摘要:
The invention relates to a protection circuit for an integrated circuit (1). The protection circuit is preferably arranged in several circuit planes (2, 3) below and/or above the integrated circuit (1) and has several printed conductors (10, 11) to which different signals of one or more signal generators are applied. After passing through the printed conductors (10, 11) the different signals are analyzed by means of one or more detectors. The signals received by the detectors are compared with setpoint signals, also called reference signals, and if a significant difference is detected an alarm signal is sent to the integrated circuit. On the basis of this alarm signal the integrated circuit (1) is switched to a safety mode which makes it virtually impossible to analyze or manipulate said integrated circuit.
摘要:
An integrated circuit having a normal operating mode and a special operating mode, such as a special test mode, is disclosed. The special test mode is enabled by a series of signals, such as overvoltage excursions at a terminal, rather than by a single such excursion, so that it is less likely that the special test mode is entered inadvertently, such as due to noise or power-down and power-up of the device. The circuit for enabling the test mode includes a series of D-type flip-flops, each of which are clocked upon detection of the overvoltage condition together with a particular logic level applied at another terminal; multiple series of flip-flops may be provided for multiple special test modes. In addition, sequential codes may be used for further security. Logic for evaluating both a sequence of codes received in parallel from a number of address terminals, and also a sequence of serial codes received at single address terminal, are disclosed. Additional features include the provision of a power-on reset circuit which locks out the entry into the test mode during power-up of the device. Acknowledgment of the entry into test mode is provided by the presentation of a low impedance at output terminals while the device is not enabled; chip enable of the device causes the device to exit the test mode. Once in test mode, the output enable terminal of the device can provide a chip enable function.
摘要:
The present disclosure relates to an electronic device comprising: a debug port (112) providing a communications interface for debugging purposes; one or more processing unit access ports (AP1, APn); an authentication interface circuit (110) configured to authenticate the external device (200); and a further access port (APO) coupled between the debug port (112) and the authentication interface circuit (110), the further access port (APO) being configured to be in an open state in which communications are relayed between the debug port and the authentication interface circuit (110), the authentication interface circuit (110) comprising registers (202) including a status register (302) capable of being read by the external device (200) via the debug port (112) and the further access port (APO), the status register being configured to store an indication of the open or closed state of each of the processing unit access ports (AP1, APn) .
摘要:
Some embodiments described herein include an apparatus having a memory and a processor operatively coupled to the memory. The processor is configured to receive, in response to an excitation signal and from the power signature detector, a power signature signal associated with a target electronic device disposed within a sealed package. The processor is configured to extract a characteristic of the power signature signal and compare the characteristic of the power signature signal with a characteristic of a reference power signature signal associated with at least one reference device to determine a counterfeit status of the target electronic device. The at least one reference device is a pre-determined trusted device or a pre-determined counterfeit device. The processor is configured to send, to a communication interface, a notification signal associated with the counterfeit status of the target electronic device.
摘要:
The present invention relates to a test method of a circuit, comprising: acquiring a plurality of value sets comprising values of a physical quantity linked to the activity of a circuit to be tested when the circuit executes an operation of a set of distinct cryptographic operations applied to a secret data, selecting at least a first subset in each value set, for each value set, counting by a processing unit occurrence numbers of values transformed by a first surjective function applied to the values of the first subset of the value set, to form an occurrence number set for the value set, for each operation of the operation set, and each of the possible values of a part of the secret data, computing a partial operation result, computing cumulative occurrence number sets (CH) by adding the occurrence number sets corresponding to the operations of the operation set, which when applied to a same value or equivalent value of the possible values of the part of the secret data, provide a partial operation result having a same transformed value resulting from the application of a second surjective function, merging according to a selected merging scheme, cumulative occurrence numbers in the cumulative occurrence number sets (HT), and analyzing the merged cumulative occurrence number sets (HTR1) to determine the part of the secret data.
摘要:
L'invention concerne un élément sécurisé (10) comprenant un processeur (12), une interface d'entrées-sorties (18) et au moins une mémoire (14). Un programme de détection d'informations mémorisé dans la mémoire (14) collecte des informations sur la configuration ou l'environnement de l'élément sécurisé (10). Un programme de test mémorisé dans la mémoire (14) consulte au moins une directive de test reçue à travers l'interface d'entrées-sorties (18) et effectue au moins un test conformément à la directive de test consultée. Un terminal, un système et un procédé associés sont également décrits.
摘要:
The disclosed invention enables secured debug of an integrated circuit (300) which has a test operation mode and a secure mission operation mode. The integrated circuit has a processing unit (340), a test interface (312) through which the test operation mode is controllable, an on-chip memory (350) which is accessible in the test operation mode and in the secure mission operation mode, and one or more protected resources (360, 364, 370) which are inaccessible in the test operation mode. The processing unit is configured, in the test operation mode, to receive (401) an authenticated object (401) through the test interface, and store (401) the received authenticated object in the on-chip memory. The processing unit is moreover configured, upon reset into the secure mission operation mode, to execute a boot procedure (362) to determine (501) that the authenticated object is available in the on-chip memory, authenticate (502) the authenticated object, and - upon successful authentication - render (503a, 503b) the more protected resources accessible to a debug host (310) external to the integrated circuit.
摘要:
A circuit configuration for secure application includes several internal frequency detectors (10) arranged in digital units at critical points of an integrated circuit (30). The clock detectors (10) are concealed in the digital part of the integrated circuit (30) each as a standard cell (flip-flop unit) in order to prevent any external manipulation and in order to hide its function. The clock detectors (10) are preferably disposed in a clock tree topology, which can be at several levels for distributing the clock signal through the different digital unit tree at critical points. Alarms are generated via a clock detector network if at any level an external clock attack has been monitored.
摘要:
The disclosed invention enables secured debug of an integrated circuit (300) which has a test operation mode and a secure mission operation mode. The integrated circuit has a processing unit (340), a test interface (312) through which the test operation mode is controllable, an on-chip memory (350) which is accessible in the test operation mode and in the secure mission operation mode, and one or more protected resources (360, 364, 370) which are inaccessible in the test operation mode. The processing unit is configured, in the test operation mode, to receive (401) an authenticated object (401) through the test interface, and store (401) the received authenticated object in the on-chip memory. The processing unit is moreover configured, upon reset into the secure mission operation mode, to execute a boot procedure (362) to determine (501) that the authenticated object is available in the on-chip memory, authenticate (502) the authenticated object, and - upon successful authentication - render (503a, 503b) the more protected resources accessible to a debug host (310) external to the integrated circuit.