Patent Description:
In order to achieve the purposes, such as stealing data stored in a chip and affecting the normal operation of the chip, hackers may attack the chip. In particular, security chips are widely used in scenarios that require high data reliability, such as identification, key data storage, and financial fields, and generally store confidential data, and therefore security chips, as the key targets, are often attacked by hackers. Attackers generally inject faults into the chip through attacking methods, make the working state of the chip wrong, and then obtain the confidential data stored in the chip.

The laser fault injection attack is a semi-invasive attack method commonly used by attackers. Attackers use laser pulses to attack the chip from the front side or back side, resulting in incorrect timing or abnormal flipping of the circuit, which in turn changes the storage content and affects data transmission and normal operation of an encryption module of the chip. In order to ensure the robustness and security of the chip and a device that the chip belongs to, it is necessary to detect the laser fault injection attack on the chip in time and provide an alarm, so that the chip or the device that the chip belongs to can deal with the laser fault injection attack in time. <CIT> depicts a chip and a detection method thereof. The chip includes a substrate, at least one laser detection circuit, and multiple key circuit modules. The laser detection circuit includes laser detection units, a NAND logic unit, and an AND logic unit. Each laser detection unit includes a monitoring diode and a first charging transistor; the anode of the monitoring diode is grounded; the input end of the first charging transistor is electrically connected with a power supply; and the cathode of the monitoring diode and the output end of the first charging transistor are electrically connected and serve as the output end of the laser detection unit. Each input end of the NAND logic unit is electrically connected with the output end of one laser detection unit, a first input end of the AND logic unit is electrically connected with the output end of the NAND logic unit, and a second input end of the AND logic unit receives an enabling signal. Each key circuit module is set adjacent to at least one laser detection unit. Through the implementation of the embodiments of the invention, the accuracy of laser detection is improved, and missing detection is avoided. <CIT> provides a circuit for detecting a malfunction generation attack, including: at least one sensor circuit adapted to detect a radiation of light; and a detection circuit for detecting an intermediate voltage between a voltage corresponding to a High level and a voltage corresponding to a Low level in accordance with an output from the at least one sensor circuit, and outputting a detection signal. At least one sensor circuit has an output node, a level at which is changed in accordance with the radiation of the light, and outputs a signal corresponding to the level at the output node which is changed in accordance with the radiation of the light. The detection circuit outputs the detection signal when a level of the output signal from the at least one sensor circuit reaches a level previously set.

The present disclosure provides a detection circuit for a laser fault injection attack on a chip and a security chip, which can detect laser fault injection attacks on a chip, such as a security chip, and improve the robustness and security of the chip.

In a first aspect, the present disclosure provides a detection circuit for a laser fault injection attack on a chip, and the detection circuit is disposed in the chip. The detection circuit includes a first capacitor, a second capacitor, a first switch, a second switch, a photosensitive element, a first NMOS transistor, and a second NMOS transistor. The first switch includes a control terminal configured to receive a first clock signal for controlling a turning-on state and a turning-off state of the first switch, a first terminal connected to a supply voltage, and a second terminal grounded through the first capacitor. The second switch includes a control terminal configured to receive a second clock signal for controlling a turning-on state and a turning-off state of the second switch, a first terminal connected to the supply voltage, and a second terminal grounded through the second capacitor. The first NMOS transistor includes a drain connected to the second terminal of the first switch and configured to output a first voltage signal, a source connected to the photosensitive element, and a gate connected to the second terminal of the second switch. The second NMOS transistor includes a drain connected to the second terminal of the second switch and configured to output a second voltage signal, a source connected to the photosensitive element, and a gate connected to the second terminal of the first switch; and the first voltage signal and the second voltage signal are configured to indicate the chip is attacked by laser fault injection.

The above detection circuit for the laser fault injection attack can detect the laser fault injection attack on the chip, such as a security chip, and improve the robustness and security of the chip.

In an embodiment, the first clock signal and the second clock signal have a same frequency and a same phase.

In an embodiment, the first clock signal and the second clock signal have opposite phases.

