The present invention concerns a self-powered event detection device which comprises a sensor, activated by a physical or chemical action or phenomenon applied on it with at least a given strength or intensity, and a non-volatile memory for storing information relative to the detection of at least one physical or chemical action or phenomenon detected by said sensor. In particular, the present invention concerns a tamper event detection device for detecting a penetration in a protected zone or in a closed case or container.
By ‘self-powered event detection device’ it is understood that there is no need for an internal or external power source supplying the device for allowing its sensor to be activated and to detect a specific physical or chemical action or phenomenon. However, such a self-powered event detection device can be supplied with power for other functions in defined time periods, e.g. for reading the state of a memory or for resetting such a memory. In the following description of the invention, the physical or chemical action or phenomenon to which the sensor is sensitive is also named an external event. By ‘external event’ it is thus understood an action or a phenomenon that the sensor can detect, i.e. an action or a phenomenon applied on the sensing element of this sensor, and not an electrical signal from an external power source supplying the electronic circuit of such a sensor or a further electronic circuit associated to the sensor.
The invention further specifically deals with the reduction of the power consumption of such self-powered detection devices and furthermore with the increase in their security level. In particular, the invention concerns such self-powered detection devices comprising a read circuit or being arranged to be coupled to such a read circuit for reading the state of the NVM and, in a particular case wherein the self-powered detection device can be reset, further comprising a reset circuit or being arranged to be coupled to such a reset circuit.
The detection of an attempt to recover secrets from/within a protected zone, a closed case or a container through the use of an electronic circuit is often implemented by mechanical means external and adjacent to the electronic circuit which permanently records the attempt by changing a physical structure of or related to this electronic circuit in a way not easily noticed by the perpetrator. This physical change can then be established by the fact that the electronic circuit is no longer functional or by measuring an electrical parameter of the electronic circuit that has been modified directly or indirectly by the mechanical means.
Another method for the detection of an external event consists of the integration of electrical detection means internal to the electronic circuit, powering this electronic circuit and waiting for the event to occur while powered. For example, the detection means can be a sensor that is configured to provide a detection signal when the sensor and the electronic circuit are powered, the occurrence of this signal being stored in a memory via a write control circuit which is also powered by a power source. Thus, the supply of power for the event detection device needs to be a battery or another power source supplying continuous power. Without such a power source or if the power source is OFF or if the energy stored in the battery becomes too low, this device will not be functional, i.e., it will be incapable of detecting and recording an event. It is indeed possible to limit the current consumption of such a detection device by implementing a ‘sleep mode’. However the detection device will be functional only when supplied. Furthermore, in the case of an internal power source like a battery, such a device will have a limited lifetime or the internal power source will have to be changed after a certain time period. This causes a security problem first because there is a risk that the detection device becomes no longer functional when an interruption of the power supply occurs, and secondly because a perpetrator could cause an interruption of the power source, stopping the electrical supply of the detection device during the time period of the attempt.
The patent application EP 0 592 097 proposes a penetration detection system which overcomes the above mentioned problem concerning the power supply. This detection system comprises a sensing piezoelectric transducer and a memorizing piezoelectric transducer. The positive pole and the negative pole of the sensing piezoelectric transducer are respectively connected to the negative and positive poles of the memorizing piezoelectric transducer. The memorizing transducer comprises a layer of piezoelectric material having a thickness selected such that, upon mechanical probing of the sensing transducer, an electrical signal produced by this sensing transducer will be sufficient to effect a reversal in the poling of the memorizing transducer. This system defines a self-powered detection device. However, this detection device is expensive and not well adapted to be integrated in a small volume device because it comprises two distinct piezoelectric transducers. As shown in this patent application, these two transducers form two separate discrete units which are electrically connected and the memorizing transducer is linked to other classical electronic elements which are not manufactured with a same technology as this memorizing transducer. Thus, an integration of the memorizing piezoelectric transducer with further electronic elements, e.g. a reading circuit, will not be possible with a classical microelectronic process. Further, the reading means are complex and not adapted to integrated circuits.
