Supply Voltage Droop Detection Circuits for FPGA Attack Localization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In spatial multi-tenant applications for FPGAs, supply voltage attacks can compromise circuit functionality due to shared power supply networks, leading to timing violations and functional failures across isolated regions.
Innovation Solution
Implementing voltage attack detection circuits with comparators, synchronized counters, and timestamp storage in each sector of the IC to identify and locate the source of supply voltage drops, using a central control circuit to create a spatial timestamp map.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple tenants share the power supply network in an FPGA, then utilization of the FPGA is boosted, but supply voltage attacks can compromise circuit functionality
Solution Approach 1:
The patent divides the FPGA into multiple isolated regions, each assigned to a different tenant. Each region has dedicated detection circuits that monitor supply voltage independently. This segmentation allows multiple tenants to share the FPGA resource while maintaining isolation between them, preventing one tenant from affecting others through supply voltage attacks.
Solution Approach 2:
The patent introduces voltage detection circuits as intermediary components between the power supply network and the logic circuits. These detection circuits monitor supply voltage levels and generate alerts when anomalies are detected, acting as a mediator that protects the logic circuits from supply voltage attacks without requiring changes to the tenants' logic designs.
2Measurement precision
If voltage detection circuits are implemented in each sector, then supply voltage attacks can be detected and located, but device complexity increases
Solution Approach 1:
The detection system is segmented into modular detection circuits that can be distributed across different sectors of the FPGA. Each sector contains its own detection circuit, allowing localized monitoring without requiring a centralized complex detection system. This modular approach improves detection precision while managing complexity through standardization.
Solution Approach 2:
The detection circuits are designed with universal functionality that can be replicated across multiple sectors. Each detection circuit performs the same voltage monitoring and timestamping functions, allowing the system to scale without proportionally increasing complexity. The standardized design enables easy integration and maintenance.
3Loss of information
If timestamp storage circuits are added to each sector, then the source of supply voltage drops can be located, but manufacturing complexity increases
Solution Approach 1:
The timestamp storage functionality is segmented into distributed storage circuits located in each sector, rather than requiring a centralized storage system. This segmentation allows the system to capture attack information locally at the time of occurrence, preserving critical timing data without requiring complex centralized storage and synchronization mechanisms.
Solution Approach 2:
Each sector's detection circuit autonomously performs timestamping and stores the information locally without requiring intervention from other sectors or centralized control. This self-service approach simplifies the overall system architecture and manufacturing, as each module is independent and can be fabricated using standard processes.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
An integrated circuit includes a first voltage decrease detection circuit that has a first comparator circuit that compares a supply voltage in the integrated circuit to a threshold voltage to generate a first detection signal that indicates a decrease in the supply voltage, and a first timestamp storage circuit that stores a first timestamp in response to the first detection signal indicating the decrease. The integrated circuit includes a second voltage decrease detection circuit that has a second comparator circuit that compares the supply voltage to the threshold voltage to generate a second detection signal that indicates the decrease, and a second timestamp storage circuit that stores a second timestamp in response to the second detection signal indicating the decrease. The integrated circuit includes a control circuit that determines a location of a source of the decrease in the integrated circuit based on the first and the second timestamps.