In an embodiment, the first switch is turned on when the first clock signal is at a high level, and is turned off when the clock signal is at a low level; and the second switch is turned on when the second clock signal is at a high level, and is turned off when the second clock signal is at a low level.

In an embodiment, the first switch includes a first inverter and a first PMOS transistor, the first PMOS transistor includes a gate, a drain serving as the first terminal of the first switch, and a source serving as the second terminal of the first switch, and the first inverter includes an input terminal serving as the control terminal of the first switch, and an output terminal connected to the gate of the first PMOS transistor.

In an embodiment, the second switch includes a second inverter and a second PMOS transistor, the second PMOS transistor includes a gate, a drain serving as the first terminal of the second switch, and a source serving as the second terminal of the second switch, and the second inverter includes an input terminal serving as the control terminal of the second switch, and an output terminal connected to the gate of the second PMOS transistor.

In an embodiment, the first switch is turned on when the first clock signal is at a low level, and is turned off when the first clock signal is at a high level; and the second switch is turned on when the second clock signal is at a low level, and is turned off when the second clock signal is at a high level.

In an embodiment, the first switch includes a third PMOS transistor, and the third PMOS transistor includes a gate serving as the control terminal of the first switch, a drain serving as the first terminal of the first switch, and a source serving as the second terminal of the first switch.

In an embodiment, the second switch includes a fourth PMOS transistor, and the fourth PMOS transistor includes a gate serving as the control terminal of the second switch, a drain serving as the first terminal of the second switch, and a source serving as the second terminal of the second switch.

In an embodiment, the first switch is turned on when the first clock signal is at a low level, and is turned off when the first clock signal is at a high level; and the second switch is turned on when the second clock signal is at a high level, and is turned off when the second clock signal is at a low level.

In an embodiment, the second switch includes a second inverter and a second PMOS transistor, the second PMOS transistor includes a gate, a drain serving as the first terminal of the second switch, and a source serving as the second terminal of the second switch, and the second inverter includes an input terminal serving as the control terminal of the second switch, an output terminal connected to the gate of the second PMOS transistor.

In an embodiment, the first switch is turned on when the first clock signal is at a high level, and is turned off when the first clock signal is at a low level; the second switch is turned on when the second clock signal is at a low level, and is turned off when the second clock signal is at a high level.

In an embodiment, the second switch includes a fourth PMOS transistor including a gate serving as the control terminal of the second switch, a drain serving as the first terminal of the second switch, and a source serving as the second terminal of the second switch.

In an embodiment, the photosensitive element is a photodiode.

In an embodiment, the detection circuit further includes a signal processing circuit, configured to output a processing signal based on the first voltage signal and the second voltage signal, wherein the processing signal is configured to control states of other circuits in the chip.

In a second aspect, embodiments of the present disclosure provide a security chip, the security chip includes a storage circuit and the detection circuit for the laser fault injection attack described in the first aspect, and the first voltage signal and the second voltage signal are configured to control removal of contents of the storage circuit.

In order to more clearly explain technical solutions of embodiments of the present disclosure, the drawings needed in the embodiments will be briefly introduced below. Apparently, the drawings in the following description are only some embodiments of the present disclosure. For those of ordinary skill in the art, without creative work, other drawings can be obtained from these drawings.

Some terms used in implementations of this disclosure are merely used to explain specific embodiments of this disclosure, but are not intended to limit this disclosure.

Embodiments of the present disclosure provide a detection circuit for a laser fault injection attack on a chip, which can detect the laser fault injection attacks on a chip, such as a security chip, and improve the robustness and security of the chip. The implementation of the detection circuit for a laser fault injection attack in the embodiments of the present disclosure will be exemplarily described below.

<FIG> is a structural diagram of a detection circuit for a laser fault injection attack according to an embodiment of the present disclosure. As shown in <FIG>, the detection circuit for the laser fault injection attack includes a detection unit <NUM> and a processing unit <NUM>.

