Anti tamper encapsulation for an integrated circuit

• US 7,005,733 B2
• Filed: 12/26/2000
• Issued: 02/28/2006
• Est. Priority Date: 12/30/1999
• Status: Expired due to Term

• Current Assignee: Universal Imaging Industries, LLC
• Original Assignee: Kömmerling, Fritz, Kömmerling, Oliver
• Inventors: Kömmerling, Fritz, Kömmerling, Oliver
• Primary Examiner(s): Lee, Eugene
• Application Number:
  US09/745,811
• Publication Number:
  US 20010033012A1
• Time in Patent Office: 1,890 Days
• Field of Search: 380/3, 380/4, 380/42, 257/679, 257/787, 257/922, 713/190, 713/193, 713/194
• US Class Current: 257/679
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 21/87 by means of encapsulation, e.g. for integrated circuits
• CPC Class Codes: G06K 19/073 Special arrangements for circuits, e.g. for protecting identification code in memory protection against unauthorised use of computer memory G06F12/14
• CPC Class Codes: G06K 19/07372 by detecting tampering with the circuit
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H01L 23/57 Protection from inspection, reverse engineering or tampering
• CPC Class Codes: H01L 23/573 using passive means
• CPC Class Codes: H01L 23/576 using active circuits
• CPC Class Codes: H01L 2924/00 Indexing scheme for arrangements or methods for connecting or disconnecting semiconductor or solid-state bodies as covered by H01L24/00
• CPC Class Codes: H01L 2924/00012 Relevant to the scope of the group, the symbol of which is combined with the symbol of this group
• CPC Class Codes: H01L 2924/0002 Not covered by any one of groups H01L24/00, H01L24/00 and H01L2224/00
• CPC Class Codes: H01L 2924/181 Encapsulation
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 9/002 Countermeasures against attacks on cryptographic mechanisms network architectures or network communication protocols for protection against malicious traffic H04L63/1441
• CPC Class Codes: H04L 9/06 the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: Y10S 257/922 with means to prevent inspection of or tampering with an integrated circuit, e.g. "smart card", anti-tamper

Abstract

An integrated circuit device comprising: a circuit which uses encryption; and an encapsulation packaging layer; in which the circuit is responsive to at least one physical parameter of the encapsulation to apply the encryption and/or decryption by reading the key therefrom, so that tampering with the encapsulation to gain access to the circuit causes the encryption and/or decryption to fail.

Claims

1. An integrated circuit device comprising:

a protective member which reduces access to the device;

one or more sensors for sensing one or more physical parameters from the protective member; and

a circuit which encrypts and decrypts protected data,

wherein the circuit is adapted to derive encryption values from the one or more physical parameters sensed, the encryption values being essential to the process of encrypting and decrypting the protected data, such that tampering with the protective member to gain access to the circuit corrupts the encryption values.

2. A device according to claim 1, in which the circuit comprises a memory in which protected data is stored in encrypted form.

3. A device according to claim 1, in which the circuit comprises bus lines for connection to a separate memory device.

4. A device according to claim 2 or 3, in which said memory is read-only, and said circuit comprises a decryptor arranged to apply a decryption algorithm to data read therefrom.

5. A device according to claim 2 or 3, in which said memory is writeable, and said circuit comprises an encryptor arranged to apply an encryption algorithm to data to be protected to be written thereto.

6. A device according to claim 2 or 3, in which said memory comprises at least a first memory and a second memory, and said first memory stores data encryption to be used to decrypt data stored in said second memory, and said circuit is responsive to the parameter to decrypt the contents of the first memory.

7. A device according to claim 1, in which the protective member comprises an encapsulation around the circuit.

8. A device according to claim 1, in which the circuit comprises an encryptor arranged to apply an encryption and/or decryption algorithm to data to be protected or said protected data.

9. A device according to claim 1, wherein said protective member includes at least one decrystallised portion of a crystalline solid.

10. A device according to claim 1, further comprising tamper-detection logic, responsive to an attempt to gain access to the circuit to generate a tamper signal.

11. A device according to claim 1, in which the circuit is jointly responsive both to said physical parameter and to predetermined secret encryption data to apply the encryption and/or decryption.

12. A device according to claim 11, further comprising tamper-detection logic, responsive to attempt to gain access to the circuit to generate a tamper signal.

13. A device according to claim 12, in which the circuit is arranged to erase the predetermined secret encryption data in response to the tamper signal.

14. A device according to claim 1, further comprising a shield surrounding the protective member, and arranged to reduce the effects of external conditions on the physical parameter.

15. A device according to claim 1, further comprising at least one sensor responsive to said protective member, from which said at least one parameter can be derived by said circuit.

16. A device according to claim 15, further comprising a plurality of sensors to sense said at least one physical parameter.

17. A device according to claim 16, in which said sensors are disposed in an array over at least part of said circuit.

18. A device according to claim 17, in which the inter-sensor spacing is on the order of a micron.

19. A device according to claim 16, farther comprising a scanning circuit arranged to periodically read said sensors.

20. A device according to claim 19, in which said scanning circuit is arranged to vary the order of reading said sensors.

21. A device according to claim 19, further comprising a checking circuit arranged to check whether the outputs of said sensors correspond to previous values thereof.

22. The device according to claim 1, wherein said altering of the encryption and/or decryption process occurs regardless of a power state of said device.

23. The device according to claim 1, wherein the tampering alters one or more one or more physical parameters, resulting in the inability to derive said encryption values used to decrypt said protected data.

25. A device according to claim 1, in which said parameter is an electrical parameter.

26. A device according to claim 1, in which said parameter is a magnetic parameter.

27. A device according to claim 1, in which said parameter is an optical parameter.

28. A device according to claim 1, in which said parameter is a radiation parameter.

29. A device according to claim 1, wherein said protective member includes a plurality of particles to which said circuit is responsive, within a matrix material.

30. A device according to claim 29, wherein said particles are metallic.

31. A device according to claim 29, wherein said particles are radioactive.

32. A device according to claim 29, wherein said matrix allows passage of radiation, and said parameter is an optical property affected by said particles.

33. A device according to claim 32, in which said particles are radiation-producing.

34. A device according to claim 32, in which said particles are radiation-absorbing.

35. A device according to claim 32, in which said particles are radiation-scattering.

24. An integrated circuit device comprising:

a protective member which reduces access to the device;

one or more sensors for sensing one or more physical parameters from the protective member; and

a circuit which encrypts and decrypts protected data,

wherein the circuit is adapted to derive encryption values from the one or more physical parameters sensed, the encryption values being essential to the process of encrypting and decrypting the protected data, such that tampering with the protective member to gain access to the circuit corrupts the encryption values,

in which the circuit comprises an encryptor arranged to apply an encryption and/or decryption algorithm to data to be protected or said protected data and

in which said encryptor is arranged to use an encryption key, and to the circuit is arranged to derive said key from said parameters.

36. An integrated circuit device comprising a memory in which data is stored in encrypted form, and a circuit for encrypting and/or decrypting to write and/or read the data, the circuit comprising a key register storing a key for use in said encryption and/or decryption process, and an alternation circuit arranged to vary the data stored in the key register at frequent intervals.