This Nonprovisional application claims priority under 35 U.S.C. §119(a) on Patent Applications No. 2005-318801 filed in Japan on 1 Nov, 2005, the entire contents of which are hereby incorporated by reference.
1. Field of the Invention
The present invention relates to a semiconductor apparatus and more particularly to a semiconductor apparatus equipped with a protective measure against the consumption power analysis for offering a security function of protecting its internal data from being assaulted and revealed through the power consumption analysis.
2. Description of the Related Art
One of such methods of assaulting and revealing the internal data stored in semiconductor apparatuses such as IC cards is known for focusing and analyzing a change in the power consumption which is determined by the action of processing in the internal circuit to determine the mutual relationship between the internal processing action and the power consumption. The known assaulting method is classified into Simple Power Analysis (SPA) and Differential Power Analysis (DPA). The assaulting method is conducted against an IC card commonly with no use of external operations and may hardly be notified when being carried out. The method is particularly hostile to a type of the IC card employed for identification of a personal.
Some measures to the assault are proposed for stopping the internal processing at random timings and providing irregular start and interval of the processing action. However, as the power consumption is declined upon stopping the internal action at random timings, its measurement may explicitly represent the timing of canceling the action.
A counter measure is disclosed in Japanese Patent Laid-open Publication No. 2000-259784 (referred to as a citation hereinafter) where a false current generator circuit is used for generating a dummy consumption current at random regardless of the action in the internal circuit to deceive the power consumption analysis. The counter measure or prior art disclosed in the citation is shown in
However, the generation of false current consumption independent of stopping and restarting the internal processing action results in increasing the power consumption at the peak in the practice. This is disadvantageous in the system device such as an IC card where the maximum of the power consumption is predetermined. Also, the false current consumption may be eliminated by averaging a series of the power consumption waveforms. As the result, the prior art is not a perfect protective measure to the power consumption analysis.
The present invention has been developed in view of the foregoing aspects and its object is to provide a highly secure semiconductor apparatus which can hardly increase the power consumption at the peak but discourage the power consumption analysis.
For achievement of the object of the present invention, a semiconductor apparatus with a protective measure against the power consumption analysis is provided as a first feature, which is characterized by a logic circuit for conducting a logic operation and a power consumption modifying circuit for increasing or decreasing its power consumption in order to offset the increase or decrease in the power consumption of the logic circuit.
According to the semiconductor apparatus with a protective measure against the power consumption analysis of the first feature, the sum of the power consumption outputs of the logic circuit and the power consumption modifying circuit can be monitored as the power consumption of the logic circuit from the outside. More particularly, the power consumption modifying circuit is favorably controlled in the power consumption so that when the power consumption of the logic circuit is increased, the power consumption of the power consumption modifying circuit is declined or on the other hand, when the power consumption of the logic circuit is decreased, the power consumption of the power consumption modifying circuit is elevated. Accordingly, the peak value of the sum of the power consumption outputs of the logic circuit and the power consumption modifying circuit can favorably be determined not to exceed the peak value of the power consumption of the logic circuit substantially. Also, the sum of the power consumption outputs of the logic circuit and the power consumption modifying circuit can be controlled to stay in a permissive range of variations in comparison with a change in the power consumption of the logic circuit alone. This permits a change in the sum of the power consumption outputs to be determined regardless of the action of the logic circuit, whereby the semiconductor apparatus can be as high in the security as deceiving the power consumption analysis without increasing the power consumption at the peak.
For example, in the case of that the protective measure against the power consumption analysis is not needed, the logic circuit is declined in the power consumption when action of the logic circuit stops. However, the inventive apparatus allows the power consumption of the power consumption modifying circuit to be increased during the stopping of the action of the logic circuit, and thus the sum of the power consumption outputs to remain substantially uniform regardless of the action of the logic circuit, whereby the starting and stopping of the action of the logic circuit is hardly recognized.
The semiconductor apparatus with a protective measure against the power consumption analysis of the first feature may be modified as a second feature in which an action state control circuit is provided for randomly controlling the starting and stopping of the action of the logic circuit, wherein the action state control circuit controls the starting and stopping of the action of the power consumption modifying circuit.
According to the semiconductor apparatus with a protective measure against the power consumption analysis of the second feature, the sum of the power consumption of the logic circuit and the power consumption modifying circuit can be positively controlled at random so that the sum of the power consumption is mainly the power consumption of the logic circuit when the action of the logic circuit is continued or it is mainly the power consumption of the power consumption modifying circuit when the action of the logic circuit is stopped. As the result, variant of the sum of the power consumption increases in irregularity and thus the power consumption analysis becomes more difficult.
