Summary of the invention
The invention provides a kind of dynamic shielding protective device and method for safety chip, in order to realize physics cost and the power consumption that reduces dynamic shielding system.
The invention provides a kind of dynamic shielding protective device for safety chip, comprising:
Signal generation module, for generating first signal and secondary signal;
M the first metal wire group, is arranged in the top layer metallic layer of described safety chip, and each first metal wire group comprises N metal line, and wherein, M is more than or equal to 2 natural number, and N is more than or equal to 2 natural number;
A second metal wire group, comprises N metal line, is arranged in the intermediate metal layer of described safety chip, and described secondary signal is via described the second metal wire group transmission;
Grouping control module, for selecting a first metal wire group to transmit described first signal;
Signal comparison module, compares for the first signal to via described the first metal wire group transmission with via the secondary signal of described the second metal wire group transmission, triggers the safety precautions of described safety chip according to comparative result.
The present invention also provides a kind of dynamic shielding guard method for safety chip, M the first metal wire group is arranged in the top layer metallic layer of described safety chip, a second metal wire group is arranged in the intermediate metal layer of described safety chip, each first metal wire group comprises N metal line, described the second metal wire group comprises N metal line, wherein, M is more than or equal to 2 natural number, and N is more than or equal to 2 natural number;
Described method comprises:
Generate first signal and secondary signal;
Select a first metal wire group to transmit described first signal, described the second metal wire group is transmitted described secondary signal;
To the first signal via described the first metal wire group transmission with via the secondary signal of described the second metal wire group transmission, compare, according to comparative result, trigger the safety precautions of described safety chip.
In the present invention, a metal wire group in a first signal demand motive M the first metal wire group, other metal wire groups are not driven, with do not divide into groups to compare, the length of first signal has reduced and the requirement of its driving force has been reduced, thereby has reduced physics cost and the power consumption of dynamic shielding system.
Embodiment
Below in conjunction with specification drawings and specific embodiments, the invention will be further described.
As shown in Figure 1; for the structural representation of the present invention for the dynamic shielding protective device embodiment of safety chip, this device can comprise signal generation module 11, M the first metal wire group 121,122 ... 12M; a second metal wire group 13, grouping control module 14 and signal comparison module 15.The output terminal of signal generation module 11 is connected with the second metal wire group 13 with the input end of grouping control module 14 respectively, grouping control module 14 and M the first metal wire group 121,122 ... 12M connects, and the input end of signal comparison module 15 is connected with the output terminal of grouping control module 14 with the second metal wire group 13 respectively.
M the first metal wire group 121,122 ... 12M is arranged in the top layer metallic layer of safety chip, and cover full chip or segment chip, each first metal wire group comprises N metal line, wherein, M is more than or equal to 2 natural number, and N is more than or equal to 2 natural number; The second metal wire group 13 comprises N metal line, is arranged in the intermediate metal layer of safety chip.
Wherein, signal generation module 11 is for generating first signal and secondary signal; The length of first signal and secondary signal is N bit.Alternatively, first signal and secondary signal identical or the two between meet particular kind of relationship, for example: the two is contrary or have a specific function relation.Alternatively, signal generation module 11 specifically can adopt counter, random signal generator, linear feedback shift register or their combination to realize.
Grouping control module 14 is for selecting a first metal wire group to transmit first signal.
Secondary signal is via the second metal wire group 13 transmission.
Signal comparison module 15 compares for the first signal to via the first metal wire group transmission with via the secondary signal of the second metal wire group transmission, triggers the safety precautions of safety chip according to comparative result.When assailant implements to attack to chip; if remove, disconnection or short circuit the metal wire in the first metal wire group; to cause via the first signal of the first metal wire group transmission and not identical or no longer meet particular kind of relationship via the secondary signal of the second metal wire group transmission; at this moment signal comparison module 15 output alarm signals trigger safety precautions, for example: core data is protected.
The first signal that grouping control module 14 control signal generation modules 11 generate drives M the first metal wire group 121,122 ... which group metal wire in 12M is selected M the first metal wire group 121,122 simultaneously ... the signal transmitting on which group metal wire in 12M is as the input signal of signal comparison module 15.
As shown in Figure 2, be the schematic flow sheet of the present invention for the dynamic shielding guard method embodiment of safety chip, the method can be applied to structural representation shown in Fig. 1, and the method can comprise the steps:
Step 21, signal generation module 11 generate first signal and secondary signal;
Step 22, grouping control module 14 select a first metal wire group to transmit first signal, the second metal wire group transmission secondary signal;
Step 23,15 pairs of first signals via the first metal wire group transmission of signal comparison module and the secondary signal of transmitting via the second metal wire group compare, and trigger the safety precautions of safety chip according to comparative result.
In the present embodiment, when this device work, a metal wire group in a first signal demand motive M the first metal wire group, other metal wire groups are not driven, with do not divide into groups to compare, the length of first signal has reduced and the requirement of its driving force has been reduced, thereby has reduced physics cost and the power consumption of dynamic shielding system.