A first input terminal IN11 of the detection unit <NUM> receives a first clock signal CLKA, a second input terminal IN12 of the detection unit <NUM> receives a second clock signal CLKB. In an embodiment, the first clock signal CLKA and the second clock signal CLKB are a same signal, that is, when the first clock signal CLKA is at a high level, the second clock signal CLKB is also at the high level, and when the first clock signal CLKA is at a low level, the second clock signal CLKB is also at the low level. As long as the first clock signal CLKA and the second clock signal CLKB have a same frequency and a same phase, the signal amplitudes of the two clock signals are not limited. A first output terminal OUT1 of the detection unit <NUM> is configured to output a first voltage signal, and a second output terminal OUT2 is configured to output a second voltage signal.

A first input terminal IN21 of the processing unit <NUM> is connected to the first output terminal OUT1 of the detection unit <NUM>, and is configured to receive the first voltage signal. A second input terminal N22 of the processing unit <NUM> is connected to the second output terminal OUT2 of the detection <NUM>, and is configured to receive the second voltage signal. The processing unit <NUM> outputs a processing signal when the first voltage signal received from the first input terminal IN21 is at the low level and/or when the second voltage signal received from the second input terminal IN22 is at the low level. That is, as long as at least one of the first voltage signal received from the first input terminal IN21 or the second voltage signal received from the second input terminal IN22 is at the low level, the processing unit <NUM> outputs the processing signal, and the processing signal is configured to control states of other circuits in the chip where the laser fault injection attack detection circuit is disposed. For example, the processing unit <NUM> may output the processing signal to a processor of the chip where the detection circuit for the laser fault injection attack is disposed, and the processor executes predetermined processing for the laser fault injection attacks, such as interrupt or chip reset; or the processing unit <NUM> can output the processing signal to a storage circuit of the chip, and the storage circuit removes stored contents.

It should be noted that the processing unit <NUM> in embodiments of the present disclosure is an optional unit. If the detection circuit for the laser fault injection attack only includes the detection unit, the detection circuit for the laser fault injection attack in the embodiment of the present disclosure can indicate whether the chip where the detection circuit for the laser fault injection attack is disposed is attacked by the laser fault injection attack based on the first voltage signal and the second voltage signal that are outputted by the detection unit, and the first voltage signal and the second voltage signal are configured to control the states of other circuits in the chip where the detection circuit for the laser fault injection attack is disposed. For example, the first voltage signal and the second voltage signal that are outputted by the detection unit can be directly outputted to the processor of the chip where the detection circuit for the laser fault injection attack is disposed, and the processor executes predetermined processing against the laser fault injection attacks, such as interrupt or chip reset when at least one of the first voltage signal or the second voltage signal is at the low level; or the first voltage signal and the second voltage signal that are outputted by the detection unit can be directly outputted to the storage circuit of the chip, and the storage circuit removes the stored contents when at least one of the first voltage signal /or the second voltage signal is at the low level.

The detection unit <NUM> includes a first switch S1, a second switch S2, a first negative channel metal oxide semiconductor (NMOS) transistor N1, a second NMOS transistor N2, a first capacitor C1, a second capacitor C2, and a photosensitive element D. A control terminal of the first switch S1 serves as the first input terminal IN11 of the detection unit <NUM>. A first terminal of the first switch S1 is connected to a supply voltage VDD. A second terminal of the first switch S1 is connected to a drain of the first NMOS transistor N1 and a gate of the second NMOS transistor N2, and is further grounded through the first capacitor C1. The second terminal of the first switch S1 also serves as the first output terminal OUT1 of the detection unit <NUM>. A control terminal of the second switch S2 serves as the second input terminal IN12 of the detection unit <NUM>. A first terminal of the second switch S2 is connected to the supply voltage VDD. A second terminal of the second switch S2 is connected to a drain of the second NMOS transistor N2 and a gate of the first NMOS transistor N1, and is further grounded through the second capacitor C2. The second terminal of the second switch S2 also serves as the second output terminal OUT2 of the detection unit <NUM>. Both of a source of the first NMOS transistor N1 and a source of the second NMOS transistor N2 are connected to a first terminal of the photosensitive element D. A second terminal of the photosensitive element D is floated. In <FIG>, the first terminal of the photosensitive element D is marked as point A, and the second terminal of the photosensitive element D is marked as point B.