The semiconductor apparatus with a protective measure against the power consumption analysis of the second feature may further be characterized in that the action state control circuit stops the action of the logic circuit at random and when the power consumption of the logic circuit has been declined, the action state control circuit starts the action of the power consumption modifying circuit to increase the power consumption of the power consumption modifying circuit so as to compensate for a declination in the power consumption of the logic circuit.
Since the power consumption of the power consumption modifying circuit is increased when the action of the logic circuit is stopped, the sum of the power consumption outputs of the logic circuit and the power consumption modifying circuit can remain substantially uniform regardless of the action of the logic circuit, whereby the starting and stopping of the action of the logic circuit will hardly be recognized.
The semiconductor apparatus with a protective measure against the power consumption analysis of the second feature may further be characterized in that the action state control circuit comprises a pseudo-random number generator circuit including shift registers with a feedback function.
Using a pseudo random number sequence produced by the pseudo-random number generator circuit, the random starting and stopping of the action of the logic circuit can be specifically implemented.
The semiconductor apparatus with a protective measure against the power consumption analysis of the second feature may further be characterized in that the action state control circuit comprises an intrinsic random number generator circuit including a ring oscillator which oscillates at random in response to semiconductor thermal noises and a capacitor.
Using an intrinsic random number sequence produced by the self-oscillation effect of the ring oscillator and the capacitor in the intrinsic random number generator circuit, the random starting and stopping of the action of the logic circuit can be specifically implemented.
The semiconductor apparatus with a protective measure against the power consumption analysis of the second feature may further be characterized in that the action state control circuit comprises a combination of a pseudo-random number generator circuit including shift registers with a feedback function and an intrinsic random number generator circuit including a ring oscillator which oscillates at random in response to semiconductor thermal noises and a capacitor.
Since a pseudo-random number sequence can be produced based on intrinsic random numbers and the unguessable random number sequence can be produced, the power consumption analysis is even more difficult.
Further, the semiconductor apparatus with a protective measure against the power consumption analysis of any of the previous features is characterized in that the power consumption modifying circuit comprises a transistor and a resistor.
Accordingly, the power consumption modifying circuit can be implemented with a simple arrangement where the resistor element and the transistor are modified in the power consumption by controlling the on and off actions of the transistor.
The semiconductor apparatus with a protective measure against the power consumption analysis of any of the previous features may further be characterized in that the power consumption modifying circuit consumes the power in synchronism with an action clock signal of the logic circuit.
Accordingly, since the power consumption modifying circuit consumes the power at the timing of a change in the action clock signal, it can simulate a pattern of the power consumption in the CMOS circuit of the logic circuit, the power consumption waveform in the logic circuit can hardly be distinguished between during the action and during the stopping of the action.
The semiconductor apparatus with a protective measure against the power consumption analysis of any of the previous features may further be characterized in that the power consumption modifying circuit comprises a plurality of circuits the starting and stopping of whose action can be separately controlled.
Accordingly, the power consumption of the power consumption modifying circuit can be complexly modified in the change pattern and hence hardly distinguished from the power consumption of the logic circuit in the change pattern.
The semiconductor apparatus with a protective measure against the power consumption analysis of any of the previous features may further be characterized in that the power consumption of the power consumption modifying circuit during operation varies so as to simulate a temporal change of the power consumption of the logic circuit during operation.
Accordingly, the sum of the power consumption of the logic circuit and the power consumption modifying circuit can hardly be distinguished in the change pattern between during the action and during the stopping of the logic circuit, and thus furthermore the power consumption analysis becomes even more difficult.
The semiconductor apparatus with a protective measure against the power consumption analysis of any of the previous features may further be characterized in that the power consumption of the power consumption modifying circuit varies at random regardless of the action of the logic circuit.
Accordingly, any change in the power consumption of the logic circuit alone can hardly be recognized, thus furthermore the power consumption analysis becomes even more difficult.
The semiconductor apparatus with a protective measure against the power consumption analysis of any of the previous features may further be characterized in that the logic circuit includes an encryption processing circuit for carrying out an encrypting action.
Accordingly, the semiconductor apparatus can be improved in the security in which its encrypted data is inhibited from being decrypted by the power consumption analysis.
An IC card according to the present invention comprises any one of the semiconductor apparatuses with a protective measure against the power consumption analysis described above.
Accordingly, the IC card can be improved in the security in which its internal action is hardly analyzed by the power consumption analysis.
Some embodiments of the present invention will be described in the form of a semiconductor apparatus with a protective measure against the power consumption analysis (referred to as an inventive apparatus hereinafter) according to the present invention, referring to the relevant drawings.
