Method for protecting an integrated circuit against unauthorized access

Patent metadata

Field	Value
Publication number	US-10311253-B2
Application number	US-201414913569-A
Country	US
Kind code	B2
Filing date	Jul 15, 2014
Priority date	Aug 22, 2013
Publication date	Jun 4, 2019
Grant date	Jun 4, 2019

Abstract

A method for protecting an integrated circuit against unauthorized access to key registers, wherein functions and/or applications of the integrated circuit are unlocked and/or activated via data stored in key registers, such as during the start-up of the integrated circuit and/or during ongoing operation, where if such a key register is accessed, the data word used to perform the access is compared with specified key data, and if access via a data word deviating from the specified key data is detected, the access is marked as unauthorized, the access marked as unauthorized is then recorded and evaluated, and after the analysis, appropriate protective measures are triggered to prevent further unauthorized access such that a key register method for protecting sensitive data is expanded in a simple manner and hacker attacks are quickly detected and thwarted.

First claim

The invention claimed is:

1. A method for protecting against unauthorized accessing of key registers in an integrated, electronic circuit, wherein functions of the integrated, electronic circuit are at least one of enabled and activated by storing predefined key data in said key registers, the method comprising:
comparing a used data word with key data when specific key registers are accessed;
marking the specific key registers accesses using a data word at variance with the stored predefined key data as unauthorized;
recording and analyzing the specific key registers accesses marked as unauthorized, said analyzing comprising detecting patterns of accesses comprising a data word which is incremented and marked as unauthorized; and
initiating predefined protective measures after analysis of the unauthorized accesses based on said detected patterns of accesses comprising the data word which is incremented and marked as unauthorized.

2. The method as claimed in claim 1 , wherein said unauthorized accesses to the specific key registers comprises evaluating at least one of (i) a number of unauthorized accesses and (ii) a number of unauthorized accesses within a predefined period of time.

3. The method as claimed in claim 2 , wherein, in a case of a startup process, security functions of the integrated, electronic circuit are immediately activated as a protective measure based on evaluation of the unauthorized accesses.

4. The method as claimed in claim 2 , wherein, in the case of the startup process, the integrated, electronic circuit is reset to a defined initial state as a protective measure based on the evaluation of the unauthorized accesses.

5. The method as claimed in claim 4 , further comprising:
performing a check to determine whether a predefined number of unauthorized accesses has been exceeded for an integrated circuit reset.

6. The method as claimed in claim 2 , wherein a message comprising an interrupt request or a specific reset request is transmitted to currently operating components of the integrated, electronic circuit as a protective measure during ongoing operation based on results of the analysis.

7. The method as claimed in claim 2 , wherein specified functions of the integrated, electronic circuit are deactivated as a protective measure during ongoing operation based on results of the analysis.

8. The method as claimed in claim 1 , wherein, in a case of a startup process, security functions of the integrated, electronic circuit are immediately activated as a protective measure based on evaluation of the unauthorized accesses.

9. The method as claimed in claim 8 , wherein the protective measures for the startup process are deactivated after a successful startup.

10. The method as claimed in claim 1 , wherein a message comprising an interrupt request or a specific reset request is transmitted to currently operating components of the integrated, electronic circuit as a protective measure during ongoing operation based on results of the analysis.

11. The method as claimed in claim 1 , wherein specified functions of the integrated, electronic circuit are deactivated as a protective measure during ongoing operation based on results of the analysis.

Assignees

• Siemens Ag Oesterreich

Inventors

• Eppensteiner Friedrich
• Ghameshlu Majid
• Taucher Herbert

Classifications

• G06F21/629 Primary

  to features or functions of an application · CPC title

• G06F21/55

  Detecting local intrusion or implementing counter-measures · CPC title

• G06F21/71

  to assure secure computing or processing of information · CPC title