CN203535642U - Dynamic shielding protection device for secure chip - Google Patents

Dynamic shielding protection device for secure chip Download PDF

Info

Publication number
CN203535642U
CN203535642U CN201320696750.8U CN201320696750U CN203535642U CN 203535642 U CN203535642 U CN 203535642U CN 201320696750 U CN201320696750 U CN 201320696750U CN 203535642 U CN203535642 U CN 203535642U
Authority
CN
China
Prior art keywords
signal
group
metal wire
wire group
group selection
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
CN201320696750.8U
Other languages
Chinese (zh)
Inventor
谭洪贺
刘忠志
陈世柱
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Beijing KT Micro Ltd
Original Assignee
Beijing KT Micro Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Beijing KT Micro Ltd filed Critical Beijing KT Micro Ltd
Priority to CN201320696750.8U priority Critical patent/CN203535642U/en
Application granted granted Critical
Publication of CN203535642U publication Critical patent/CN203535642U/en
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Landscapes

  • Semiconductor Integrated Circuits (AREA)

Abstract

The utility model relates to a dynamic shielding protection device for a secure chip. The dynamic shielding protection device for the secure chip comprises a signal generation module which is used to generate a first signal and a second signal, a plurality of first metal wire groups, and a second metal wire group which is a middle metal layer arranged in the secure chip, wherein the second signal is transmitted through the second metal wire group. The dynamic shielding protection device for the secure chip further comprises a group control module which is used to select a first metal wire group to transmit the first signal, and a signal comparison module which is used to compare the first signal transmitted through the selected first metal wire group with the second signal transmitted through the second metal wire group and trigger safety precautions of the secure chip according to a comparative result. The dynamic shielding protection device for the secure chip can reduce physical cost and power dissipation of a dynamic shielding system.