The first clock signal CLKA received by the first input terminal IN11 of the detection unit <NUM> is configured to control the turning-on and turning-off states of the first switch S1, and the second clock signal CLKB received by the second input terminal IN12 of the detection unit <NUM> is configured to control the turning-on and turning-off states of the second switch S2.

In an embodiment, the photosensitive element D can be a photodiode, the first terminal of the photosensitive element is an anode of the photodiode, and the second terminal of the photosensitive element is a cathode of the photodiode.

Next, the structural relationship between the point B and the substrate of the laser fault injection attack detection circuit when the point B is floated will be described. The substrate of the detection circuit for the laser fault injection attack is generally a part of the substrate of the chip to which the detection circuit for the laser fault injection attack belongs. As shown in <FIG>, a reverse-biased PN junction D2 is provided between point B and the substrate. When attacked by the laser fault injection, the reverse-biased PN junction D2 will generate a current to the ground such that the charges stored at point A is discharged, and the voltage at point A is pulled down to ground when the current is large enough to discharge all stored charges.

The specific control logic of the controlling of the turning-on and turning-off states of the first switch S1 by the first clock signal CLKA is described hereafter. The first switch S1 is turned off when the first clock signal CLKA is at the low level and is turned on when the first clock signal CLKA is at the high level. The specific control logic of the controlling of the turning-on and turning-off states of the second switch S2 by the second clock signal CLKB is described hereafter. The second switch S2 is turned off when the second clock signal CLKB is at the low level and is turned on when the second clock signal CLKB is at the high level.

The working principle of the detection circuit for the laser fault injection attack shown in <FIG> is described.

First, the working principle of controlling the first switch S1 with the first clock signal CLKA in <FIG> will be described.

The first clock signal CLKA periodically inputs a high-level signal to the control terminal of the first switch S1, which can keep the voltage of the first output terminal OUT1 at the supply voltage VDD when there is no laser fault injection attack. The principle is as follows. When there is no laser fault injection attack, once the first capacitor C1 is connected to the supply voltage VDD and the charging is complete, the voltage of the first output terminal OUT1 is equal to the supply voltage VDD. However, if there is a leakage current in the circuit, the leakage current will cause discharging of the charges of the first capacitor C1, and the voltage of the first output terminal OUT1 decreases. If the first capacitor C1 is not charged for a long time, the leakage current can cause the voltage of the first output terminal OUT1 to decrease continuously. Once the voltage of the first output terminal OUT1 decreases below a preset first value, the signal outputted by the first output terminal OUT1 flips from a high level to a low level, the processing unit <NUM> receives the low-level signal and outputs the processing signal, and a false alarm occurs. Through periodically inputting a high-level signal to the control terminal of the first switch S1 by the first clock signal CLKA, the first switch S1 is turned on periodically, and the power supply periodically charges the first capacitor C1, which can replenish the charges of the first capacitor C1 discharged through the leakage current, thereby ensuring that when there is no laser fault injection attack, the voltage of the first output terminal OUT1 is always maintained at the supply voltage VDD, that is, being maintained at the high level, and avoiding false detection caused by leakage of the capacitor.

The controlling of the turning-on and turning-off states of the second switch S2 with the second clock signal CLKB in <FIG> is also based on the same principle. That is, the second clock signal CLKB is used for controlling the turning-on and turning-off states of the second switch S2, a high-level signal is periodically inputted to the second switch S2 to control the second switch S2 to be periodically turned on, and the power supply periodically charges the second capacitor C2 to replenish the charges of the second capacitor C2 that is discharged due to the leakage current, such that the voltage of the second output terminal OUT2 is maintained at the supply voltage VDD when there is no laser fault injection attack.

Hereinafter, combining the timing diagrams shown in <FIG>, the working principle of the laser fault injection attack detection of the detection circuit for the laser fault injection attack shown in <FIG> will be explained.

