Voltage Regulator Switch Monitoring for Power Analysis Attack Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing cryptographic systems are vulnerable to power consumption analysis attacks, which can decipher secret keys by monitoring the power usage of encryption and decryption processes, and current countermeasures do not effectively detect when such attacks are occurring.

Innovation Solution

A system and method that utilize an internal voltage regulator with a monitoring circuit to detect anomalies in power consumption patterns, such as frequency or duration of signal activity, to determine if a power consumption analysis is being performed, allowing the cryptographic system to take defensive actions like ceasing operations or invoking countermeasures.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If encryption algorithms are used with secret keys, then security is improved, but the system becomes vulnerable to power consumption analysis attacks

Engineering Contradiction:
ImprovesecurityVSAvoidpower consumption analysis vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary detection of power analysis attacks by monitoring voltage regulator switch activity before the cryptographic system can be compromised. The monitoring circuit detects abnormal switching patterns that indicate an external voltage source is attempting power analysis, allowing the system to take preventive action before secret keys can be extracted

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent converts the harmful effect of power analysis attacks into a beneficial detection mechanism. By monitoring the voltage regulator's switch activity, the system transforms the power consumption signature that attackers exploit into a security feature that detects their presence. The abnormal switching patterns caused by external voltage injection become the very signal used to identify and counter the attack

Inventive Principle:
Principle #22Blessing in disguise (Convert harm into benefit)

2Difficulty of detecting and measuring

If voltage regulator switch activity is monitored to detect power analysis attacks, then detection capability is improved, but device complexity increases

Engineering Contradiction:
Improvepower analysis attack detectionVSAvoidmonitoring circuit complexity
Core Design Contradiction:
Difficulty of detecting and measuringVSDevice complexity

Solution Approach 1:

The voltage regulator serves a dual function: it regulates power for the cryptographic system while simultaneously providing the monitoring signal for attack detection. The switch activity that is inherent to the voltage regulator's operation becomes the monitoring signal, eliminating the need for separate monitoring hardware and reducing overall system complexity

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The voltage regulator is designed to perform multiple functions: power regulation for normal operation and security monitoring for attack detection. The same switch and control circuitry used for power management also generate the signals monitored for detecting power analysis attacks, making the component universal and reducing the need for additional dedicated monitoring hardware

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If the cryptographic system ceases operations upon detecting power analysis attacks, then security is improved, but productivity decreases

Engineering Contradiction:
ImprovesecurityVSAvoidcryptography operation throughput
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The cryptographic system dynamically adjusts its operation based on detected threats. Rather than permanently disabling operations, the system can temporarily suspend cryptography operations when power analysis attacks are detected, then resume normal operations when the threat is gone, optimizing the balance between security and productivity based on real-time conditions

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS11323239B2Countermeasure for power injection security attack
Publication Date: 2022.05.03 SILICON LABORATORIES INC
  • US11323239B2 patent drawing
  • US11323239B2 patent drawing
  • US11323239B2 patent drawing

AI summary

A system and method for determining whether a cryptographic system is being observed for power consumption analysis in an attempt to decipher secret keys. The system comprises a first external connection to receive an input voltage, an internal voltage regulator with an external capacitor to produce the desired voltage for the cryptographic system. The internal voltage regulator typically includes a switch that passes current from the first external connection to the external capacitor. By monitoring the frequency at which the switch is activated, it is possible to detect that an external voltage is being applied to the external capacitor. This external voltage is typically used to perform SPA or DPA operations. Thus, the cryptographic system may cease performing any encryption or decryption operations if an external voltage is detected.