Description

Dynamic shielding protective device for safety chip
Technical field
The utility model relates to microelectronic, relates in particular to a kind of dynamic shielding protective device for safety chip.
Background technology
Safety chip, for objects such as information storage, data transmission, requires this class chip can resist various attack means, to prevent that assailant from obtaining, revising or using the secret information on this class chip conventionally.Wherein attack means is to use on the metal wire of microprobe contact below chip passivation layer surface to read a Data within the chip, and coordinate focused ion beam (Focused Ion Beam is called for short: FIB) technology is modified to metal wire simultaneously.
Masking technique can protect chip not to be subject to the attack of above-mentioned means, and masking technique is divided two kinds: a kind of is static masking technique, and another kind is dynamic shielding technology.Wherein, static masking technique is to use simple metal level or metal grill to cover chip, prevents assailant's observation and the detection of microprobe; Yet the metal that static state is covered can be removed, revise by chemical mordant or other technologies.Dynamic shielding technology is to cover chip by many metal line, and drives the signal that has dynamic change on metal wire, once certain metal wire is removed, cuts off or be shorted on other metal wires, masking system can detect the also safeguard measure of triggering following.The two is compared, and the security of dynamic shielding technology is higher.
For dynamic shielding system, for chip integral body is covered, in order to increase FIB, revise the difficulty of metal wire simultaneously, need on the top layer metallic layer of chip, arrange a large amount of metal wires, for each metal wire, with a Dynamic Signal, drive.If the metal wire quantity of using is less; it is Dynamic Signal negligible amounts; the area that each wires covers is so just larger; the length that is each metal wire is just longer; certainly will require Dynamic Signal must there is larger driving force; need to use larger driving element, cause the overall physics cost of protection system higher.If the metal wire quantity of using is larger; be that Dynamic Signal quantity is larger; the area that each wires covers is so just smaller; the length that is each metal wire is just shorter, now, although each driving element is little; but because metal wire quantity has increased; the overall physics cost of protection system is not low yet, and meanwhile, signal increase also can increase the power consumption of system.
Utility model content
The utility model provides a kind of dynamic shielding protective device for safety chip, in order to realize physics cost and the power consumption that reduces dynamic shielding system.
The utility model provides a kind of dynamic shielding protective device for safety chip, comprising:
Signal generator, for generating first signal and secondary signal;
M the first metal wire group, is arranged in the top layer metallic layer of described safety chip, and each first metal wire group comprises N metal line, and wherein, M is more than or equal to 2 natural number, and N is more than or equal to 2 natural number;
A second metal wire group, comprises N metal line, is arranged in the intermediate metal layer of described safety chip, and described secondary signal is via described the second metal wire group transmission;
Packeting controller, for selecting a first metal wire group to transmit described first signal;
Signal comparator, compares for the first signal to via described the first metal wire group transmission with via the secondary signal of described the second metal wire group transmission, triggers the safety precautions of described safety chip according to comparative result.
In the utility model, a metal wire group in a first signal demand motive M the first metal wire group, other metal wire groups are not driven, with do not divide into groups to compare, the length of first signal has reduced and the requirement of its driving force has been reduced, thereby has reduced physics cost and the power consumption of dynamic shielding system.
Accompanying drawing explanation
Fig. 1 is that the utility model is for the structural representation of the dynamic shielding protective device embodiment of safety chip;
Fig. 2 is that the utility model is for the schematic flow sheet of the dynamic shielding guard method embodiment of safety chip;
Fig. 3 organizes the structural representation of switching signal generation unit in the utility model dynamic shielding protective device embodiment Fig. 1 for safety chip.
Embodiment
Below in conjunction with specification drawings and specific embodiments, the utility model will be further described.
As shown in Figure 1; for the structural representation of the utility model for the dynamic shielding protective device embodiment of safety chip, this device can comprise signal generator 11, M the first metal wire group 121,122 ... 12M; the second metal wire group 13, packeting controller 14 and a signal comparator 15.The output terminal of signal generator 11 is connected with the second metal wire group 13 with the input end of packeting controller 14 respectively, packeting controller 14 and M the first metal wire group 121,122 ... 12M connects, and the input end of signal comparator 15 is connected with the output terminal of packeting controller 14 with the second metal wire group 13 respectively.
M the first metal wire group 121,122 ... 12M is arranged in the top layer metallic layer of safety chip, and cover full chip or segment chip, each first metal wire group comprises N metal line, wherein, M is more than or equal to 2 natural number, and N is more than or equal to 2 natural number; The second metal wire group 13 comprises N metal line, is arranged in the intermediate metal layer of safety chip.
Wherein, signal generator 11 is for generating first signal and secondary signal; The length of first signal and secondary signal is N bit.Alternatively, first signal and secondary signal identical or the two between meet particular kind of relationship, for example: the two is contrary or have a specific function relation.Alternatively, signal generator 11 specifically can adopt counter, random signal generator, linear feedback shift register or their combination to realize.
Packeting controller 14 is for selecting a first metal wire group to transmit first signal.
Secondary signal is via the second metal wire group 13 transmission.
Signal comparator 15 compares for the first signal to via the first metal wire group transmission with via the secondary signal of the second metal wire group transmission, triggers the safety precautions of safety chip according to comparative result.When assailant implements to attack to chip; if remove, disconnection or short circuit the metal wire in the first metal wire group; to cause via the first signal of the first metal wire group transmission and not identical or no longer meet particular kind of relationship via the secondary signal of the second metal wire group transmission; at this moment signal comparator 15 output alarm signals trigger safety precautions, for example: core data is protected.
The first signal that packeting controller 14 control signal makers 11 generate drives M the first metal wire group 121,122 ... which group metal wire in 12M is selected M the first metal wire group 121,122 simultaneously ... the signal transmitting on which group metal wire in 12M is as the input signal of signal comparator 15.
As shown in Figure 2, be the schematic flow sheet of the utility model for the dynamic shielding guard method embodiment of safety chip, the method can be applied to structural representation shown in Fig. 1, and the method can comprise the steps:
Step 21, signal generator 11 generate first signal and secondary signal;
Step 22, packeting controller 14 select a first metal wire group to transmit first signal, the second metal wire group transmission secondary signal;
