WO2023233489A1

WO2023233489A1 - Information processing device, detection method, and detection program

Info

Publication number: WO2023233489A1
Application number: PCT/JP2022/022007
Authority: WO
Inventors: 楊鐘本
Original assignee: 日本電信電話株式会社
Priority date: 2022-05-30
Filing date: 2022-05-30
Publication date: 2023-12-07

Abstract

An information processing device (10) acquires image data of an electronic substrate and stores, in an image data DB (13a), the image data in association with identification information for uniquely identifying the electronic substrate. The information processing device (10) also acquires identification information of an electronic substrate to be inspected, reads the image data that correspond to the acquired identification information from the image data DB (13a), and detects a difference between the read image data and the image data of the electronic substrate to be inspected.

Description

Information processing device, detection method and detection program

The present invention relates to an information processing device, a detection method, and a detection program.

In recent years, cyber attacks targeting weaknesses in the supply chain have become more obvious and sophisticated. Risk management becomes even more important when companies use IoT (Internet of Things) devices. Therefore, when a vulnerability or malware infection is discovered, it is necessary to promptly check whether the device being used uses the software or hardware that causes the problem, and take countermeasures.

For example, as a method for detecting fraudulent circuits (hardware trojans) that invade during the design process, there is a technique that calculates the fraud score of the target electronic circuit by pattern matching based on the characteristics of past hardware trojans (for example, (See Non-Patent Document 1). In addition, for example, as a method for authenticating electronic components using PUF (Physically Hard to Copy Function), by embedding a special circuit that outputs a unique ID in electronic components, the uniqueness of electronic components is ensured and electronic There is a technique for detecting tampering with parts (for example, see Non-Patent Document 2).

However, with conventional technology, tampering with electronic boards cannot be easily and accurately detected, and the security level cannot be improved. For example, technology for detecting unauthorized circuits that enter during the design process targets each electronic circuit included in an electronic component, so detailed detection is possible, but it is possible to perform detailed detection by targeting each electronic circuit contained in an electronic component. Since a search for invalid circuits is required, the search range is large and processing takes time. For this reason, when applied at the distribution stage after the design process, the packaging that protects the electronic components must be removed to expose the electronic circuits, which is time-consuming, making it impossible to easily detect tampering with electronic boards. .

In addition, with the technology for authenticating electronic components using PUF, it is necessary to mount a special circuit on the electronic components, and while it is possible to detect modifications to electronic components, it is not possible to detect the addition of electronic components. Tampering could not be detected easily and accurately.

The present invention has been made in view of the above, and provides an information processing device, a detection method, and a detection program that can easily and accurately detect tampering with an electronic board and improve the security level. The purpose is to

In order to solve the above problems and achieve the purpose, an information processing device of the present invention acquires image data of an electronic board, and stores the image data in association with identification information that uniquely identifies the electronic board. a storage section to store the identification information of the electronic board to be inspected, read out image data corresponding to the acquired identification information from the storage section, and read out the read image data and an image of the electronic board to be inspected; It is characterized by having an image difference detection section that detects a difference between the image data and the data.

According to the present invention, tampering with an electronic board can be detected easily and accurately, and the security level can be improved.

FIG. 1 is a block diagram showing an example of the configuration of a system according to an embodiment. FIG. 2 is a block diagram illustrating the configuration of the information processing apparatus of this embodiment. FIG. 3 is a diagram illustrating the processing of the storage unit. FIG. 4 is a diagram illustrating the processing of the image difference detection section. FIG. 5 is a diagram illustrating the processing of the image difference detection section. FIG. 6 is a diagram illustrating the processing of the image difference detection section. FIG. 7 is a diagram illustrating the processing of the spatial difference detection section. FIG. 8 is a diagram illustrating an overview of tampering detection processing by the information processing device. FIG. 9 is a flowchart illustrating an example of a processing procedure at the time of registration by the information processing apparatus according to the embodiment. FIG. 10 is a flowchart illustrating an example of a processing procedure when tampering is detected by the information processing apparatus according to the embodiment. FIG. 11 is a diagram showing a computer that executes a program.