The patent application US 2002/0190610 describes a self-powered remote control device comprising transmitting means, a feeder circuit connected to said transmitting means, a generator supplying electric power connected to the feeder circuit, and control means associated with the electric power generator. The generator comprises at least a piezoelectric element receiving mechanical stresses produced by actuating the control means and supplying electrical power to the feeder circuit. The feeder circuit comprises a rectifier bridge and a feeder capacitor in which the electrical energy provided by the piezoelectric element is accumulated and stored. In a particular embodiment, the remote control device further comprises a data management circuit associated with a memory and a counting circuit. To be functional, such a remote control device must receive a high amount of electrical energy to be stored in the feeder capacitor. The feeder circuit itself consumes some electrical energy as well as all others circuits of this device. Thus, the piezoelectric element needs to be able to generate a relatively high amount of electrical energy and the control means have to be actuated with a relatively high force for generating such a high amount of electrical energy. This limits the potential applications of this remote control device. Further such a control device is complex and expensive.
A first aim of the invention is to provide a self-powered detection device comprising at least a non-volatile memory cell and a sensor which is activated by a physical or chemical action or phenomenon, in particular a tamper event, and which needs only a small amount of electrical energy for setting the non-volatile memory in a secure way, this small amount of electrical energy being provided by the sensor when it detects said physical or chemical action or phenomenon applied to it with at least a given strength or intensity. A further aim of the invention is to provide such a self-powered detection device at low cost and in a small volume.
Thus, the invention concerns a self-powered detection device comprising at least a non-volatile memory cell and a sensor which is activated by a physical or chemical action or phenomenon, this sensor forming an energy harvester that transforms energy from said physical or chemical action or phenomenon into an electrical stimulus pulse, the memory cell being arranged for storing, by using the electrical power of said electrical stimulus pulse, at least a bit of information relative to the detection by the sensor of at least a first physical or chemical action or phenomenon applied to it with at least a given strength or intensity. This detection device is characterized in that the non-volatile memory cell is formed by a FET transistor having a control gate, a first diffusion defining a first input and a second diffusion defining a second input, and in that this FET transistor is set to its written logical state from its initial logical state when, in a detection mode of this self-powered detection device, it receives on a set terminal, among said control gate and said first and second inputs, a voltage stimulus signal resulting from the first physical or chemical action or phenomenon.
In a first embodiment of the invention, the set terminal of the FET transistor is its control gate and the first input of this FET transistor is connected to the ground of the sensor in said detection mode.
In a further embodiment of the invention, the set terminal of the FET transistor is its first input and the control gate of this FET transistor is connected to the ground of the sensor in said detection mode.
In a first main variant of the invention, the FET transistor is of the ‘floating gate’ type with a tunnel oxide over the drain diffusion and said first input of this FET transistor is its drain. In a second main variant of the invention, the FET transistor is of the ‘floating gate’ type with a tunnel oxide over the channel zone or of the SONOS type. In this case said first input of the FET transistor is its drain or its source.
In a preferred embodiment of the invention, the self-powered detection device comprises reading means of the non-volatile memory cell or is arranged to be coupled to such reading means which are active when powered by a power source, these reading means being, in a read mode, electrically connected to said first input or said second input of the FET transistor and arranged for detecting the state of this non-volatile memory cell by sensing the level of an electrical current flowing through this first or second input. In a preferred variant, the reading means are formed by a latch providing at its output a logical signal relative to the state of the FET transistor.
In a particular variant of the above-mentioned first main variant, the detection device further comprises reset means or is arranged to be coupled to such reset means for resetting the non-volatile memory cell, these reset means being, in a reset mode, arranged to reset the FET transistor by applying a voltage signal of inversed polarity, relatively to the voltage stimulus signal, between the control gate and the first input of this FET transistor.
In a particular variant of the above-mentioned second main variant, the detection device further comprises reset means or is arranged to be coupled to such reset means for resetting the non-volatile memory cell, these reset means being, in a reset mode, arranged to reset the FET transistor by applying a voltage signal of inversed polarity, relatively to the voltage stimulus signal, between the control gate and the first input or the second input of this FET transistor.
