Patent Application
20090102643
The present invention relates to sensor/actuator chip modules, in particular to sensor/actuator chip modules resistant or at least protected against error-provoking attacks, as may, for example, be used for automated control.
An increasing number of sensors and actuators are employed to automate controllers in, for example, airplanes, cars or buildings. Exemplarily, speeds in cars can be controlled by distance measuring or airplane steering can be automated. In particular in applications of this kind, authenticity, integrity and privacy of data from sensors and/or to actuators are required to ensure the security of the entire automation.
According to embodiments, the present invention provides a chip module including a sensor, an input/output interface, a data processing circuit connected between the input/output interface and the sensor so that sensor data which are dependent on a sensor output signal of the sensor may be communicated to outside the chip module via the input/output interface, and a manipulation detector assembly configured to output an alarm signal responsive to attacks affecting the sensor data.
Further embodiments of the present invention provide a chip module comprising an actuator, an input/output interface, a data processing circuit connected between the input/output interface and the actuator so that actuator data which actuator actions of the actuator are dependent on may be received from the outside via the input/output interface, and a manipulation detector assembly configured to output an alarm signal responsive to attacks affecting the actuator actions.
Preferred embodiments of the present invention will be detailed subsequently referring to the appended drawings, in which:
a-d are schematic illustrations of chip modules comprising manipulation detector assemblies according to various embodiments of the present invention;
a-c are basic illustrations of manipulation detector assemblies using redundancy according to various embodiments of the present invention;
a, b are schematic illustrations of multi-chip modules according to embodiments of the present invention; and
With reference to the following description, it should be kept in mind that same functional elements or functional elements having the same effect in various embodiments comprise same reference numerals and thus descriptions of these functional elements in the various embodiments described below are mutually interchangeable.
The chip module 10 comprises a memory 12 connected to a data processing block or data processing circuit 14. In addition, the chip module 10 includes a sensor or actuator element 16 and an input/output interface 18. The data processing circuit 14 can receive, process and pass on to the input/output interface 18 data from the element 16 or transmit data which it has received and processed from the input/output interface 18 to the element 16, depending on whether the element 16 is a sensor element or an actuator element. The input/output interface 18 is provided to transmit data from the data processing circuit 14 to the outside, i.e. outside the chip module 10, and/or receive data from the outside and pass the data on to the data processing circuit 14.
Sensor/actuator systems can be used to automate controllers. Controllers are also increasingly used for critical applications, like for example controls of cars, airplanes or robots. In addition, controllers are to an increasing extent no longer used in an autonomous, but networked manner (like, for example, automatic airplane steering by means of earth-based remote control). Guaranteeing integrity, authenticity and privacy of the data and control processes of the sensor/actuator systems is of high importance here in order to recognize manipulations and be able to react appropriately.
If a manipulation of the data on a sensor/actuator chip module, as is exemplarily shown in
a hacker enters a data line of an airplane and hijacks it;
a distance measuring device is manipulated and a car collides with a car driving in front;
a robot performs inappropriate actions caused by false sensor information.
When data are transferred in an encrypted manner between individual network elements of a controller network, such as, for example, sensor and/or actuator chip modules on the one hand and a central processor on the other hand, this is no sufficient protection against manipulation of the data to be transferred. When data from sensors and/or to actuators are manipulated directly on the respective chip modules, as is, for example, possible by fault-provoking or fault attacks, the manipulated data may be transferred from and/or to the chip modules in an encrypted manner.
In order to guarantee the transfer of non-manipulated data or reduce the effect of the transfer of data already manipulated, in the following embodiments the sensor and/or actuator chip modules comprise protective measures against manipulation of the data coming from the sensor elements and/or provided for the actuator elements, directly on the chip modules.
Usually, an attacker will try to attack data in the chip module, such as, for example, digitalized data. A local change in the ambient conditions to be detected by a sensor, like for example temperature, is conceivable, however, this will usually be more difficult for an attacker to perform. This context is schematically shown in
Exemplarily, errors are induced in a chip module by influences from outside so that chip module-internal results will be corrupted. In sensor and/or actuator chip modules, there is the particular danger of inducing errors from outside which corrupt and/or manipulate the sensor data and/or actuator data and thus cause undesired or even dangerous effects in an automated controller. Exemplarily, the digitalized and maybe calibrated sensor signal will be altered by manipulation such that it will indicate a false measuring value. Inversely, an actuator signal subjected to a digital-to-analog conversion may be altered relative to a desired value as is indicated by a digital actuator input signal.
The chip module 30 comprises a sensor element and/or an actuator element, depending on whether it is a sensor or an actuator chip module. The chip module 30 includes an input/output interface 18 to communicate with the outside. Furthermore, the chip module 30 includes a data processing circuit 14 connected between the input/output interface 18 and the sensor and/or actuator 16. In the case of a sensor, the data processing circuit 14 is connected between the input/output interface and the sensor 16 such that, for example, digital sensor data which depend on an exemplarily analog sensor output signal of the sensor 16 may be communicated to the outside via the input/output interface 18. In the case of an actuator in the chip module 30, the data processing circuit 14 can be connected between the input/output interface and the actuator 16 such that, for example, digital actuator data which an actuator input signal of the actuator 16 depends on can be generated by the data processing circuit 14 from digital data exemplarily received from the outside via the input/output interface 18. In addition, the chip module 30 includes a manipulation detector assembly 32 which is configured to output an alarm signal 34 responsive to attacks affecting the (digital) sensor and/or actuator data.