Step 23,15 pairs of first signals via the first metal wire group transmission of signal comparator and the secondary signal of transmitting via the second metal wire group compare, and trigger the safety precautions of safety chip according to comparative result.
In the present embodiment, when this device work, a metal wire group in a first signal demand motive M the first metal wire group, other metal wire groups are not driven, with do not divide into groups to compare, the length of first signal has reduced and the requirement of its driving force has been reduced, thereby has reduced physics cost and the power consumption of dynamic shielding system.
Alternatively, then structural representation shown in Figure 1, packeting controller 14 can comprise group selection signal generation unit 140, the first group selection unit 141, the second group selection unit 142, group switching signal generation unit 143 and group selection signal switch unit 144.The output terminal of group selection signal generation unit 140 is connected with the input end of group selection signal switch unit 144 with the output terminal of group switching signal generation unit 143, the output terminal of group selection signal switch unit 144 is connected with the input end of the second group selection unit 142 with the input end of the first group selection unit 141, the input end of the first group selection unit 141 is also connected with the output terminal of signal generator 11, the output terminal of the first group selection unit 141 and M the first metal wire group 121, 122 ... 12M connects, the input end of the second group selection unit 142 also with M the first metal wire group 121, 122 ... 12M connects.
Group selection signal generation unit 140 is for generating group selection signal.Wherein, divide the length of group selection signal to be at least log 2m position.
The first group selection unit 141 is for selecting a first metal wire group according to group selection signal, and described first signal drives the first metal wire group of selecting.In other words, which metal wire group the first group selection unit 141 choice for use first signals drive.
The first metal wire group of the second group selection unit 142 for selecting to be driven by described first signal according to described group selection signal.In other words, the signal in which the first metal wire group is selected to accept in the second group selection unit 142.
Group switching signal generation unit 143 is for generating group switching signal.
Group selection signal switch unit 144, for according to group switching signal, is upgraded the group selection signal of output.Particularly, when group switching signal is effective, group selection signal switch unit 144 is upgraded group selection signal, and the group selection signal after upgrading is sent to the first group selection unit 141 and the second group selection unit 142; When group switching signal is invalid, group selection signal switch unit 144 keeps group selection signal constant.
Correspondingly, in Fig. 2, the packeting controller 14 in step 22 selects a first metal wire group to transmit first signal can comprise the steps: that group selection signal generation unit 140 generates group selection signal; The first group selection unit 141 and the second group selection unit 142 select a first metal wire group to transmit first signal according to group selection signal; Group switching signal generation unit 143 generation group switching signals; Group selection signal switch unit 144, according to group switching signal, is upgraded group selection signal.
Alternatively; as shown in Figure 3; for the utility model is for organizing the structural representation of switching signal generation unit in dynamic shielding protective device embodiment Fig. 1 of safety chip; in order once effectively to organize switching signal according to the generation of random time interval, group switching signal generation unit 143 can comprise that random number generates subelement 1431, compares subelement 1432 and group switching signal generation subelement 1433.Wherein, relatively the input end of subelement 1432 is connected with the output terminal that random number generates subelement 1431, and the input end that group switching signal generates subelement 1433 is connected with the output terminal that compares subelement 1432.
Random number generates subelement 1431 for generating a random number.Relatively subelement 1432 is for comparing random number and predetermined value.Group switching signal generates subelement 1433 for according to the comparative result generation group switching signal of subelement 1432 relatively.
Correspondingly, group switching signal generation unit 143 generation group switching signals can be adopted with the following method and be realized: random number generates subelement 1431 and generates a random number, and relatively subelement 1432 compares random number and predetermined value; Group switching signal generates subelement 1433 according to comparative result generation group switching signal.
This group switching signal generation unit 143 can randomization group switching signal interval effective time, like this can be so that the job order of the first metal wire group, working time randomization increase the difficulty of attacking and analyzing.For example: use 4 bit randomizers, as the linear feedback shift register of 4 bits, relatively this 4 bit random number and 4 bit constants 7 in real time; When the two is equal, output is group switching signal effectively, and interval effective time of group switching signal is random, and average probability is 1/16.If switching signal is effectively organized in output when 4 bit random numbers are less than constant 7, whenever 4 bit random numbers equal 0,1,2,3,4,5 or the effective group switching signal 302 of output in 6 o'clock, interval effective time of group switching signal is random, and average probability is 7/16.If switching signal is effectively organized in output when 4 bit random numbers are greater than constant 7, interval effective time of group switching signal is random, and average probability is 9/16.
Alternatively, in order to make first signal and secondary signal meet pre-provisioning request, for example: keep identical with the last cycle, signal anti-in last cycle, entirely zero, complete one, etc., packeting controller 14 can also comprise control module 145, is connected with signal generator 11, for control signal maker 11, generates first signal and the secondary signal that meets pre-provisioning request.Correspondingly, in schematic flow sheet shown in Fig. 2, can also comprise the steps: that signal generator 11 is according to control signal, generate the first signal and the secondary signal that meet pre-provisioning request.
Alternatively, signal comparator 15 can comprise signal comparing unit 151 and trigger element 152.
Signal comparing unit 151 compares for the first signal to via the first metal wire group transmission with via the secondary signal of the second metal wire group transmission.Trigger element 152, for according to the comparative result of signal comparing unit 151, when first signal is identical with secondary signal or meet predetermined condition, triggers the safety precautions of safety chip.Correspondingly; in schematic flow sheet shown in Fig. 2; the safety precautions that triggers described safety chip according to comparative result in step 23 is specifically as follows following steps: when first signal is identical with secondary signal or meet predetermined condition, trigger the safety precautions of safety chip.
Finally it should be noted that: above embodiment is only unrestricted in order to the technical solution of the utility model to be described, although the utility model is had been described in detail with reference to preferred embodiment, those of ordinary skill in the art is to be understood that, can modify or be equal to replacement the technical solution of the utility model, and not depart from the spirit and scope of technical solutions of the utility model.

