METHOD AND APPARATUS FOR DETECTION OF TAMPERING ATTACKS

• US 20070143844A1
• Filed: 09/05/2006
• Published: 06/21/2007
• Est. Priority Date: 09/02/2005
• Status: Active Grant

• Current Assignee: Cryptosoft Limited
• Original Assignee: Uniloc Luxembourg S.à r.l. (f/k/a Uniloc Luxembourg S.A.) (Uniloc Corporation Pty. Limited)
• Inventors: Richardson, Ric, Abraham, Benjamin, Angha, Farza, Younessi, Hamid, Potenzone, Casey
• Granted Patent: US 8,087,092 B2
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings

Abstract

A method for detecting an attempted attack on a security system. In one preferred embodiment of the present invention, the method includes the step of retrieving a parameter from a hardware system, wherein the parameter changes during an operation of the hardware system. Then, comparing the retrieved parameter with a previously stored parameter; and, detecting a lack of change between the retrieved parameter and the previously stored parameter. An apparatus and an article of manufacture for detecting an attempted attack on a security system is also disclosed.

Claims

1. A method for detecting an attempted attack on a security system comprising:

retrieving a parameter from a hardware system, wherein the parameter changes during an operation of the hardware system;

comparing the retrieved parameter with a previously stored parameter; and

, detecting a lack of change between the retrieved parameter and the previously stored parameter.

2. The method of claim 1, wherein the parameter changing during the operation of the hardware system comprises the parameter being different between each retrieval.

3. The method of claim 1, wherein the hardware system comprises a device, and retrieving the parameter from the hardware system comprises retrieving a device parameter from the device.

4. The method of claim 1, further comprising:

retrieving an initial parameter from the hardware system, wherein the initial parameter will change during the operation of the hardware system, and, storing the initial parameter to create the previously stored parameter.

5. The method of claim 1, further comprising:

retrieving a second parameter from the hardware system, wherein the second parameter does not change during the operation of the hardware system;

comparing the retrieved second parameter with a second previously stored parameter; and

,

detecting a change between the retrieved second parameter and the second previously stored parameter.

6. The method of claim 5, wherein the hardware system comprises a device, and the parameter and the second parameter are both retrieved from the device.

7. The method of claim 5, wherein the hardware system comprises a second device having a second device parameter, and retrieving the second parameter from the hardware system comprises retrieving the second device parameter from the second device.

8. The method of claim 1, further comprising:

retrieving a second parameter from the hardware system, wherein the second parameter rarely changes during the operation of the hardware system;

comparing the retrieved second parameter with a second previously stored parameter; and

,

detecting a change between the retrieved second parameter and the second previously stored parameter.

9. An apparatus for detecting a tampering attempt in a security system comprising:

a processor;

a memory coupled to the processor, the memory configured to cause the processor to execute a method comprising;

retrieving a parameter from a hardware system, wherein the parameter changes during an operation of the hardware system;

comparing the retrieved parameter with a previously stored parameter; and

,

detecting a lack of change between the retrieved parameter and the previously stored parameter.

10. The apparatus of claim 9, wherein the parameter changing during the operation of the hardware system comprises the parameter being different between each retrieval.

11. The apparatus of claim 9, wherein the hardware system comprises a device, and retrieving the parameter from the hardware system comprises retrieving a device parameter from the device.

12. The apparatus of claim 9, wherein the method further comprising:

retrieving an initial parameter from the hardware system, wherein the initial parameter will change during the operation of the hardware system, and,

storing the initial parameter to create the previously stored parameter.

13. The apparatus of claim 9, wherein the method further comprising:

retrieving a second parameter from the hardware system, wherein the second parameter does not change during the operation of the hardware system;

comparing the retrieved second parameter with a second previously stored parameter; and

,

detecting a change between the retrieved second parameter and the second previously stored parameter.

14. The apparatus of claim 13, wherein the hardware system comprises a device, and the parameter and the second parameter are both retrieved from the device.

15. The apparatus of claim 9, wherein the hardware system comprises a second device having a second device parameter, and retrieving the second parameter from the hardware system comprises retrieving the second device parameter from the second device.

16. The apparatus of claim 9, wherein the method further comprising:

retrieving a second parameter from the hardware system, wherein the second parameter rarely changes during the operation of the hardware system;

comparing the retrieved second parameter with a second previously stored parameter; and

,

detecting a change between the retrieved second parameter and the second previously stored parameter.

17. An article of manufacture comprising a computer-readable medium having instructions stored thereon for causing a processor to perform a method for detecting an attempted attack on a security system, the method comprising:

retrieving a parameter from a hardware system, wherein the parameter changes during an operation of the hardware system;

comparing the retrieved parameter with a previously stored parameter; and

,

detecting a lack of change between the retrieved parameter and the previously stored parameter.

18. The article of manufacture of claim 17, wherein the parameter changing during the operation of the hardware system comprises the parameter being different between each retrieval.

19. The article of manufacture of claim 17, wherein the hardware system comprises a device, and retrieving the parameter from the hardware system comprises retrieving a device parameter from the device.

20. The article of manufacture of claim 17, wherein the method further comprising:

retrieving an initial parameter from the hardware system, wherein the initial parameter will change during the operation of the hardware system, and,

storing the initial parameter to create the previously stored parameter.

21. The article of manufacture of claim 17, wherein the method further comprising:

retrieving a second parameter from the hardware system, wherein the second parameter does not change during the operation of the hardware system;

comparing the retrieved second parameter with a second previously stored parameter; and

,

detecting a change between the retrieved second parameter and the second previously stored parameter.

22. The article of manufacture of claim 21, wherein the hardware system comprises a device, and the parameter and the second parameter are both retrieved from the device.

23. The article of manufacture of claim 21, wherein the hardware system comprises a second device having a second device parameter, and retrieving the second parameter from the hardware system comprises retrieving the second device parameter from the second device.

24. The article of manufacture of claim 17, wherein the method further comprising:

retrieving a second parameter from the hardware system, wherein the second parameter rarely changes during the operation of the hardware system;

comparing the retrieved second parameter with a second previously stored parameter; and

,

detecting a change between the retrieved second parameter and the second previously stored parameter.