The alarm signal 34 may exemplarily be a notification signal which is communicated to the outside via the input/output interface 18 so that, for example, a controller chip connected to the chip module 30 is notified about a potential attack. According to further embodiments of the present invention, the alarm signal 34 may also trigger a protective mechanism on the sensor/actuator chip module 30 by, for example, deleting security-relevant data from the memory 12 or interrupting a supply voltage supply for the sensor/actuator chip module 30.
The manipulation detector assembly 32 may be implemented to guarantee data integrity at a plurality of locations in the chip module 30 which may be spaced apart from one another, which is to be indicated by the broken lines in
A schematic block circuit diagram of a chip module 40 according to an embodiment of the present invention is shown in
The chip module 40 shown in
The sensor/actuator 16 may, for example, be implemented as a micro-electromechanical or electromechanical sensor/actuator. Such a micro electromechanical system (MIMS) may comprise a combination of a mechanical element which serves as a sensor/actuator, and an electronical circuit including electrical interaction with mechanical deformation and/or motion of the mechanical element. The mechanical element and the electronical circuit may both be integrated on a substrate and/or chip.
The sensor 16, however, may also be a measuring quantity sensor or sensing element detecting certain physical or chemical characteristics, such as, for example, heat radiation, temperature, humidity, pressure, sound, brightness or acceleration and/or material qualities of its surroundings, in a qualitative or, as measuring quantity, quantitative manner. These quantities are detected by means of physical or chemical effects and converted into processable quantities, in particular electrical signals.
The actuator 16 may be an actuating mechanism translating an electrical signal to mechanical work, i.e. motion. Such actuators are, for example, light-emitting, piezoelectric, micro-fluidic devices, bimetal actuators, hydraulics or pneumatic actuators, electrochemical actuators, piezo-actuators, magnetostrictive actuators, rheological actuators, shape-memory alloys or chemical actuators.
The data processing circuit 14 may be implemented to convert analog sensor output signals having more than two quantizing levels to form digital sensor data. Also, in the case of an actuator chip module, the data processing circuit 14 processes digital actuator signals from the input/output interface 18 for the actuator comprising more than two quantizing levels to form, for example, an analog drive signal for the actuator 16.
The manipulation detector assembly 32 can be adjusted to be insensitive towards attacks to analog signals, like for example an analog sensor output signal (such as, for example, current or voltage). This means that the manipulation detector assembly 32 monitors digital signals from the sensor and/or to the actuator 16.
Thus, attacks on sensor and/or actuator chip modules can be recognized and evaluated by embodiments of the present invention and data from/to the chip module can be rendered private by encryption and, above all, authenticatable.
Subsequently, different possible implementations of the manipulation detector assembly 32 will be described.
The manipulation detector assembly 32 may be implemented in various manners which depend on the attacks to be warded off. There are a number of ways of attacking to provoke errors.
Alterations in a supply voltage of the chip module, like, for example, by so-called spike attacks, can cause the data processing circuit 14 which is exemplarily implemented as a processor to misinterpret or even skip program instructions or commands.
Altering an external clock frequency fclk fed to the chip module may result in incorrect reading and/or writing of data (the data processing circuit 14 tries to read a value from a data bus before the memory 12 has had the opportunity to output the value requested). In addition, altering the external clock frequency fclk may result in skipping instructions or commands of the data processing circuit 14, so that the data processing circuit 14 will execute a command n+1 before the data processing circuit has finished executing the command n.
Another error cause may be a chip module temperature outside a temperature range specified by the manufacturer in which the chip module operates as intended.
Furthermore, due to photoelectrical effects, all the electrical circuits are light-sensitive. A current induced by photons in an electrical circuit can be used to provoke errors, should the electrical circuit be exposed to intense light for a short duration. A similar effect may, for example, be caused by irradiating a part of an electrical circuit by laser light. X-ray and ion radiation are examples of further error sources.
In order to recognize and ward off different attacks described before, counter measures can be taken by the manipulation detector assembly 32. Thus, the manipulation detector assembly 32 according to embodiments may be dedicated hardware for recognizing attacks. According to further embodiments of the present invention, the manipulation detector assembly 32 may also be programmable logic for implementing counter measures against attacks by software, i.e. computer programs.