In a preferred variant of the above-mentioned preferred embodiment, an isolation circuit is provided between the FET transistor and the reading means, this isolation circuit being arranged for isolating this FET transistor from these reading means in said detection mode but for connecting them in said read mode.
In a preferred variant of the above-mentioned first embodiment, the detection device further comprises a switch arranged between the ground of the sensor and the first input of the FET transistor. This switch has its control gate connected to the set terminal of this FET transistor so that it is turned on when a voltage stimulus signal is provided to this set terminal of the FET transistor thereby connecting its first input to ground.
In a preferred variant of the above-mentioned second embodiment, the detection device further comprises a switch arranged between the ground of the sensor and the control gate of the FET transistor. This switch has its control gate connected to the control gate of this FET transistor so that it is turned on when a voltage stimulus signal is provided to this control gate of the FET transistor thereby connecting its control gate to ground.
In a particular variant, the switch is formed by a second FET transistor which control gate is connected to the set terminal of the above-mentioned FET transistor (first FET transistor).
In the case where the memory cell can not be reset, the non-volatile storage cell can be for example One-Time-Programmable (OTP). In the case where the memory cell can be reset, the non-volatile storage cell can be for example Flash, EPROM or EEPROM, this list being non-exhaustive.
It is to be noted that, in a specific embodiment of the invention, the sensor (or a part of this sensor, e.g. its circuitry) and an electronic circuit incorporating the non-volatile memory can be integrated or incorporated in a unique electronic unit.
According to the invention, an energy harvester transforms the detected external event into electrical energy which is used to supply the electronic means arranged for storing the fact (setting a flag) that such an external event occurs. Here is a non-exhaustive list of the possible external events and related harvesters:
Other features and advantages of the present invention will appear more clearly from the following detailed description of illustrative embodiments of the detection device according to the invention, given by way of non-limiting examples, in conjunction with the drawings in which:
The aim of this detection device is to detect if a tamper event has occurred in a zone or in a case or container protected by this lock. If the lock is forced, i.e. tampered with, the spring 4 will push up the piece 6 and the spring 8 will apply a force on the piezoelectric element with at least a given strength or intensity. This external event is stored in a memory part of the detection device. Before opening the lock, an authorized user will have to first read the memory to know if a tamper event has occurred.
The electrical energy that the energy harvester (piezoelectric element and associated circuitry in the case of
Typically, for an EEPROM technology:
Es=IswTswVsw
Typically, for an EEPROM technology:
E
s=(100 nA)(5 ms)(16V)=8 nJ
So the total electrical energy needed to store a bit of information or an item of data in one FET transistor is typically of the order of 10 nJ.
For example, the piezoelectric element “PIC 151” (ceramic PZT), sold by the German company Physik Instrumente (PI), can be used to produce the needed energy and voltage to set a flag in the NVM cell. With an Input capacitance of 20 pF, 10 nJ can be generated by such a piezoelectric element having a capacity CPZT of approximately 19 pF, with a voltage value of approximately 16 V across this Input capacitance, by applying a force of about 1.25 N on the piezoelectric element. It is possible to generate more than 10 nJ, for instance 20 nJ with such a piezoelectric element by increasing the applied force. If needed, a force amplifier can be arranged between the piezoelectric element and the spring (i.e. the element generating an external force used by the energy harvester when an external event occurs). In case the piezoelectric element would generate a voltage significantly greater than the needed switching voltage for the memory cell, a protection element or circuit can be added between the piezoelectric element and the electronic unit or in an input part of such an electronic unit.
The electronic unit further comprises a readout circuit 20 allowing, when powered, the reading of the logical state of the NVM cell 18. The read circuit is only used during the reading phase (so only when the circuit is supplied). The read circuit is designed so that it will not interfere with the setting of the memory cell (whether the power supply is present or not). When the device is supplied, the read circuit will enable a read of the non-volatile memory cell and the output of the read circuit will return, e.g., a logical ‘0’ if no tamper event occurred and a logical ‘1’ if a tamper event has occurred. Since this circuit is here not resettable, it can detect only one tamper event.