A cycle of the first clock signal and a cycle the second clock signal in an embodiment of this disclosure are generally <NUM> to <NUM>, and a laser pulse signal is generally used to attack the chip in the laser fault injection attack. The laser pulse has a width in an order of ns, so the width of the laser pulse of the laser pulse signal is generally much smaller than the high-level width or low-level width in each cycle of the first clock signal and the second clock signal. Therefore, the laser pulse signal is generally located in the high-level duration or low-level duration in each cycle of the first clock signal and the second clock signal.

In an embodiment, the first clock signal CLKA and the second clock signal CLKB are a same signal, and accordingly, the timing diagrams of the detection circuit for the laser fault injection attack shown in <FIG> are shown in <FIG> and <FIG>.

<FIG> shows the working timing diagram of the detection unit with an example in which when the first clock signal CLKA and the second clock signal CLKB are both at the high level, a laser fault injection attack occurs. <FIG> includes the timing diagrams of the voltage signals of the first output terminal OUT1, the second output terminal OUT2, and point A.

When the detection circuit is in the detection state and the laser fault injection attack does not occur, the first clock signal CLKA controls the first switch S1 to be periodically turned on by periodically inputting the high-level signal to the first switch S1, the power supply periodically charges the first capacitor C1, ensuring that the voltage of the first output terminal OUT1 is always maintained at the supply voltage VDD, that is, maintained at the high level. Similarly, the second clock signal CLKB controls the second switch S2 to be periodically turned on by periodically inputting the high-level signal to the second switch S2, the power supply periodically charges the second capacitor C2, ensuring that the voltage of the second output terminal OUT2 is always maintained at the supply voltage VDD, that is, maintained at the high level. When the voltage of the first output terminal OUT1 is maintained at the high level, the second NMOS transistor N2 is turned on. When the voltage of the second output terminal OUT2 is maintained at the high level, the first NMOS transistor N1 is turned on. Therefore, the voltage of point A is maintained at the high level.

Laser fault injection attack may occur in the high-level duration of the clock signal. At this time, the first clock signal CLKA is at the high level, the first switch S1 is turned on, the first output terminal OUT1 is connected to the supply voltage VDD, the second clock signal CLKB is at the high level, the second switch S2 is turned on, and the second output terminal OUT2 is connected to the supply voltage VDD. At this time, if a laser fault injection attack occurs, the photosensitive element D generates a photo generated current, and the charges at point A are discharged. Since the first NMOS transistor N1 and the second NMOS transistor N2 are turned on, the charges stored on the first capacitor C1 and the second capacitor C2 are respectively discharged through the turned-on first NMOS transistor N1 and the turned-on second NMOS transistor N2. However, the first clock signal CLKA is at the high level, and the first output terminal OUT1 is connected to the supply voltage VDD, so the first capacitor C1 is charged by the power supply when the first capacitor C1 is discharged. When a current by which the power supply charges the first capacitor C1 is smaller than a current by which the first capacitor C1 is discharged, the voltage of the first output terminal OUT1 will eventually be changed from the high level to the low level. Similarly, when a current by which the power supply charges the second capacitor C2 is smaller than a current by which the second capacitor C2 is discharged, the voltage of the second output terminal OUT2 will eventually be changed from the high level to the low level. After the laser fault injection attack ends, since the first clock signal CLKA and the second clock signal CLKB are both at the high level, the first output terminal OUT1 and the second output terminal OUT2 are connected to the supply voltage VDD, and the power supply charges the first capacitor C1 and the second capacitor C2, so the voltages of the first output terminal OUT1 and the second output terminal OUT2 are pulled up to the supply voltage VDD again, and become the high level.

<FIG> shows a working timing diagram of the detection unit with an example in which the laser fault injection attack occurs when the first clock signal CLKA and the second clock signal CLKB are both at the low level.

When the detection circuit is in the detection state and the laser fault injection attack does not occur, the first clock signal CLKA controls the first switch S1 to be periodically turned on by periodically inputting the high-level signal to the first switch S1, the power supply periodically charges the first capacitor C1 to ensure that the voltage of the first output terminal OUT1 is always maintained at the supply voltage VDD, that is, maintained at the high level. Similarly, the second clock signal CLKB controls the second switch S2 to be periodically turned on by periodically inputting the high-level signal to the second switch S2, the power supply periodically charges the second capacitor C2 to ensure that the voltage of the second output terminal OUT2 is always maintained at the supply voltage VDD, that is, maintained at the high level. When the voltage of the first output terminal OUT1 is maintained at the high level, the second NMOS transistor N2 is turned on. When the voltage of the second output terminal OUT2 is maintained at the high level, the first NMOS transistor N1 is turned on. Therefore, the voltage of point A is maintained at the high level.