Hereinafter, embodiments of an information processing device, a detection method, and a detection program according to the present application will be described in detail based on the drawings. Further, the present invention is not limited to the embodiments described below.

[System configuration]
The configuration of a system including an information processing device according to an embodiment will be described. FIG. 1 is a block diagram showing an example of the configuration of a system according to an embodiment. As shown in FIG. 1, the system includes an information processing device 10 and a photographing device 20. The information processing device 10 and the photographing device 20 are connected to each other via a network 30. Regarding the network configuration shown in FIG. 1, each device may communicate via any communication network, such as the Internet, LAN, or VPN (Virtual Private Network), regardless of whether it is wired or wireless. Further, the configuration shown in FIG. 1 is only an example, and the specific configuration and the number of each device are not particularly limited.

For example, the information processing device 10 acquires image data and spatial data of an electronic board (a board on which electronic components are arranged) included in the IoT device from the imaging device 20, registers it at the time of shipment or procurement, and checks whether there are any differences. To detect. Thereby, the information processing device 10 can easily and accurately detect tampering with the electronic board, and can improve the security level. In the following, a case will be explained in which the information processing device 10 registers image data and spatial data at the time of electronic board shipment and procurement, and detects a difference; however, the information processing device 10 is limited to the time of shipment and procurement. Instead, for example, it may be immediately after manufacturing the electronic board or at the time of shipping.

The photographing device 20 acquires image data and spatial data of the electronic board and transmits them to the information processing device 10. For example, the imaging device 20 uses a camera to capture image data of an electronic board, and uses a laser to measure spatial data. Note that the photographing device 20 may acquire only image data. Note that the photographing device 20 may be installed in a factory and automatically take an image of the electronic board, for example, or may take an image of the electronic board manually at any location.

[Configuration of information processing device]
FIG. 2 is a block diagram illustrating the configuration of the information processing apparatus of this embodiment. As illustrated in FIG. 2, the information processing device 10 of this embodiment includes a communication processing section 11, a control section 12, and a storage section 13.

The communication processing unit 11 is realized by a NIC (Network Interface Card) or the like, and controls communication via a telecommunication line such as a LAN (Local Area Network) or the Internet.

The storage unit 13 stores data and programs necessary for various processing by the control unit 12, and has an image data DB 13a, a spatial data DB 13b, and a detection result data DB 13c. For example, the storage unit 13 is a semiconductor memory element such as a RAM (Random Access Memory) or a flash memory, or a storage device such as a hard disk or an optical disk.

The image data DB 13a stores image data of the electronic board. For example, the image data DB 13a stores an inspection object ID (identification information) that uniquely identifies an electronic board and image data of the electronic board in association with each other.

The spatial data DB 13b stores spatial data of the electronic board. For example, the spatial data DB 13b stores an inspection object ID (identification information) that uniquely identifies an electronic board and spatial data of the electronic board in association with each other.

The detection result data DB 13c stores a difference in image data detected by an image difference detection unit 12b, which will be described later, and a difference in spatial data, detected by a spatial difference detection unit 12c, which will be described later. For example, the detection result data DB 13c stores an ID that uniquely identifies an electronic board, differences and changes in image data (for example, chip inclusion, tampering with wiring, etc.), and differences and changes in spatial data. .

The control unit 12 has an internal memory for storing programs that define various processing procedures and required data, and executes various processes using these. For example, the control section 12 includes a storage section 12a, an image difference detection section 12b, a spatial difference detection section 12c, and an output section 12d. Here, the control unit 12 is an electronic circuit such as a CPU (Central Processing Unit) or an MPU (Micro Processing Unit), or an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

The storage unit 12a acquires image data of the electronic board, and stores the image data in the image data DB 13a in association with identification information that uniquely identifies the electronic board. Further, the storage unit 12a further acquires spatial data of the electronic board, and stores the spatial data in the spatial data DB 13b in association with identification information that uniquely identifies the electronic board.