Possibly embodiments of the manipulation detector assembly 32 will be explained in greater detail below.
a shows a chip module 50-1 according to an embodiment of the present invention comprising a manipulation detector assembly 32-1 implemented as a light detector. The light detector 32-1 exemplarily detects a gradient of light incident on the chip module 50-1 in order to output the alarm signal 32 already described in the case of irregular irradiation of the sensor/actuator chip module 50-1.
b shows another embodiment of a chip module 50-2 in which the manipulation detector assembly 32-2 is implemented as a supply voltage detector. In this embodiment, the supply voltage detector 32-2 is coupled to a supply voltage generator 52 for the chip module 50-2 in order to recognize sudden variations in the supply voltage. If the supply voltage falls outside a certain tolerance range or changes too abruptly, the supply voltage detector 32-2 will generate the alarm signal 34.
Another embodiment is schematically shown in
In the embodiment shown in
Another way of detecting error-provoking attacks is employing hardware and/or software redundancy, as is schematically shown in
a shows a manipulation detector assembly 32 comprising an input for data 60, two identical data processing circuits 14-1 and 14-2 and a comparator 62.
The data 60 may be (digital) sensor data from a sensor and/or (digital) actuator data for an actuator. The data 60 are passed on to both identical data processing circuits 14-1, 14-2 to obtain, at their outputs, respective results 64-1 and 64-2 which in turn are passed on to the comparator 62. If the two results 64-1, 64-2 do not match, the comparator 62 will output the alarm signal 34 which may serve as trigger for further measures already described before.
Of course, more than two identical data processing circuits 14-n (n=1, 2, 3, . . . ) may be used to generate redundancy. Data inverse to the data 60 may also be fed to a second data processing block 14-2 according to embodiments, wherein the result 64-2 is inverted correspondingly after that.
Another way of detecting manipulations and/or attacks using a manipulation detector assembly 32 according to an embodiment of the present invention is shown in
In the manipulation detector assembly 32 shown in
Other ways of detecting error-provoking attacks may be described using
In a first alternative, the least significant bits and most significant bits of a data word are exchanged in block 70, before the data 60 and the exchanged data are fed to the data processing circuit 14. The result 64-2 of the calculations using the exchanged bits is exchanged again correspondingly in block 72 and compared to the result 64-1 in the comparator 62 to detect a potential attack.
Blocks 70 and 72 can also realize opposite shift operations according to another embodiment. Thus, the bits of the data and/or data words 60 are shifted in one direction in block 70 and the corresponding result 64-2 of the data processing block 14 is shifted back in the opposite direction in block 72. Subsequently, the results 64-1 and 64-2 are compared again and a potential attack can be detected.
Of course, the attack detection measures described before may also be combined in a corresponding manipulation detector assembly in order to be able to maybe detect potential attacks even more reliably than by individual measures. It is to be pointed out here that the above list of attack detection measures is only exemplarily and not to be construed as final.
In addition or as an alternative to the measures for detecting manipulation described before which may be implemented in hardware, the manipulation detector assembly 32 may also be programmable logic which is programmed by software in order to detect and avoid error-provoking attacks. So-called check sums may exemplarily be implemented here in software. A further measure is randomly distributing command sequences in an algorithm. If the command sequence in an algorithm is selected to be arbitrary, it will be more difficult to predict what the programmable logic will do at a certain time. Of course, redundancy measures may also be performed in software, like, for example, repeating calculating operations or variables which are used by the calculating operations several times. Any dummy cycles may be used during code execution. Signal bus and memory encryption are further examples of measures.
A passive shield, like in the form of a metal layer, may be used to protect sensitive chip module parts. Thus, attacks using light or electromagnetic radiation can be made more difficult since the shield has to be removed before an attack.
In addition, unstable internal frequency generators can be used in a chip module as a protection against attacks which have to be synchronized with a certain result.
According to embodiments, sensor and/or actuator chip modules may be implemented both as single-chip modules (SCMs) and so-called multi-chip modules (MCMs). A top view of a multi-chip module 80 according to an embodiment is shown in
In the multi-chip module 80 illustrated in
b shows a side view of a multi-chip module 90 according to another embodiment of the present invention in which the individual chips 16, 12, 14, 32 are not arranged horizontally next to one another, but vertically one above the other. Here, too, the chips are exemplarily connected to one another by bond wires 86 and/or to the external terminals 82. When the individual chip components are, as is shown in
Each of the network elements 92, 94, 96 illustrated in
If, as is shown in
In summary, the present invention thus provides methods for protecting a chip module comprising a sensor and/or actuator and a data processing circuit connected between an input/output interface and a sensor and/or actuator such that sensor and/or actuator data may be communicated to/from the outside via the input/output interface, comprising a step of detecting an attack affecting the sensor and/or actuator data and a step of outputting an alarm signal responsive to an attack detected.
In particular, it is pointed out that, depending on the circumstances, the inventive scheme may also be implemented in software. The implementation may be on a digital storage medium, in particular on a disc or a CD having control signals which may be read out electronically, which can cooperate with a programmable computer system and/or micro controller such that the corresponding method for protecting a chip module will be executed. In general, the invention thus also is in a computer program product having program code stored on a machine-readable carrier for performing the inventive method when the computer program product runs on a computer and/or micro-controller. In other words, the invention may also be realized as a computer program having a program code for performing the method when the computer program runs on a computer and/or micro-controller.