Laser fault injection attack may occur in the low-level duration of the clock signal. At this time, the first clock signal CLKA is at the low level, the first switch S1 is turned off, the first output terminal OUT1 is floated and the voltage of the first output terminal OUT1 is the supply voltage VDD, the second clock signal CLKB is at the low level, the second switch S2 is turned off, the second output terminal OUT2 is floated, and the voltage of the second output terminal OUT2 is the supply voltage VDD. At this time, if a laser fault injection attack occurs, the photosensitive element D generates a photo generated current, and the charge at point A is discharged. Since the first NMOS transistor N1 and the second NMOS transistor N2 are turned on, the charges stored on the first capacitor C1 and the second capacitor C2 are respectively discharged through the turned-on first NMOS transistor N1 and the turned-on second NMOS transistor N2. The voltage of point A, the voltage of the first output terminal OUT1, the voltage of the second output terminal OUT2 are changed from the high level to the low level. After the laser fault injection attack ends, since the first clock signal CLKA and the second clock signal CLKB are both at the low level, the first output terminal OUT1 and the second output terminal OUT2 are both floated, and the voltages of the first output terminal OUT1 and the second output terminal OUT2 are still at the low level. When the first clock signal CLKA and the second clock signal CLKB change to the high level, the first switch S1 and the second switch S2 are turned on, the first output terminal OUT1 and the second output terminal OUT2 are connected to the supply voltage VDD, the power supply charges the first capacitor C1 and the second capacitor C2, and the voltages of the first output terminal OUT1 and the second output terminal OUT2 are pulled up to the supply voltage VDD again, and become the high level.

Based on <FIG> and <FIG> and the corresponding description content, the detection circuit for the laser fault injection attack in the embodiments of the present disclosure can detect the laser fault injection attack on the chip no matter whether the first clock signal CLKA and the second clock signal CLKB are at the high level or at the low level, which ensures the robustness and security of the chip.

Different from the above embodiment that the first clock signal CLKA and the second clock signal CLKB have a same phase, an embodiment of the present disclosure also provides another detection circuit for a laser fault injection attack. Based on the circuit structure shown in <FIG>, the first clock signal CLKA and the second clock signal CLKB have opposite phases, that is, when the first clock signal CLKA is at a low level, the second clock signal CLKB is at a high level, and when the first clock signal CLKA is at a high level, the second clock signal CLKB is at a low level. As long as the first clock signal CLKA and the second clock signal CLKB have a same frequency and opposite phases, the signal amplitudes of the two clock signals are not limited. At this time, the timing diagram of the detection circuit for the laser fault injection attack in this embodiment is shown in <FIG> and <FIG>.

<FIG> shows the working timing diagram of the detection unit with an example in which the laser fault injection attack occurs when the first clock signal CLKA is at the high level and the second clock signal CLKB is at the low level.