The storage unit 12a stores, in the storage unit 13, image data captured by the imaging device 20 of the target electronic board and spatial data sensed. Here, it is assumed that if the electronic board is hidden behind a cover or a housing, the photographing or sensing is performed with the cover removed. Furthermore, as illustrated in FIG. 3, the storage unit 12a may correct deviations due to the region of the electronic board and rotation from the feature points of the electronic board during data registration.

The image difference detection unit 12b acquires identification information of the electronic board to be inspected, reads image data corresponding to the acquired identification information from the image data DB 13a, and compares the read image data with the image data of the electronic board to be inspected. Detect the difference between

For example, the image difference detection unit 12b calculates the degree of deviation between the position of the chip included in the image data read from the image data DB 13a and the position of the chip included in the image data of the electronic board to be inspected, and calculates the degree of deviation. is greater than or equal to a predetermined threshold, a difference in chip position is detected. In other words, if the degree of deviation is greater than or equal to a predetermined threshold, and if a chip that did not exist at the time of shipment was mixed in at the time of procurement, the image difference detection unit 12b detects the position of the incorrect chip that has been mixed in. , If the position of the chip at the time of shipment has moved at the time of procurement, the changed position of the chip is detected.

For example, the image difference detection unit 12b calculates the degree of deviation between the position of the wiring included in the image data read from the image data DB 13a and the position of the wiring contained in the image data of the electronic board to be inspected, and calculates the degree of deviation. is greater than or equal to a predetermined threshold, a difference in the wiring positions is detected. In other words, if the degree of deviation is greater than or equal to a predetermined threshold, and if a wiring that did not exist at the time of shipment exists at the time of procurement, the image difference detection unit 12b detects the position of the incorrect wiring and ships the wiring. If the position of the original wiring has moved at the time of procurement, the changed position of the wiring is detected.

Here, the processing of the image difference detection unit 12b will be explained using FIGS. 4 to 6. As illustrated in FIG. 4, the image difference detection unit 12b acquires the size and position information of the board area, the package that protects the IC chip, and the soldered wiring area, and acquires the size and position information at the time of shipping and procurement. Detect discrepancies in information and addition of packages and wiring that were not present at the time of shipment.

Further, as illustrated in FIG. 5, when detecting chip contamination, the image difference detection unit 12b uses a black filter to identify continuous black areas as chips, and then determines the size of the chip and the reference point (upper left corner). ) to measure the position. Further, as illustrated in FIG. 6, when detecting tampering with wiring, the image difference detection unit 12b uses a white filter to identify continuous white areas as wiring, and then measures the coordinates of the wiring.

When detecting a difference, the image difference detection unit 12b compares the chip position information (C1, C2, . . .) and the wiring position information (E1, E2, . . .) of the comparison source and comparison target, and detects the deviation. If the degree is greater than or equal to the threshold, it is detected that there is a difference. The image difference detection unit 12b calculates the deviation degree Dc of the chip position information and the deviation degree De of the wiring position information as follows.
Dc=C1-C1'=|x1-x1'|+|y1-y1'|+|w1-w1'|+|h1-h1|
De=E1-E1'=|x11-x11'|+|y11-y11'|+|x12-x12'|+|y12-y12'|

The spatial difference detection unit 12c acquires the identification information of the electronic board to be inspected, reads spatial data corresponding to the acquired identification information from the spatial data DB 13b, and compares the read spatial data with the spatial data of the electronic board to be inspected. Detect the difference between For example, the spatial difference detection unit 12c calculates the degree of deviation between the height of each area of the spatial data read from the spatial data DB 13b and the height of each area of the spatial data of the electronic board to be inspected, and determines that the degree of deviation is a predetermined value. If the difference is greater than or equal to the threshold value, it is detected that there is a difference in the chip position.

Here, the processing of the spatial difference detection unit 12c will be explained using FIG. 7. As illustrated in FIG. 7, the spatial difference detection unit 12c identifies the position of a package (black or the like) that protects the IC chip from unevenness on the electronic board or soldered wiring (white or the like). Here, an attacker who detects the discrepancy between the location information at the time of shipment and the location information at the time of procurement, or the addition of packages or wiring that was not present at the time of shipment, may paint the mixed chip or tampered wiring to make it difficult to notice. This can make the differences difficult to understand.

