ADAPTIVE SYSTEMS AND PROCEDURES FOR DEFENDING A PROCESSOR AGAINST TRANSIENT FAULT ATTACKS

• US 20170286680A1
• Filed: 04/01/2016
• Published: 10/05/2017
• Est. Priority Date: 04/01/2016
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Benoit, Olivier Jean, Tamagno, David
• Granted Patent: US 10,380,341 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 21/75 by inhibiting the analysis of circuitry or operation
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H04L 9/004 for fault attacks

Abstract

Various features pertain to defending a smartphone processor or other device from a transient fault attack. In one example, the processor is equipped to detect transient faults using a fault detection system and to adaptively adjust a control parameter in response to the transient faults, where the control parameter controls a physical operation of the processor (such as by gating its clock signal) or a functional operation of the fault detection system (such as a particular Software Fault Sensor (SFS) employed to detect transient faults). In some examples, in response to each newly detected fault, the detection system is controlled to consume more processor time to become more aggressive in detecting additional faults. This serves to quickly escalate fault detection in response to an on-going attack to promptly detect the attack so that the device can be disabled to prevent loss of sensitive information, such as security keys or passcodes.

Claims

1. A method operational on a processor device, comprising:

detecting transient faults within the processor device; and

adaptively adjusting a control parameter in response to the detected transient faults to adaptively control an amount of processor device resources devoted to transient fault defense compared to an amount of processor device resources devoted to other operations.

2. The method of claim 1, wherein the processor device implements a transient fault defense system to adaptively adjust the control parameter, where the transient fault defense system includes one or more of a transient fault resistance system, the transient fault detection system and a transient fault reaction system, and wherein adaptively adjusting the control parameter is performed to control one or more of the transient fault resistance system, the transient fault detection system, and the transient fault reaction system.

3. The method of claim 1, wherein the control parameter is adaptively adjusted to more aggressively respond to more frequent transient faults and less aggressively respond to less frequent transient faults.

4. The method of claim 1, wherein adaptively adjusting the control parameter comprises:

detecting an amount of time since a last transient fault;

adjusting the control parameter to increase an amount of time allocated by the processor device to transient fault defense processes compared to an amount of time allocated by the processor device to other processes, if a new transient fault is detected within a tracking interval; and

adjusting the control parameter to decrease the amount of time allocated by the processor device to transient fault defense processes compared to the amount of time allocated by the processor device to other processes, if a new transient fault is not detected within a tracking interval.

5. The method of claim 1, wherein the control parameter controls one or more of:

a percentage of processor device resources devoted to transient fault defense;

a frequency with which components used for fault defense are periodically activated by the processor device;

a duration of execution of components used for fault defense;

a threshold used for transient fault detection and/or transient fault attack detection;

a threshold used by a peripheral sensor connected to the processor device for transient fault attack detection;

a particular fault detection procedure used to detect a next fault; and

/or

a timing of at least one process running on the processor device relative to at least one other process.

6. The method of claim 1, wherein adaptively adjusting the control parameter comprises:

tracking an amount of time since a last transient fault;

increasing a percentage of time devoted by the processor device to defensive countermeasures, if a new transient fault is detected within a tracking interval; and

decreasing the percentage of time devoted by the processor device to defensive countermeasures, if a new transient fault is not detected within a tracking interval.

7. The method of claim 6, wherein the percentage of time devoted by the processor device to defensive counter measures is increased only if a number of new transient faults detected within the tracking interval exceeds a lower threshold.

8. The method of claim 6, wherein the percentage of time devoted by the processor device to defensive countermeasures is increased during the tracking interval in proportion to a number of new transient faults detected within the tracking interval.

9. The method of claim 6, wherein the percentage of time devoted by the processor device to defensive countermeasures is increased to a maximum countermeasure level, if the number of new transient faults detected within the tracking interval reaches a middle threshold.

10. The method of claim 6, wherein the processor device is disabled if the number of new transient faults detected within the tracking interval reaches a top threshold.

