Integration of security modules on an integrated circuit
AssigneeKoninklijke Philips Electronics N.V.
InventorMark Leonard Buer
Life of this patent
Estimating the term…
Abstract
An integrated circuit includes secure logic that requires protection. Secure assurance logic protects the secure logic. The secure assurance logic includes a plurality of protection modules that monitor the occurrence of insecure conditions. Each protection module monitors a different type of insecure condition. Each protection module asserts an alarm signal when an associated insecure condition is detected. The alarm signals asserted by the plurality of protection modules are stored.
Claims20
An integrated circuit comprising:
- secure logic that requires protection;
- and,
- secure assurance logic that protects the secure logic, the secure assurance logic including:
- a plurality of protection modules for monitoring occurrence of insecure conditions, wherein the plurality of protection modules are interrelated such that each protection module monitors a different type of insecure condition, each protection module asserts an alarm signal when an associated insecure condition is detected, and a successful attack on the plurality of protection modules must simultaneously defeat at least two of the plurality of protection modules to gain access to the secure logic, and
- storing means for receiving and storing the alarm signals asserted by the plurality of protection modules.
A method for protecting secure logic within an integrated circuit, the method comprising the following steps:
- (a) monitoring, by a plurality of projection modules, occurrence of insecure conditions, the plurality of protection modules being interrelated such that each protection module monitors occurrence of a different type of insecure condition, and a successful attack on the plurality of protection modules must simultaneously defeat at least two of the plurality of protection modules to gain access to the secure logic, including the following substep:
- (a.1) asserting an alarm signal by a protection module from the plurality of protection modules, upon the protection module detecting an associated insecure condition;
- and,
- (b) receiving and storing alarm signals asserted by the plurality of protection modules.
Secure assurance logic within an integrated circuit, the secure assurance logic protecting secure logic, the secure assurance logic comprising:
- a plurality of protection modules for monitoring occurrence of insecure conditions, wherein the plurality of protection modules are interrelated such that each protection module monitors a different type of insecure condition, each protection module asserts an alarm signal when an associated insecure condition is detected, and a successful attack on the plurality of protection modules must simultaneously defeat at least two of the plurality of protection modules to gain access to the secure logic, and
- storing means for receiving and storing the alarm signals asserted by the plurality of protection modules.
Dependencies are inferred from the claim text.