The electronic unit 22 further comprises a set circuit 26 defining a switch arranged between the ground of the electronic unit and the drain DRN of the first FET transistor. This switch is preferably formed by a second FET transistor T2 having a control gate connected to the electrical stimulus input and is turned on when an electrical stimulus pulse is provided to the electronic unit, connecting the drain of the first FET transistor to ground (0 V) and thus allowing the secure setting of the non-volatile memory cell 24 to the logical ‘1’ state.
The electronic unit 22 comprises reading means of said non-volatile memory cell which is active only when supplied by a power source. This reading means is formed by a latch 28 having its input connected to the drain DRN of said first FET transistor and automatically providing at its output, when a power supply is applied by an external device/reader, a signal indicating the state of the NVM cell.
The operation of this implementation can be summarized as follows:
A) Following fabrication, the memory transistor T1 is in the non-tampered state (e.g. conductive state);
B) Power is applied and thus the transistor T3 is turned ON, the non-tampered state being so written into the Latch 28, which drives its output to the logic low voltage level (this step is provided in a preferred implementation to secure the initial state of the Latch);
C) The circuit is deployed without power supply (no electrical power source);
D) A tamper event occurs supplying an electrical stimulus pulse to the electrical Stimulus Input of the electronic unit. The transistor T2 turns ON thus grounding the drain DRN of the transistor T1 and the transistor T3 is turned OFF because there is no power for control circuit 30 to drive the gate of T3. The transistor T1 is thus set to its tampered state (non-conductive state) by the power of the stimulus pulse itself;
E) Power is again supplied to the circuit. The transistor T3 is turned on, and the set state is written into the Latch, which drives its output to the logical ‘1’, or high voltage, level (external event detected).
The electrical energy of the external event is collected at the electrical stimulus input of the electronic unit and, as in the previous embodiments, a corresponding data is written in the NVM cell 34. This NVM cell has a reset input receiving a reset signal from a reset circuit 32. This reset circuit needs to be power supplied for resetting the memory cell.
When power is supplied is present, the reset circuit allows resetting the non-volatile memory cell after an external event has been detected and this cell set. This allows reuse of the external event detector after one detected external event. Let us consider the case of a security device in which the detection device according to this embodiment has been tampered with. When the detection device is supplied following a tamper event, the read circuit will enable a read of the non-volatile memory cell and the read output will be a logical ‘1’. Once this tamper event has been acknowledged, the user can reset the non-volatile memory cell through the reset circuit 32.
The reset circuit and the read circuit are only used when the detection device is supplied by a power source. These elements are preferably designed so that they will not interfere with the setting of the memory cell during a tamper event (whether the supply is present or not).
After the reset step has been terminated, the level shifter output is turned OFF (high impedance so that it is not driven), the latch output is driven high and the read output is driven high again. Thus, the latch will then also be reset by the voltage level of the drain of memory cell T1. Then, the power supply can be removed and the detection device is again reusable as a self-powered detection device.
In the variant represented in
The operation of the detection device of
A) Power is supplied to the detection device. The NVM Cell is reset to its reset state (e.g. conductive state), and this reset state is indicated at Out 1 (e.g. as a logic low voltage level);
B) The number of set Bits in the OTP memory is read at Out 2 (if not already done before). This number has to be stored in an external device for comparison with a further result obtained the next time the detection device is checked;
C) The circuit is deployed without power supplied;
D) A tamper event occurs generating an electrical stimulus pulse provided at the electrical stimulus input;
E) The NVM Cell is set to its tampered state;
F) Power is supplied to the circuit;
G) The set state is read at output Out1 (e.g., as a logical ‘1’ or high voltage level);
H) The set control circuit drives the Set input of the N-Bit OTP Memory for programming the first or next Bit of its N Bits to the set state;
I) This set state is then read by the counter and encoder circuit, which outputs an encoded group of bits representing how many bits within the N-Bit memory are set.
