CN111010267A

CN111010267A - Method for encrypting internal security detection sensor signal of chip based on random number

Info

Publication number: CN111010267A
Application number: CN201911110555.0A
Authority: CN
Inventors: 舒海军; 赵贵勇; 邹伟玉; 时颖
Original assignee: Shanghai Huahong Integrated Circuit Co Ltd
Current assignee: Shanghai Huahong Integrated Circuit Co Ltd
Priority date: 2019-11-14
Filing date: 2019-11-14
Publication date: 2020-04-14

Abstract

The invention discloses a method for encrypting a signal of a security detection sensor in a chip based on a random number. The encryption method realizes the data encryption of the output signal of the sensor by carrying out the XOR of the output signal of the sensor and the random number signal generated by the random source module at the sending end of the security detection sensor; and performing XOR operation on the received encrypted data and the random number for encryption at the receiving end, thereby realizing the restoration of the sensor data. The method can effectively prevent external malicious attacks on the detection circuit of the security sensor, and ensures that the chip is used more safely and reliably.

Description

Method for encrypting internal security detection sensor signal of chip based on random number

Technical Field

The invention belongs to the technical field of integrated circuits, and particularly relates to a method for encrypting a signal of a detection circuit of a security sensor in a chip by using a random number so as to effectively prevent external malicious attacks on the security sensor.

Background

In the information industry, an integrated circuit is an important component, whether the integrated circuit is designed to be safe or not directly determines whether the information industry is safe or not, and the information safety can be intuitively and importantly influenced, which is expressed in the aspects of the safety of the integrated circuit and the safety of information processing. However, more and more attack ways are available for chips, and chip security design protection measures are required to be continuously improved by chip design manufacturers in order to prevent malicious attacks from cracking the chips and prevent security characteristics such as hardware tamper-proof detection circuits, for example, once a security sensor on a chip detects illegal detection, the chip stops working to play a role in protection, but detection signals output by the security sensor may also be an attacked object.

Disclosure of Invention

The technical problem to be solved by the invention is to provide a method for encrypting the signal of the safety detection sensor based on the random number, which can effectively prevent external malicious attack, thereby ensuring that the use of the chip is safer and more reliable.

To solve the above technical problem, the encryption scheme of the present invention includes:

and the random number module is used for generating a random number signal and setting a certain turnover rate. The random number is continuously turned over to ensure the correctness of the encrypted signal data path.

And the exclusive-OR gate is used for carrying out exclusive-OR encryption on the required encrypted data and the random number. When the chip is laid out and wired, the chip should be placed near an output port of a signal to be encrypted so as to ensure that the path of the signal is encrypted.

And the decryption module is used for inverting the signal output by the exclusive-OR gate and then sending the inverted signal and the random number into the exclusive-OR gate.

By adopting the encryption method, external malicious attacks on the detection circuit of the internal security sensor of the chip can be more effectively prevented, so that the chip is more safely and reliably used.

Drawings

FIG. 1 is a schematic diagram of a method for encrypting a signal of a security sensor according to the present invention;

Detailed Description

The invention will be described in further detail with reference to the following detailed description and accompanying drawings:

referring to fig. 1, an encryption scheme for outputting an alarm signal and a path to a security detection sensor module mainly includes: the device comprises a true random number generation module, an exclusive-OR gate, a safety detection sensor and a decryption module.

The random number and Rand signal generated by the random number and the alarm signal S0 output by the safety detection sensor are subjected to an exclusive-OR gate output signal S1, and the exclusive-OR gate selected during the layout and wiring of the chip is placed at the alarm signal output end of the electric safety detection sensor as far as possible.

The S1 signal is sent to the input of the inverter of the decryption block, which inverts the signal to generate the S2 signal, and the S2 signal and the Rand signal are sent to the OR gate to output the S _ OUT signal.

In the above processing, it can be seen that if the transmission path L1 of the alarm signal output by the security detection sensor is attacked and cracked maliciously, an error occurs in the decryption module at a later stage, and the chip can perform corresponding processing at this time. Thus, the safety protection of the signal can be realized.

Although the present invention has been described with reference to specific examples, the description of the examples does not limit the scope of the present invention. Those skilled in the art can easily make various modifications or combinations of the embodiments without departing from the spirit and scope of the invention by referring to the description of the invention, which should also be construed as the scope of the invention.

Claims

1. A method for encrypting a signal of a security detection sensor in a chip based on a random number is characterized by mainly comprising the following steps:

firstly, carrying out XOR on a sensor output signal and a random number signal generated by a random source module at the output end of a safety detection sensor to realize data encryption of the sensor output signal; and then carrying out exclusive OR operation on the received encrypted data and the random number signal for encryption at the using end, thereby realizing the recovery of the output data of the sensor.

2. The method of claim 1, wherein: when the chip is laid out and wired, the exclusive-or encryption circuit is placed near an output port of a signal to be encrypted so as to ensure the encryption protection of a signal path.

3. The method of claim 1 or 2, wherein: the random number signal generated by the random source module needs to set a certain turnover rate.