Claims (5)

1. for a dynamic shielding protective device for safety chip, it is characterized in that, comprising:
Signal generator, for generating first signal and secondary signal;
M the first metal wire group, is arranged in the top layer metallic layer of described safety chip, and each first metal wire group comprises N metal line, and wherein, M is more than or equal to 2 natural number, and N is more than or equal to 2 natural number;
A second metal wire group, comprises N metal line, is arranged in the intermediate metal layer of described safety chip, and described secondary signal is via described the second metal wire group transmission;
Packeting controller, for selecting a first metal wire group to transmit described first signal;
Signal comparator, compares for the first signal to via described the first metal wire group transmission with via the secondary signal of described the second metal wire group transmission, triggers the safety precautions of described safety chip according to comparative result.
2. device according to claim 1, is characterized in that, described packeting controller comprises:
Group selection signal generation unit, for generating group selection signal;
The first group selection unit, for selecting a first metal wire group according to described group selection signal, described first signal drives the first metal wire group of selecting;
The second group selection unit, for the first metal wire group of selecting to be driven by described first signal according to described group selection signal;
Group switching signal generation unit, for generating group switching signal;
Group selection signal switch unit, input end is connected with described group selection signal switch unit with described group selection signal generation unit, output terminal is connected with described the second group selection unit with described the first group selection unit, for according to described group of switching signal, upgrades the group selection signal of output.
3. device according to claim 2, is characterized in that, described group of switching signal generation unit comprises:
Random number generates subelement, for generating a random number;
Compare subelement, for described random number and predetermined value are compared;
Group switching signal generates subelement, for generating described group of switching signal according to the described relatively comparative result of subelement.
4. device according to claim 2, is characterized in that, described packeting controller also comprises:
Control module, generates for controlling described signal generator first signal and the secondary signal that meets pre-provisioning request.
5. device according to claim 1, is characterized in that, described first signal is identical with described secondary signal or meet predetermined condition;
Described signal comparator comprises:
Signal comparing unit, compares for the first signal to via described the first metal wire group transmission with via the secondary signal of described the second metal wire group transmission;
Trigger element, is connected with described signal comparing unit, for when described first signal is identical with described secondary signal or meet predetermined condition, triggers the safety precautions of described safety chip.
CN201320696750.8U 2013-11-06 2013-11-06 Dynamic shielding protection device for secure chip Expired - Lifetime CN203535642U (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201320696750.8U CN203535642U (en) 2013-11-06 2013-11-06 Dynamic shielding protection device for secure chip

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201320696750.8U CN203535642U (en) 2013-11-06 2013-11-06 Dynamic shielding protection device for secure chip

Publications (1)

Publication Number Publication Date
CN203535642U true CN203535642U (en) 2014-04-09