11. The method of claim 1, wherein the processor device is incorporated into at least one of a smartphone, a video player, an entertainment unit, a navigation device, a communications device, a mobile phone, a music player, a personal digital assistant, a fixed location terminal, a tablet computer, and/or a laptop computer.

12. A processor device, comprising:

a communication interface;

a processing circuit coupled to the communication interface, the processing circuit configured to

detect transient faults within the processor device; and

adaptively adjust a control parameter of the processor device in response to the transient faults to adaptively control an amount of processor device resources devoted to transient fault defense compared to an amount of processor device resources devoted to other operations.

13. The processor device of claim 12, wherein the processor circuit implements a transient fault defense system to adaptively adjust the control parameter, where the transient fault defense system includes one or more of a transient fault resistance system, the transient fault detection system, and a transient fault reaction system.

14. The processor device of claim 12, wherein the control parameter is adaptively adjusted to more aggressively respond to more frequent transient faults and less aggressively respond to less frequent transient faults.

15. The processor device of claim 12, wherein the processing circuit adaptively adjusts the control parameter by:

detecting an amount of time since a last transient fault;

adjusting the control parameter to increase art amount of time allocated by the processor device to transient fault defense processes compared to an amount of time allocated by the processor device to other processes, if a new transient fault is detected within a tracking interval; and

adjusting the control parameter to decrease the amount of time allocated by the processor device to transient fault defense processes compared to the amount of time allocated by the processor device to other processes, if a new transient fault is not detected within a tracking interval.

16. The processor device of claim 12, wherein the control parameter controls one or more of:

a percentage of processor device resources devoted to transient fault defense;

a frequency with which components used for transient fault defense are periodically activated by the processor device;

a duration of execution of components of the fault defense;

a threshold used for transient fault detection and/or for transient fault attack detection;

a threshold used by a peripheral sensor connected to the processor device for transient fault attack detection;

a particular fault detection procedure used to detect a next fault; and

/or

a timing of at least one process running on the processor device relative to at least one other process.

17. The processor device of claim 12, wherein the processing circuit adaptively adjusts the control parameter by:

tracking an amount of time since a last transient fault;

increasing a percentage of time devoted by the processor device to defensive countermeasures, if a new transient fault is detected within a tracking interval; and

decreasing the percentage of time devoted by the processor device to defensive countermeasures, if a new transient fault is not detected within a tracking interval.

22. The processor device of claim 12, wherein the processor device is incorporated into at least one of a smartphone, a video player, an entertainment unit, a navigation device, a communications device, a mobile phone, a music player, a personal digital assistant, a fixed location terminal, a tablet computer, and/or a laptop computer.

19. The processor device of claim 19, wherein the percentage of time devoted by the processor device to defensive countermeasures is increased during the tracking interval in proportion to a number of new transient faults detected within the tracking interval.

18. The processor device of claim 19, wherein the percentage of time devoted by the processor device to defensive countermeasures is increased only if a number of new transient faults detected within the tracking interval exceeds a lower threshold.

20. The processor device of claim 19, wherein the percentage of time devoted by the processor device to defensive countermeasures is increased to a maximum countermeasure level, if the number of new transient faults detected within the tracking interval reaches a middle threshold.

21. The processor device of claim 19, wherein the processor device is disabled if the number of new transient faults detected within the tracking interval reaches a top threshold.

23. A processor device, comprising:

means for detecting transient faults within the processor device; and

means for adaptively adjusting a control parameter of the processor device in response to the transient faults to adaptively control an amount of processor device resources devoted to transient fault defense compared to an amount of processor device resources devoted to other operations.

24. The processor device of claim 23, wherein the means for adaptively adjusting the control parameter further adaptively adjusts to more aggressively respond to more frequent transient faults and less aggressively respond to less frequent transient faults.

25. The processor device of claim 23, wherein the means for adaptively adjusting the control parameter comprises:

means for detecting an amount of time since a last transient fault;

means for adjusting the control parameter to increase an amount of time allocated by the processor device to transient fault defense processes compared to an amount of time allocated by the processor device to other processes, if a new transient fault is detected within a tracking interval; and

means for adjusting the control parameter to decrease the amount of time allocated by the processor device to transient fault defense processes compared to the amount of time allocated by the processor device to other processes, if a new transient fault is not detected within a tracking interval.