The action state control circuit 103 is provided for randomly controlling the starting and stopping of each action in the CPU 102 and the power consumption modifying circuit 104 in order to reject an attempt of the power consumption analysis from the outside. More specifically, the starting and stopping of each action in the CPU 102 and the power consumption modifying circuit 104 is controlled at random by the action state control circuit 103, whereby the action of the power consumption modifying circuit 104 can be stopped while the CPU 102 is operating or the action of the CPU 102 can be stopped while the power consumption modifying circuit 104 is operating. As the result, it may be judged from the power consumption of the inventive apparatus 100 that the CPU 102 stays in the action at all times, hence deceiving the power consumption analysis. For stopping the action of the CPU 102, there are some techniques, for example, of terminating the feed of clock signals to the CPU 102 and of shifting the CPU 102 to the standby mode.
As shown in
The action state control circuit 103 and the power consumption modifying circuit 104 in the inventive apparatus 100 will now be described in more detail.
When the CPU 102 is composed of CMOS circuits and operated as being timed with the action clock signal CLK, its power consumption waveform at each circuit composing the CPU 102 is discontinuous in synchronism with the action clock signal CLK. In the CPU 102, the waveforms at the circuits are summed and turned smooth and continuous due to the parasitic capacitance or the parasitic inductance along the source line or the like. Similarly, discontinuous components of the power consumption produced in the power consumption modifying circuit 104 are summed and turned smooth and continuous. Accordingly, the sum of the power consumption outputs of the CPU 102 and the power consumption modifying circuit 104 exhibits a uniform, continuous waveform regardless of the starting and stopping of the action of the CPU 102.
The second embodiment of the present invention will be described in the form of an encryption processing apparatus with a protective measure against the power consumption analysis.
The action state control circuit 103 and the power consumption varying circuit 104 are identical in the circuitry arrangement to those of the first embodiment and will thus be explained in no more detail. Since the action state control circuit 103 and the power consumption varying circuit 104 are identical to those of the first embodiment, the power consumption waveform during the encoding and decoding action of the encryption processing apparatus 109 can favorably be modified regardless of the action of the CPU 102. Accordingly, any attempt of analyzing the power consumption in the encoding action and the decoding action can be interrupted or inhibited.
Further embodiments of the present invention will now be described.
(1) In the first and second embodiments, the action of the power consumption modifying circuit 104 is controlled by the timing control signal ST released from the action state control circuit 103. Alternatively as shown in
In particular, since the peak values of the power consumption of the CPU 102 during operation have been calculated from the simulation of power consumption and the starting and stopping of the action of each unit are dynamically controlled to the extent that the power consumption in the power consumption modifying circuit 104 does not exceed the peak values, the counter measure against the power consumption analysis can work successfully with no increase in the peak of the power consumption.
(2) In the first embodiment, the timing control circuit 32 shown in
(3) The first embodiment is not limited to any particular design of the inventive apparatus 100 but may preferably be of an IC card mountable type. The system arrangement of the IC card movable type is substantially identical to that shown in
(4) In the first and second embodiments, the action of the CPU 102 is stopped by stopping the feed of the action clock signal to the CPU 102 or shifting the CPU 102 to the standby mode. Alternatively, the action of the CPU 102 may be stopped in practice without stopping the feed of the action clock signal or shifting to the standby mode. For example, at the transition between a plurality of states in the procedure conducted by the CPU 102, the condition for shifting one action state to another can be deleted to cancel the action of the CPU 102. In this case, the shift from one action state to another is not carried out, hence minimizing the power consumption.
(5) In the first and second embodiments, the action state control circuit 103 is composed mainly of the random number generator circuit 31 and the timing control circuit 32. Alternatively, when the CPU 102 is designed or programmed to automatically cancel its action at random, the action state control circuit 103 may comprise the timing control circuit 32 excluding the random number generator circuit 31 so that the signal indicative of the action state can be received from the CPU 102 as the timing control signal ST. In this case, a function of the action state control circuit 103 is replace by the program for automatically stopping the action of the CPU 102 at random.
The semiconductor apparatus with a protective measure against the power consumption analysis according to the present invention is applicable to a semiconductor apparatus which has a security function for protecting the internal data from any attempt from the outside of examining the internal action through analyzing the power consumption.
Although the present invention has been described in terms of the preferred embodiments, it will be appreciated that various modifications and alterations might be made by those skilled in the art without departing from the invention. The invention should therefore be measured in terms of the claims which follow.
Number | Date | Country | Kind |
---|---|---|---|
2005-318801 | Nov 2005 | JP | national |