Steps A) through I) can be repeated up to an additional N−1 times.
In a variant, the OTP memory is set at the same time that the NVM memory is set by a detected external event. This variant however requires more energy in the electrical stimulus pulse. Thus, to automatically write the OTP memory only when the electronic unit is supplied is advantageous for the powerless detection device of the present invention.
In the following part of the description, further embodiments of the invention as well as different variants of the embodiments already described and of these further embodiments will be described.
The voltage stimulus signal resulting from the electrical stimulus pulse is transferred to the electronic circuit of
Clamp circuit 54 allows only a stimulus pulse with a predefined polarity to pass from its input CIN to its output COUT such that once a physical or chemical action or phenomenon, in particular a tamper event, is detected by the sensor, the record of this detection cannot be undone via the input CIN receiving the voltage stimulus signal. This protection is very interesting for tamper event detection because the input CIN, without such a clamp circuit, could be used by a tamperer for erasing the NVM cell, which has stored such a tamper event, by sending with an external device an electrical pulse with an inverse polarity relative to the polarity of the stimulus pulses generated by the sensor.
The self-powered detection device of
During a detection mode (without power supply), the voltage stimulus signal is routed to input SET of the Non-Volatile Memory (NVM) unit 52. Simultaneously, switch 60/transistor T2 is turned on driving input SET * to the same potential as GND (0V). A NVM cell within the NVM unit 52 is then written to the “set” data state (flag). In the read mode of the self-powered detection device wherein at least the read circuit 56 is powered by a temporary power source, for reading out the cell state, the input REN ‘Read Enable’ is driven high turning on a path for current to flow through output RD (Read output of the NVM unit). A high current represents one cell state of two possible cell states while a low current represents the other of the two cell states. The read circuit, in particular a Latch as shown in
Clamp A is also a positive clamp. If the amplitude of the stimulus pulse is too high, then damage to transistors and other on-chip devices may occur. The diode of Clamp A is designed to break down shunting charge to VSS at a given positive voltage (VBREAKDOWN) high enough to allow a set of the NVM cell but low enough to prevent damage. It is desirable that the diode be designed and laid out to pass the charge without itself being damaged. There are many well-known design and layout techniques that can be applied from the area of electrostatic discharge (ESD) protection design. The Clamp A circuit 62 could in a different variant be formed by transistors controlled by the voltage stimulus signal in the detection mode, so as to perform the functions of Clamp A.
Clamp B is a ground clamp. Its purpose is to drive COUT to the VSS level whenever CIN is approximately 0V. CIN can be at 0V potential if the sensor outputs 0V or if CIN is not driven or connected but discharges to 0V through a reverse-biased diode like D1 in Clamp A. It is desirable that a voltage stimulus signal can be applied at any time through it to the SET input. This would allow for tamper detection during read and reset operations.
During reset, the SET input must be preferably at a stable, unalterable 0V level in order to ensure that a large enough voltage (VReset-min) can be developed to reset the NVM cell. If SET is not well-driven to 0V, then it may couple high due to parasitic coupling capacitance to high-going signals within the powered device, reducing the reset voltage below VReset-min. The same is true for a read operation in that SET must preferably be stable, unalterable, and 0V in order to provide a source of electrons for a read current or a known, stable voltage for a FET gate controlling read current. If the impedance looking towards the sensor from input pin CIN is very high, for example in the case of a sensor that collects and delivers electrostatic charge or when resetting during wafer test, then a circuit like that in Clamp B is required for successful reset and read operations under device power supply.
In the case where V(VDD) is approximately 0V, OUT is not driven by T10 or T11 if IN is low. No set operation occurs when IN is low. If an external event is detected and a stimulus pulse is applied to IN, then IN goes high turning on T12 causing node A to be driven low allowing T10 to turn on while T11 is off. Therefore, the stimulus pulse is passed to the SET terminal to set the NVM cell without a power supply for the device.