Family

ID=50421826

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201320696750.8U Expired - Lifetime CN203535642U (en) 2013-11-06 2013-11-06 Dynamic shielding protection device for secure chip

Country Status (1)

Country Link
CN (1) CN203535642U (en)

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103559459A (en) * 2013-11-06 2014-02-05 北京昆腾微电子有限公司 Dynamic shielding protection device and method for safety chip
CN105224887A (en) * 2015-10-30 2016-01-06 深圳国微技术有限公司 A kind of anti-tamper screen layer for safety chip
CN106227955A (en) * 2016-07-22 2016-12-14 天津大学 A kind of reconstructing method for chip top-layer metal protection layer
CN108701193A (en) * 2016-02-12 2018-10-23 汉阳大学校产学协力团 Secure semiconductor chip and its working method

Cited By (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103559459A (en) * 2013-11-06 2014-02-05 北京昆腾微电子有限公司 Dynamic shielding protection device and method for safety chip
CN105224887A (en) * 2015-10-30 2016-01-06 深圳国微技术有限公司 A kind of anti-tamper screen layer for safety chip
CN108920982A (en) * 2015-10-30 2018-11-30 深圳国微技术有限公司 A kind of anti-tamper shielded layer for safety chip
CN108985106A (en) * 2015-10-30 2018-12-11 深圳国微技术有限公司 A kind of anti-tamper shielded layer for safety chip
CN105224887B (en) * 2015-10-30 2019-03-15 深圳国微技术有限公司 A kind of anti-tamper shielded layer for safety chip
CN108985106B (en) * 2015-10-30 2021-07-20 深圳国微技术有限公司 Tamper-proof shielding layer for security chip
CN108920982B (en) * 2015-10-30 2021-08-17 深圳国微技术有限公司 Tamper-proof shielding layer for security chip
CN108701193A (en) * 2016-02-12 2018-10-23 汉阳大学校产学协力团 Secure semiconductor chip and its working method
CN108701193B (en) * 2016-02-12 2022-08-30 汉阳大学校产学协力团 Secure semiconductor chip and method for operating the same
CN106227955A (en) * 2016-07-22 2016-12-14 天津大学 A kind of reconstructing method for chip top-layer metal protection layer

Similar Documents

Publication Publication Date Title
CN203535642U (en) Dynamic shielding protection device for secure chip
KR20170072274A (en) Tamper resistant module for industrial control system
CN101796467B (en) Mesh grid protection
CN101950332B (en) Chip protecting method and system
CN103559459A (en) Dynamic shielding protection device and method for safety chip
CN102324006B (en) Processor program safety protection device and method
CN105530263A (en) Ultra-lightweight RFID bidirectional authentication method based on label ID
CN104850805A (en) Device and method for protecting sensitive information of chip system
CN105975878A (en) Safe storage method and system based on Nand Flash flash-memory
US10489614B2 (en) Tamper detecting cases
CN102662804A (en) Power-down-prevention irreversible self-destroying method for solid state disk
CN102855161A (en) Data interleaving scheme for an external memory of a secure microcontroller
CN105488421A9 (en) The invasion detection system and method for industry and metering device without battery
CN203271342U (en) Internet of Things coded lock
CN103338107B (en) Key generation method and key generating device
CN104571942A (en) Data storage system and method analyzing non-signal
CN105874415B (en) Touch-control label, the recognition methods of its information and the information providing method using it
CN202205195U (en) Equipment for reading and writing physical memory of computer through IEEE 1394 interface
CN202159381U (en) Anti-theft alarming door access controller
CN209248685U (en) A kind of financial self-service equipment communication security control system
CN202422136U (en) Wireless remote control solid state disk with protection function
CN106295418A (en) Safety protection equipment, interface and nucleus equipment
CN101833628A (en) Storage device with anti-virus function and implementation method thereof
Rasapour et al. Misusing sensory channel to attack industrial control systems
EP2677327A1 (en) Method for producing an electronic device with a disabled sensitive mode, and method for transforming such an electronic device to re-activate its sensitive mode

Legal Events

Date Code Title Description
C14 Grant of patent or utility model
GR01 Patent grant
CX01 Expiry of patent term
CX01 Expiry of patent term

Granted publication date: 20140409