Laser fault injection attack may occur when the first clock signal CLKA is at the high level and the second clock signal CLKB is at the low level. At this time, the first clock signal CLKA is at the high level, the first switch S1 is turned on, the first output terminal OUT1 is connected to the supply voltage VDD, the second clock signal CLKB is at the low level, the second switch S2 is turned off, the second output terminal OUT2 is floated, and the voltage of the second output terminal OUT2 is the supply voltage VDD. At this time, if a laser fault injection attack occurs, the photosensitive element D generates a photo generated current, and the charge at point A is discharged. Since the first NMOS transistor N1 and the second NMOS transistor N2 are turned on, the charge on the first capacitor C1 is discharged through the turned-on first NMOS transistor N1, and the charge on the second capacitor C2 is discharged through the turned-on second NMOS transistor N2. However, the first clock signal CLKA is at the high level, the first output terminal OUT1 is connected to the supply voltage VDD, so when the first capacitor C1 is being discharged, it is also being charged by the power supply. When a current by which the power supply charges the first capacitor C1 is greater than a current by which the first capacitor C1 is discharged, the voltage of the first output terminal OUT1 may drop slightly (not shown in <FIG>). However, compared with the discharge speed of the second capacitor C2, the discharge speed of the first capacitor C1 is slow. Since the second clock signal CLKB is at the low level and the second output terminal OUT2 is floated, the voltage of the second output terminal OUT2 is quickly pulled down to the ground and changed to the low level. After the voltage of the second output terminal OUT2 is quickly pulled to the ground, the first NMOS transistor N1 is turned off, the discharging of the charge of the first capacitor C1 stops, and the supply voltage VDD continues to charge the first capacitor C1, and thus the voltage of the first output terminal OUT1 is pulled up to the supply voltage VDD. Therefore, when the first clock signal CLKA is at the high level, the second clock signal CLKB is at the low level, and the laser fault injection attack occurs, the voltage of the first output terminal OUT1 is at the high level and the voltage of the second output terminal OUT2 is at the low level. After the laser fault injection attack ends, the voltage of the second output terminal OUT2 is maintained at the low level. When the second clock signal CLKB flips to the high level, the second switch S2 is turned on, the supply voltage VDD is connected to the second capacitor C2, the power supply charges the second capacitor C2, and the voltage of the second output terminal OUT2 is pulled up to the supply voltage VDD again and changed to the high level.

<FIG> shows the working timing diagram of the detection unit with an example in which the laser fault injection attack occurs when the first clock signal CLKA is at the low level and the second clock signal CLKB is at the high level.

The working principle is similar to that in <FIG>. The laser fault injection attack occurs when the first clock signal CLKA is at the low level and the second clock signal CLKB is at the high level. The voltage of the first output terminal OUT1 is pulled down to the ground and changed to the low level. When the current by which the power supply charges the second capacitor C2 is greater than the current by which the second capacitor C2 is discharged, the voltage of the second output terminal OUT2 may drop slightly, but it is always close to or equal to the supply voltage VDD, that is, the high level. After the laser fault injection attack ends, the voltage of the first output terminal OUT1 is maintained at the low level. When the first clock signal CLKA flips to the high level, the first switch S1 is turned on, the supply voltage VDD is connected to the first capacitor C1, the power supply charges the first capacitor C1, and the voltage of the first output terminal OUT1 is pulled up to the supply voltage VDD again and changed to the high level.

Based on <FIG> and <FIG>, no matter whether the first clock signal is at the high level and the second clock signal is at the low level, or the first clock signal is at the low level and the second clock signal is at the high level, the detection circuit for the laser fault injection attack in the embodiment of the present disclosure can effectively detect laser fault injection attacks on the chip, ensuring the robustness and security of the chip.

In an embodiment, for the detection circuit for the laser fault injection attack shown in <FIG>, the first switch S1 can be implemented by an inverter and a positive channel metal oxide semiconductor (PMOS) transistor. As shown in a part <NUM> in <FIG>, the first switch S1 includes a first inverter NO1 and a first PMOS transistor P1. An input terminal of the first inverter NO1 serves as the control terminal of the first switch S1, and is configured to be connected to the first input terminal IN11 of the detection unit <NUM> to receive the first clock signal CLKA. An output terminal of the first inverter NO1 is connected to a gate of the first PMOS transistor P1. A drain of the first PMOS transistor P1 serves as the first terminal of the first switch S1 and is configured to be connected to the supply voltage VDD. A source of the first PMOS transistor P1 serves as the second terminal of the first switch S1 and configured to be connected to the drain of the first NMOS transistor N1 and the gate of the second NMOS transistor N2, and is further configured to be connected to the ground GND though the first capacitor C1. The source of the first PMOS transistor P1 also serves as the first output terminal OUT1 of the detection unit <NUM>.