A negative stimulus pulse applied to IN is clamped to a diode voltage drop by a diode existing between the N-well connection of T10 and the grounded p-type substrate preventing a reset of the NVM cell. Likewise, a reset of the NVM cell is not possible through Clamp B by driving VDD negative because there exists a diode from N-well to grounded p-substrate that prevents VDD from going negative with respect to VSS by more than a diode drop. The same diode exists for PMOS devices elsewhere whose N-well is tied to VDD.
An alternative to the Clamp B circuit of
In summary, the functions of Clamp A are:
The functions of Clamp B are:
A configuration with only Clamp A (without Clamp B) with preferably a large capacitor from SET to VSS can be functional enough for a NVFET cell with SET connected to the FET gate and for FeRAM NVM cells. A configuration with only Clamp B (without Clamp A) could be sufficient for preventing a tamperer to reset in particular a PCRAM NVM cell, if the breakdown of N-well to P+ drain of T10 is properly designed.
Hereafter, three cases of the present invention will be described where the storage means consists of a field effect transistor (FET) containing charge storage material, collectively named Non-Volatile FET (NVFET).
During a reset operation (reset mode), SET * is driven high causing input 1 of NVFET 72 to be driven high. At the same time, SET is driven low by subcircuit 64 ‘Clamp B’ (
It is to be noted that the read output RD could, in a variant of this first embodiment, be connected to input 2 of the NVFET 72 while SET * is connected to input 1. In particular, inputs 1 and 2 in
During a reset operation, SET is driven low by Clamp B (
During a read operation, SET * must hold input G of NVFET 74 low via the Reset line (
During a read operation, an alternative path for current flow must be prevented. SET * low turns off T8; REN high turns off T6; and IN low turns off T7. Therefore, OUT is isolated from IN. During a set operation, the full voltage—preferably without threshold drop—must be passed from SET to input 1 of NVFET 74. SET * low, which drives input EN *, turns off T8, and IN, which is driven by SET, is high what turns on T6 via T7. REN must be low or high-impedance (not driving) in order to not conflict with T7 driving the gate of T6 low. Therefore, a high level on SET forces IN to be connected to OUT. During a reset operation, 0V must be passed from SET to input 1 of NVFET 74. SET * high turns on T8, EN low turns on T6, and IN, which is driven by SET, is low which turns off T7. Therefore, Clamp B (
During a reset operation, SET is driven low by the Clamp circuit (
During a read operation, input SET * holds input G of NVFET 80 low. When no electrical stimulus pulse is present, Clamp B (
There are at least two compatible NVFET types which can be implemented in the first, second and third embodiments of respectively
1) Floating gate; and
2) nitride-based charge storage or SONOS (polySilicon-silicon Oxide-silicon Nitride-silicon Oxide-Silicon substrate).
In the floating gate type, a polysilicon gate is sandwiched between two oxide layers which are between a polysilicon gate and a single crystal silicon substrate. The floating gate stores electrons after a high field caused by high voltage induces tunneling. The tunneling can occur
a) through a tunnel oxide fabricated over one of its two diffusions, or
b) through a tunnel oxide present above the region where a channel is formed (channel zone) when the device is turned on.
In the SONOS type, electrons are stored in a nitride layer positioned similarly to a floating gate. Electrons tunnel through oxide above a channel zone.
Therefore, there are two configurations for NVFETs which can be used in the first, second and third embodiments of the NVM unit described here-above:
1) Floating gate with tunnel oxide over the drain diffusion D (input 1) as shown in
2) Floating gate with tunnel oxide over the channel zone or SONOS as shown in
For the first configuration (
In the first configuration, the same input 1 is used for setting and resetting. However, in the second configuration, input 1 or 2 can be grounded in the detection mode for setting the NVFET and the resetting operation can occur through input 1 or 2, irrespective of which input is used for the setting operation.
Number | Date | Country | Kind |
---|---|---|---|
09175792.2 | Nov 2009 | EP | regional |
Number | Date | Country | |
---|---|---|---|
Parent | 12620365 | Nov 2009 | US |
Child | 12945138 | US |