. The circuit's unique manufacturing variations automatically serve as the authentication credential, eliminating the need for separate personalization equipment and databases.

Inventive Principle:
Principle #25Self-service

2Reliability

If PUF functions are used to verify circuit integrity, then authentication can be achieved, but the detection of hardware Trojans remains complex and requires expensive equipment

Engineering Contradiction:
Improveintegrity verificationVSAvoiddetection equipment
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent divides the circuit into multiple functional regions and places sensors throughout these regions to monitor local physical characteristics. This segmentation allows Trojan detection to be performed using simple local measurements rather than requiring complex global analysis equipment, making the detection process as accessible as standard production testing.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces sensors as intermediary elements that translate complex physical characteristics (such as propagation delays, power consumption, or signal integrity) into simple digital measurements. These sensors act as mediators between the circuit's internal physical state and the external detection system, enabling Trojan detection with basic equipment while maintaining high reliability.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Difficulty of detecting and measuring

If fault analysis or ATPG test vectors are used for Trojan detection, then some detection capability is achieved, but the circuit coverage is limited

Engineering Contradiction:
ImproveTrojan detection capabilityVSAvoidcircuit coverage
Core Design Contradiction:
Difficulty of detecting and measuringVSManufacturing precision

Solution Approach 1:

The patent replaces conventional electrical testing methods (fault analysis and ATPG) with physical measurement-based detection using sensors that monitor actual signal propagation and power characteristics. This substitution enables detection of Trojans that do not cause functional failures, significantly improving circuit coverage while using the same basic production testing infrastructure.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

Enables efficient and cost-effective detection and authentication of hardware Trojans during production, reducing the need for external reference circuits and minimizing computational expenses, while providing robust authentication and key generation.

Implementation Method 1

sensors integrated in the electronic circuit, each sensor being sensitive to variations in the manufacturing process

Methodology Applied
Scientific EffectManufacturing process variations:

Implementation Method 2

sensors integrated in the electronic circuit, each sensor being sensitive to variations in the manufacturing process and to the operating conditions

Methodology Applied
Scientific EffectOperating conditions measurement:

Data Source

PatentEP3195296B1System and method for securing an electronic circuit
Publication Date: 2019.11.20 COMMISSARIAT A LENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES
  • EP3195296B1 patent drawingFigure 1
  • EP3195296B1 patent drawingFigure 2~3
  • EP3195296B1 patent drawingFigure 4

AI summary

The invention pertains to a system (1) for securing an electronic circuit (2) comprising several regions (Z1-Z2, Z4-Z6), the activity of each of which may be controlled, comprising a plurality of sensors (S1-Sm) integrated into the electronic circuit, each sensor being sensitive to the variations in manufacturing process and able to provide a measurement representative of a local activity of the electronic circuit, characterized in that it comprises a processing unit comprising an integrity verification module, configured so as to: - determine, on the basis of the measurements provided by the sensor, and for each of the regions, a partition of the sensors between sensors affected and sensor not affected by an activation of the region; - compare each of the partitions with a model partition so as to detect the possible presence of a hardware Trojan horse liable to infect the electronic circuit. The system can also carry out an authentication of the electronic circuit by virtue of its intrinsic physical characteristics by response to a challenge or by generation of a key.