For this reason, the spatial difference detection unit 12c detects chip contamination or wiring tampering from spatial information (difference in the height direction), for example, when a difference cannot be detected from the image. The spatial difference detection unit 12c subdivides the area of the electronic board, uses the height of the board as a reference, measures height information of each area, and detects a difference. For example, the spatial difference detection unit 12c sets the height information of each square as Z1, Z2, ..., calculates the degree of deviation Dz of surface irregularities as follows, and determines the difference when the degree of deviation exceeds a threshold value. Detected as.
Dz=Σ|Zi-Zi^′|

The output unit 12d outputs the detection results of the image difference detection unit 12b and the spatial difference detection unit 12c. For example, if a chip that did not exist at the time of shipment is mixed in at the time of procurement, the output unit 12d outputs the position of the illegal chip detected by the image difference detection unit 12b, and outputs the position of the incorrect chip detected by the image difference detection unit 12b. If the position has moved at the time of procurement, the changed chip position detected by the image difference detection unit 12b is output. For example, if a wiring that did not exist at the time of shipment exists at the time of procurement, the output unit 12d outputs the position of the incorrect wiring detected by the spatial difference detection unit 12c, and outputs the position of the incorrect wiring detected by the spatial difference detection unit 12c. If the position has moved at the time of procurement, the changed wiring position detected by the spatial difference detection unit 12c is output.

Here, an overview of the tampering detection process by the information processing device 10 will be explained using FIG. 8. FIG. 8 is a diagram illustrating an overview of tampering detection processing by the information processing device. As illustrated in FIG. 8, for example, at the time of shipment, the imaging device 20A photographs and measures the electronic board (board on which electronic components are arranged) included in the IoT device using a camera or laser, and performs image identification and measurement of the electronic board. Image data and spatial data of the electronic board are obtained by performing shape identification using LIDAR (see (1) in FIG. 8). Then, the photographing device 20 transmits the information to the information processing device 10. Then, the information processing device 10 acquires image data and spatial data from the imaging device A, and stores them in the storage unit 13 in association with the inspection object ID.

Then, at the time of procurement, the imaging device 20B acquires image data and spatial data of the electronic board to be inspected (see (2) in FIG. 8), and transmits it to the information processing device 10 together with the inspection object ID. The information processing device 10 reads the image data and spatial data corresponding to the inspection target ID from the storage unit 13, and detects the difference between the read image data and spatial data and the image data of the electronic board to be inspected (FIG. 8 (See (3)). Then, for example, the information processing device 10 detects as a detection result. If a chip that was not present at the time of shipment is mixed in at the time of procurement, the position of the detected illegal chip is output (see (4) in FIG. 8).

[Processing procedure of information processing device 10]
Next, an example of a processing procedure of processing executed by the information processing device 10 will be described using FIG. 9 and FIG. 10. FIG. 9 is a flowchart illustrating an example of a processing procedure at the time of registration by the information processing apparatus according to the embodiment. FIG. 10 is a flowchart illustrating an example of a processing procedure when tampering is detected by the information processing apparatus according to the embodiment. Note that the registration process in FIG. 9 is a process performed when an electronic board is shipped, and the process at the time of tampering detection in FIG. 10 is described below as a process to be performed when an electronic board is procured. The timing is not limited to this.

As illustrated in FIG. 9, when the storage unit 12a of the information processing device 10 acquires the image data and spatial data of the electronic board from the imaging device 20 at the time of shipping the electronic board (Yes in step S101), the storage unit 12a of the information processing device 10 stores the image data and the spatial data. The data is stored in the storage unit 13 in association with the inspection object ID (step S102).

