Voltage-Variation Detection Circuitry Under Clock Jitter
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Integrated circuits (ICs) are vulnerable to voltage-based attacks that induce metastability, making it difficult to detect physical attacks under clock fluctuations, as signal delays can be attributed to both voltage variations and frequency fluctuations, complicating the differentiation between the two.
Innovation Solution
The implementation of two voltage-dependent circuits with different sensitivities, which produce signals that react differently to voltage variations but similarly to clock fluctuations, allowing for the neutralization of the delay characteristic due to frequency fluctuations, enabling the detection of voltage-based attacks through a combined signal analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If clock fluctuations are introduced to combat physical attacks, then security against inference attacks is improved, but detection of voltage-based attacks becomes more difficult
Solution Approach 1:
The detection circuit is segmented into multiple parallel paths: a first detection path sensitive to voltage variations and a second detection path sensitive to frequency variations. Each path independently monitors its respective parameter, allowing the system to distinguish between voltage-based attacks and legitimate clock fluctuations used for security.
Solution Approach 2:
A differential detection mechanism serves as an intermediary that compares signals from the voltage-sensitive path and the frequency-sensitive path. By analyzing the difference between these paths, the system can identify voltage-based attacks while filtering out the effects of intentional clock fluctuations.
2Reliability
If voltage-based attack detection is implemented, then security against physical attacks is improved, but false positives from clock fluctuations increase
Solution Approach 1:
The system employs feedback mechanisms where the output of the frequency-sensitive detection path is used to adjust and calibrate the voltage-sensitive detection path. This feedback loop enables the system to learn the normal characteristics of clock fluctuations and adjust its voltage detection threshold accordingly, reducing false positives while maintaining security.
Solution Approach 2:
The detection circuit dynamically adjusts its sensitivity parameters based on the operating conditions. When clock fluctuations are detected by the frequency-sensitive path, the system modifies the voltage detection parameters to account for these changes, thereby maintaining accurate detection without generating false alarms.
3Difficulty of detecting and measuring
If signal delay monitoring is used to detect voltage attacks, then attack detection capability is improved, but differentiation between voltage and frequency effects becomes difficult
Solution Approach 1:
The detection circuit uses asymmetric design where the first detection path is deliberately made highly sensitive to voltage variations while the second path is made sensitive to frequency variations. This asymmetric sensitivity profile allows each path to primarily detect its target parameter, and the differential comparison between the asymmetric paths enables precise differentiation between voltage and frequency effects.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Detecting voltage-based attacks on an integrated circuit (IC) is difficult in the presence of clock jitter. Propagating signals can exhibit a total delay that is due to a delay component resulting from a voltage-based attack and a delay characteristic resulting from clock fluctuation. Voltage-variation detection circuitry (106) includes first and second voltage-dependent circuits (302-1, 302-2) and a voltage analysis circuit (306). The voltage-dependent circuits (302-1, 302-2) produce first and second signals (218-1, 218-2) that are indicative of a voltage level (216) responsive to a clock signal (204) and based on different first and second voltage sensitivities (304-1, 304-2). The voltage analysis circuit (306) generates a voltage alert signal 108 based on the first and second signals (218-1, 218‑2). A combined signal neutralizes the delay characteristic in the first and second signals (218-1, 218-2). Thus, a voltage-based attack is detectable in the presence of clock fluctuation by using two voltage-dependent circuits.