Detection of Hardware Tampering

Patent metadata

Field	Value
Publication number	US-2016247002-A1
Application number	US-201514628870-A
Country	US
Kind code	A1
Filing date	Feb 23, 2015
Priority date	Feb 23, 2015
Publication date	Aug 25, 2016
Grant date	—

Abstract

A trusted guard module stores one or more identifiers, each identifier uniquely identifying a respective electronic component of one or more electronic components in a circuit, wherein each electronic component is previously programmed with its respective identifier. In one embodiment, the one or more electronic components are in communication with the guard module via a test data channel. A query is sent from the guard module to one of the components via the test data channel, requesting that the queried component provide its respective identifier to the guard module. The guard module then receives a response from the queried component via the test data channel. The guard module compares the response to the stored identifier for the queried component. If the response fails to correspond to the stored identifier for the queried component, the guard module asserts an alarm condition.

First claim

What is claimed is:

1 . A method comprising:
storing one or more identifiers in a trusted guard module, each identifier uniquely identifying a respective electronic component of one or more electronic components in a circuit, wherein each electronic component of the one or more electronic components is previously programmed with its respective identifier; sending a query from the trusted guard module to a first electronic component of the one or more electronic components via a test data channel, the query requesting that the first electronic component provide its respective identifier to the guard module; receiving a response from the first electronic component via the test data channel; comparing the response to a stored identifier for the first electronic component; and when the response fails to correspond to the stored identifier for the first electronic component, asserting an alarm condition.

2 . The method of claim 1 , wherein the test data channel operates in a manner consistent with IEEE Standard 1149.1.

3 . The method of claim 1 , wherein the one or more identifiers each comprises an electronic chip identifier (ECID).

4 . The method of claim 1 , wherein the one or more identifiers each comprises a unique secret value.

5 . The method of claim 1 , wherein the trusted guard module derives its trust from a secure trust anchor.

6 . The method of claim 1 , further comprising:
counting a number of clock cycles between the sending of the query and the receipt of the response; determining when the number of clock cycles is equal to an expected number of clock cycles for the first electronic component; and when the number of clock cycles is not equal to the expected number of clock cycles for the first electronic component, asserting the alarm condition.

7 . The method of claim 1 , further comprising:
sending information regarding the alarm condition to an analysis module that is remote from the circuit; and sending information identifying the first electronic component to the analysis module.

8 . An apparatus, comprising:
one or more electronic components; a guard module; and a test data channel connecting the one or more electronic components and the guard module in a boundary scan system, wherein the guard module comprises trusted logic that is configured to:
store one or more identifiers in the guard module, each identifier uniquely identifying a respective one of the one or more electronic components, wherein each electronic component of the one or more electronic components is previously programmed with its respective identifier;
send a query from the trusted guard module to a first electronic component of the one or more electronic components via the test data channel, the query requesting that the first electronic component provide its respective identifier to the guard module;
receive a response from the first electronic component via the test data channel;
compare the response to a stored identifier for the first electronic component; and
when the response fails to correspond to the stored identifier for the first electronic component, assert an alarm condition.

9 . The apparatus of claim 8 , wherein the test data channel is configured to operate in a manner consistent with IEEE Standard 1149.1.

10 . The apparatus of claim 8 , wherein the one or more identifiers each comprises an electronic chip identifier (ECID).

11 . The apparatus of claim 8 , wherein the one or more identifiers each comprises a unique secret value.

12 . The apparatus of claim 8 , wherein the guard module derives its trust from a secure trust anchor.

13 . The apparatus of claim 8 , wherein the guard module is further configured to:
count a number of clock cycles between sending the query and receipt of the response; determine when the number of clock cycles is equal to an expected number of clock cycles for the first electronic component; and when the number of clock cycles is not equal to an expected number of clock cycles for the first electronic component, assert the alarm condition.

14 . The apparatus of claim 8 , wherein the guard module is further configured to:
send information regarding the alarm condition to an analysis module that is remote from the apparatus; and send information identifying the first electronic component to the analysis module.

15 . One or more non-transitory computer readable storage media encoded with software comprising computer executable instructions that, when executed on a programmable processor, are operable to:
store one or more identifiers, each identifier uniquely identifying a respective one of one or more electronic components, wherein each electronic component of the one or more electronic components is previously programmed with its respective identifier; send a query to a first electronic component of the one or more electronic components via a test data channel, the query requesting that the first electronic component provide its respective identifier to a processor; receive a response from the first electronic component via the test data channel; compare the response to a stored identifier for the first electronic component; and when the response fails to correspond to the stored identifier for the first electronic component, assert an alarm condition.

16 . The computer readable storage media of claim 15 , wherein further comprising instructions operable to communicate over the test data channel in a manner consistent with IEEE Standard 1149.1.

17 . The computer readable storage media of claim 15 , wherein the one or more identifiers each comprises an electronic chip identifier (ECID).

18 . The computer readable storage media of claim 15 , wherein the one or more identifiers each comprises a unique secret value.

19 . The computer readable storage media of claim 15 , further comprising instructions that, when executed, are operable to:
count the number of clock cycles between the sending of the query and the receipt of the response; determine when the number of clock cycles is equal to an expected number of clock cycles for the first electronic component; and when a number of clock cycles is not equal to an expected number of clock cycles for the first electronic component, assert the alarm condition.

20 . The computer readable storage media of claim 15 , further comprising instructions that, when executed, are operable to:
send information regarding the alarm condition to an analysis module that is remote from the processor; and send information identifying the first electronic component to the analysis module.

Assignees

• Cisco Tech Inc

Inventors

• Grieco Anthony H
• Shroff Chirag

Classifications

• G06F2221/2103

  Challenge-response · CPC title

• G06F21/86 Primary

  Secure or tamper-resistant housings · CPC title

• G06F21/88

  Detecting or preventing theft or loss · CPC title