Further, as illustrated in FIG. 10, when the image difference detection unit 12b of the information processing device 10 acquires the inspection object ID at the time of procuring the electronic board (Yes at step S201), the image difference detection unit 12b of the information processing device 10 detects the image data corresponding to the inspection object ID. The image data is read from the image data DB 13a (step S202), and a difference between the read image data and the image data of the electronic board to be inspected is detected (step S203).

As a result, if the image difference detection unit 12b detects a difference (Yes at step S204), the output unit 12d outputs the detection result (step S207). Further, when the image difference detection unit 12b does not detect a difference (No in step S204), the spatial data corresponding to the inspection object ID is read out from the spatial data DB 13b (step S205), and the read spatial data and the inspection object The difference between the spatial data of the electronic board and the spatial data of the electronic board is detected (step S206). After that, the output unit 12d outputs the detection result of the image difference detection unit 12b (step S207).

[Effects of embodiment]
In this way, the information processing apparatus 10 according to the embodiment acquires image data of an electronic board, and stores the image data in the image data DB 13a in association with identification information that uniquely identifies the electronic board. Then, the information processing device 10 acquires the identification information of the electronic board to be inspected, reads image data corresponding to the acquired identification information from the image data DB 13a, and combines the read image data and the image data of the electronic board to be inspected. Detect the difference between Therefore, the information processing device 10 can easily and accurately detect tampering with the electronic board, and can improve the security level.

In other words, in the information processing device 10, for example, the user can check whether the IoT device including the electronic board used by the user has been tampered with during the distribution stage, thereby improving the user's security level. Is possible. For this reason, the information processing device 10 can, for example, detect tampering with electronic components that are components of electronic devices such as IoT devices (incorporation of unauthorized IC chips or alteration of wiring). It is possible to determine whether IoT devices have been tampered with during the distribution process of the supply chain, and to improve cybersecurity.

[System configuration, etc.]
The components of the illustrated devices according to the above embodiments are functional and conceptual, and do not necessarily need to be physically configured as illustrated. In other words, the specific form of distributing and integrating each device is not limited to what is shown in the diagram, and all or part of the devices can be functionally or physically distributed or integrated in arbitrary units depending on various loads and usage conditions. Can be integrated and configured. Furthermore, all or any part of each processing function performed by each device may be realized by a CPU and a program that is analyzed and executed by the CPU, or may be realized as hardware using wired logic.

Furthermore, among the processes described in the above embodiments, all or part of the processes described as being performed automatically can be performed manually, or the processes described as being performed manually can be performed manually. All or part of the process can also be performed automatically using known methods. In addition, information including processing procedures, control procedures, specific names, and various data and parameters shown in the above documents and drawings may be changed arbitrarily, unless otherwise specified.

〔program〕
Further, it is also possible to create a program in which the processing executed by the information processing apparatus described in the above embodiment is written in a language executable by a computer. In this case, when the computer executes the program, the same effects as in the above embodiment can be obtained. Furthermore, the same processing as in the above embodiments may be realized by recording such a program on a computer-readable recording medium and having the computer read and execute the program recorded on this recording medium.

FIG. 11 is a diagram showing a computer that executes the program. As illustrated in FIG. 11, the computer 1000 includes, for example, a memory 1010, a CPU 1020, a hard disk drive interface 1030, a disk drive interface 1040, a serial port interface 1050, a video adapter 1060, and a network interface 1070. However, each of these parts is connected by a bus 1080.

The memory 1010 includes a ROM (Read Only Memory) 1011 and a RAM 1012, as illustrated in FIG. The ROM 1011 stores, for example, a boot program such as BIOS (Basic Input Output System). Hard disk drive interface 1030 is connected to hard disk drive 1031, as illustrated in FIG. Disk drive interface 1040 is connected to disk drive 1041, as illustrated in FIG. For example, a removable storage medium such as a magnetic disk or an optical disk is inserted into the disk drive 1041. The serial port interface 1050 is connected to, for example, a mouse 1051 and a keyboard 1052, as illustrated in FIG. Video adapter 1060 is connected to display 1061, for example, as illustrated in FIG.