26. A machine-readable storage medium having one or more instructions which when executed by a processing circuit causes the processing circuit to:

detect transient faults within the processor device; and

adaptively adjust a control parameter for transient fault defense of the processor device in response to the transient faults to adaptively control art amount of processor device resources devoted to transient fault defense compared to an amount of processor device resources devoted to other operations.

27. The machine-readable storage medium of claim 26, further having one or more instructions which when executed by the processing circuit causes the processing circuit to adaptively adjust the control parameter to more aggressively respond to more frequent transient faults and less aggressively respond to less frequent transient faults.

28. The machine-readable storage medium of claim 26, further having one or more instructions which when executed by the processing circuit causes the processing circuit to:

detect an amount of time since a last transient fault;

adjust the control parameter to increase an amount of time allocated by the processor device to transient fault defense processes compared to an amount of time allocated by the processor device to other processes, if a new transient fault is detected within a tracking interval; and

adjust the control parameter to decrease the amount of time allocated by the processor device to transient fault defense processes compared to the amount of time allocated by the processor device to other processes, if a new transient fault is not detected within a tracking interval.

29. A method operational on a processor device, comprising:

detecting transient faults within the processor device; and

adaptively adjusting a clock signal of the processor device in response to the transient faults to selectively gate clock cycles.

30. The method of claim 29, wherein the clock signal is adaptively adjusted by applying a hash code to select clock cycles of the clock signal to gate.

31. The method of claim 30, wherein the hash code is randomly or pseudorandomly generated.

32. The method of claim 29, wherein the clock signal is adaptively adjusted to control a ratio of gated clock cycles to non-gated clock cycles.

33. The method of claim 29, wherein adaptively adjusting the clock signal comprises:

detecting an amount of time since a last transient fault;

adjusting the control parameter to increase a number of gated clock cycles, if a new transient fault is detected within a tracking interval; and

adjusting the control parameter to decrease the number of gated clock cycles, if a new transient fault is not detected within a tracking interval.

34. The method of claim 29, wherein the processor device is incorporated into at least one of a smartphone, a video player, an entertainment unit, a navigation device, a communications device, a mobile phone, a music player, a personal digital assistant, a fixed location terminal, a tablet computer, and/or a laptop computer.

35. A processor device, comprising:

a communication interface; and

a processing circuit coupled to the communication interface, the processing circuit configured to

detect transient faults within the processor device; and

adaptively adjust a clock signal of the processor device in response to the transient faults to selectively gate clock cycles.

36. The processor device of claim 35, wherein the processing circuit is further configured to implement an adaptive control system which adaptively adjusts the clock signal by applying a hash code to select clock cycles of the clock signal to gate.

37. The processor device of claim 36, wherein the hash code is randomly or pseudorandomly generated.

38. The processor device of claim 35, wherein the clock signal is adaptively adjusted by the processing circuit to control a ratio of gated clock cycles to non-gated clock cycles.

39. The processor device of claim 35, wherein the processing circuit is configured to adaptively adjusts the clock signal by:

detecting an amount of time since a last transient fault;

adjusting the control parameter to increase a number of gated clock cycles, if a new transient fault is detected within a tracking interval; and

adjusting the control parameter to decrease the number of gated clock cycles, if a new transient fault is not detected within a tracking interval.

40. The processor device of claim 35, wherein the processor device is incorporated into at least one of a smartphone, a video player, an entertainment unit, a navigation device, a communications device, a mobile phone, a music player, a personal digital assistant, a fixed location terminal, a tablet computer, and/or a laptop computer.

41. A processor device, comprising:

means for detecting transient faults within the processor device; and

means for adaptively adjusting a clock signal of the processor device in response to the transient faults to selectively gate clock cycles.

42. A machine-readable storage medium having one or more instructions which when executed by a processing circuit causes the processing circuit to:

detect transient faults within the processor device; and

adaptively adjust a clock signal of the processor device in response to the transient faults to selectively gate clock cycles.