Alternatively, structural representation shown in Figure 1 again, grouping control module 14 can comprise group selection signal generation unit 140, the first group selection unit 141, the second group selection unit 142, group switching signal generation unit 143 and group selection signal switch unit 144.The output terminal of group selection signal generation unit 140 is connected with the input end of group selection signal switch unit 144 with the output terminal of group switching signal generation unit 143, the output terminal of group selection signal switch unit 144 is connected with the input end of the second group selection unit 142 with the input end of the first group selection unit 141, the input end of the first group selection unit 141 is also connected with the output terminal of signal generation module 11, the output terminal of the first group selection unit 141 and M the first metal wire group 121, 122 ... 12M connects, the input end of the second group selection unit 142 also with M the first metal wire group 121, 122 ... 12M connects.
Group selection signal generation unit 140 is for generating group selection signal.Wherein, divide the length of group selection signal to be at least log
2m position.
The first group selection unit 141 is for selecting a first metal wire group according to group selection signal, and described first signal drives the first metal wire group of selecting.In other words, which metal wire group the first group selection unit 141 choice for use first signals drive.
The first metal wire group of the second group selection unit 142 for selecting to be driven by described first signal according to described group selection signal.In other words, the signal in which the first metal wire group is selected to accept in the second group selection unit 142.
Group switching signal generation unit 143 is for generating group switching signal.
Group selection signal switch unit 144, for according to group switching signal, is upgraded the group selection signal of output.Particularly, when group switching signal is effective, group selection signal switch unit 144 is upgraded group selection signal, and the group selection signal after upgrading is sent to the first group selection unit 141 and the second group selection unit 142; When group switching signal is invalid, group selection signal switch unit 144 keeps group selection signal constant.
Correspondingly, in Fig. 2, the grouping control module 14 in step 22 selects a first metal wire group to transmit first signal can comprise the steps: that group selection signal generation unit 140 generates group selection signal; The first group selection unit 141 and the second group selection unit 142 select a first metal wire group to transmit first signal according to group selection signal; Group switching signal generation unit 143 generation group switching signals; Group selection signal switch unit 144, according to group switching signal, is upgraded group selection signal.
Alternatively; as shown in Figure 3; for the present invention is for organizing the structural representation of switching signal generation unit in dynamic shielding protective device embodiment Fig. 1 of safety chip; in order once effectively to organize switching signal according to the generation of random time interval, group switching signal generation unit 143 can comprise that random number generates subelement 1431, compares subelement 1432 and group switching signal generation subelement 1433.Wherein, relatively the input end of subelement 1432 is connected with the output terminal that random number generates subelement 1431, and the input end that group switching signal generates subelement 1433 is connected with the output terminal that compares subelement 1432.
Random number generates subelement 1431 for generating a random number.Relatively subelement 1432 is for comparing random number and predetermined value.Group switching signal generates subelement 1433 for according to the comparative result generation group switching signal of subelement 1432 relatively.
Correspondingly, group switching signal generation unit 143 generation group switching signals can be adopted with the following method and be realized: random number generates subelement 1431 and generates a random number, and relatively subelement 1432 compares random number and predetermined value; Group switching signal generates subelement 1433 according to comparative result generation group switching signal.
This group switching signal generation unit 143 can randomization group switching signal interval effective time, like this can be so that the job order of the first metal wire group, working time randomization increase the difficulty of attacking and analyzing.For example: use 4 bit randomizers, as the linear feedback shift register of 4 bits, relatively this 4 bit random number and 4 bit constants 7 in real time; When the two is equal, output is group switching signal effectively, and interval effective time of group switching signal is random, and average probability is 1/16.If switching signal is effectively organized in output when 4 bit random numbers are less than constant 7, whenever 4 bit random numbers equal 0,1,2,3,4,5 or the effective group switching signal 302 of output in 6 o'clock, interval effective time of group switching signal is random, and average probability is 7/16.If switching signal is effectively organized in output when 4 bit random numbers are greater than constant 7, interval effective time of group switching signal is random, and average probability is 9/16.
Alternatively, in order to make first signal and secondary signal meet pre-provisioning request, for example: keep identical with the last cycle, signal anti-in last cycle, entirely zero, complete one, etc., grouping control module 14 can also comprise control module 145, is connected with signal generation module 11, for control signal generation module 11, generates first signal and the secondary signal that meets pre-provisioning request.Correspondingly, in schematic flow sheet shown in Fig. 2, can also comprise the steps: that signal generation module 11 is according to control signal, generate the first signal and the secondary signal that meet pre-provisioning request.
Alternatively, signal comparison module 15 can comprise signal comparing unit 151 and trigger element 152.
Signal comparing unit 151 compares for the first signal to via the first metal wire group transmission with via the secondary signal of the second metal wire group transmission.Trigger element 152, for according to the comparative result of signal comparing unit 151, when first signal is identical with secondary signal or meet predetermined condition, triggers the safety precautions of safety chip.Correspondingly; in schematic flow sheet shown in Fig. 2; the safety precautions that triggers described safety chip according to comparative result in step 23 is specifically as follows following steps: when first signal is identical with secondary signal or meet predetermined condition, trigger the safety precautions of safety chip.
Finally it should be noted that: above embodiment is only unrestricted in order to technical scheme of the present invention to be described, although the present invention is had been described in detail with reference to preferred embodiment, those of ordinary skill in the art is to be understood that, can modify or be equal to replacement technical scheme of the present invention, and not depart from the spirit and scope of technical solution of the present invention.