Here, as illustrated in FIG. 11, the hard disk drive 1031 stores, for example, an OS 1091, an application program 1092, a program module 1093, and program data 1094. That is, the above program is stored, for example, in the hard disk drive 1031 as a program module in which commands to be executed by the computer 1000 are written.

Further, the various data described in the above embodiments are stored as program data in, for example, the memory 1010 or the hard disk drive 1031. Then, the CPU 1020 reads out the program module 1093 and program data 1094 stored in the memory 1010 and the hard disk drive 1031 to the RAM 1012 as necessary, and executes various processing procedures.

Note that the program module 1093 and program data 1094 related to the program are not limited to being stored in the hard disk drive 1031, but may be stored in a removable storage medium, for example, and read by the CPU 1020 via a disk drive or the like. . Alternatively, the program module 1093 and program data 1094 related to the program are stored in another computer connected via a network (LAN (Local Area Network), WAN (Wide Area Network), etc.), and are transmitted via the network interface 1070. It may be read by the CPU 1020.

Although embodiments to which the invention made by the present inventor is applied have been described above, the present invention is not limited by the description and drawings that form part of the disclosure of the present invention by this embodiment. That is, all other embodiments, examples, operational techniques, etc. made by those skilled in the art based on this embodiment are included in the scope of the present invention.

10 Information processing device 11 Communication processing section 12 Control section 12a Storage section 12b Image difference detection section 12c Spatial difference detection section 12d Output section 13 Storage section 13a Image data DB
13b Spatial data DB
13c Detection result data DB

Claims

a storage unit that acquires image data of the electronic board and stores the image data in a storage unit in association with identification information that uniquely identifies the electronic board;
An image in which identification information of an electronic board to be inspected is acquired, image data corresponding to the acquired identification information is read from the storage section, and a difference between the read image data and the image data of the electronic board to be inspected is detected. An information processing device comprising: a difference detection section;
The image difference detection unit calculates the degree of deviation between the position of the chip included in the image data read from the storage unit and the position of the chip included in the image data of the electronic board to be inspected, and determines whether the degree of deviation is 2. The information processing apparatus according to claim 1, wherein the information processing apparatus detects a difference in chip position when the difference is equal to or greater than a predetermined threshold.
The image difference detection unit calculates the degree of deviation between the position of the wiring included in the image data read from the storage unit and the position of the wiring included in the image data of the electronic board to be inspected, and determines whether the degree of deviation is 2. The information processing apparatus according to claim 1, wherein the information processing apparatus detects a difference in the position of the wiring if the difference is equal to or greater than a predetermined threshold.
The storage unit further acquires spatial data of the electronic board, and stores the spatial data in a storage unit in association with the identification information,
Obtaining identification information of the electronic board to be inspected, reading spatial data corresponding to the acquired identification information from the storage unit, and detecting a difference between the read spatial data and the spatial data of the electronic board to be inspected. The information processing apparatus according to claim 1, further comprising a spatial difference detection section.
The spatial difference detection unit calculates the degree of deviation between the height of each area of the spatial data read from the storage unit and the height of each area of the spatial data of the electronic board to be inspected, and determines whether the degree of deviation is a predetermined value. 5. The information processing apparatus according to claim 4, wherein if the difference is greater than or equal to a threshold value, it is detected that there is a difference in the position of the chip.
A detection method executed by an information processing device, comprising:
a storage step of acquiring image data of the electronic board and storing the image data in a storage unit in association with identification information that uniquely identifies the electronic board;
An image in which identification information of an electronic board to be inspected is acquired, image data corresponding to the acquired identification information is read from the storage section, and a difference between the read image data and the image data of the electronic board to be inspected is detected. A detection method comprising: a difference detection step;
a storing step of acquiring image data of the electronic board and storing the image data in a storage unit in association with identification information that uniquely identifies the electronic board;
An image in which identification information of an electronic board to be inspected is acquired, image data corresponding to the acquired identification information is read from the storage section, and a difference between the read image data and the image data of the electronic board to be inspected is detected. A detection program characterized by causing a computer to execute the step of detecting a difference.