In an embodiment, for the detection circuit for the laser fault injection attack shown in <FIG>, the second switch S2 can be implemented by an inverter and a PMOS transistor. As shown in a part <NUM> in <FIG>, the second switch S2 includes a second inverter NO2 and a second PMOS transistor P2. An input terminal of the second inverter NO2 serves as the control terminal of the second switch S2, and is configured to be connected to the second input terminal IN12 of the detection unit <NUM> to receive the second clock signal CLKB. An output terminal of the second inverter NO2 is connected to a gate of the second PMOS transistor P2. A drain of the second PMOS transistor P2 serves as the first terminal of the second switch S2 and is configured to be connected to the supply voltage VDD. A source of the second PMOS transistor P2 serves as the second terminal of the second switch S2 and configured to be connected to the drain of the second NMOS transistor N2 and the gate of the first NMOS transistor N1, and is further configured to be connected to the ground GND though the second capacitor C2. The source of the second PMOS transistor P2 also serves as the second output terminal OUT2 of the detection unit <NUM>.

For the working principle of the detection circuit for the laser fault injection attack shown in <FIG>, reference can be made to the related description of <FIG>, and will not be repeated herein.

Different from the control logic of the turning-on and turning-off states of the first switch S1 by the first clock signal CLKA and the control logic of the turning-on and turning-off states of the second switch S2 by the second clock signal CLKB in the detection circuit for the laser fault injection attack shown in <FIG>, in another embodiment, the control logic of the turning-on and turning-off states of the first switch S1 by the first clock signal CLKA is as follows. When the first clock signal CLKA is at the high level, the first switch S1 is turned off; and when the first clock signal CLKA is at the low level, the first switch S1 is turned on. The control logic of the turning-on and turning-off states of the second switch S2 by the second clock signal CLKB is as follows. When the second clock signal CLKB is at the high level, the second switch S2 is turned off; and when the second clock signal CLKB is at the low level, the second switch S2 is turned on.

In an embodiment, the first switch S1 of the detection circuit for the laser fault injection attack in the present embodiment can be implemented by a PMOS transistor. As shown in a part <NUM> in <FIG>, the first switch S1 includes a third PMOS transistor P3. A gate of the third PMOS transistor P3 is the control terminal of the first switch S1, and is configured to be connected to the first input terminal IN11 of the detection unit <NUM> to receive the first clock signal CLKA. A drain of the third PMOS transistor P3 serves as the first terminal of the first switch S1, and is configured to be connected to the supply voltage VDD. A source of the third PMOS transistor P3 serves as the second terminal of the first switch S1, and is configured to be connected to the drain of the first NMOS transistor N1 and the gate of the second NMOS transistor N2. The source of the third PMOS transistor P3 is further configured to be connected to the ground GND through the first capacitor C1, and also serves as the first output terminal OUT1 of the detection unit <NUM>.

In an embodiment, for the detection circuit for the laser fault injection attack shown in <FIG>, the second switch S2 can be implemented by a PMOS transistor. As shown in a part <NUM> in <FIG>, the second switch S2 includes a fourth PMOS transistor P4. A gate of the fourth PMOS transistor P4 serves as the control terminal of the second switch S2, and is configured to be connected to the second input terminal IN12 of the detection unit <NUM> to receive the second clock signal CLKB. A drain of the fourth PMOS transistor P4 serves as the first terminal of the second switch S2, and is configured to be connected to the supply voltage VDD. A source of the fourth PMOS transistor P4 serves as the second terminal of the second switch S2, and is configured to be connected to the drain of the second NMOS transistor N2 and the gate of the first NMOS transistor N1. The source of the fourth PMOS transistor P4 is further configured to be connected to the ground GND through the second capacitor C2, and also serves as the second output terminal OUT2 of the detection unit <NUM>.

For the working principle of the detection circuit for the laser fault injection attack in the present embodiment, reference can be made to the working principle of the laser fault injection attack detection circuit shown in <FIG>, and will not be repeated herein.

Different from the control logic of the turning-on and turning-off states of the first switch S1 by the first clock signal CLKA and the control logic of the turning-on and turning-off states of the second switch S2 by the second clock signal CLKB in the detection circuit for the laser fault injection attack shown in <FIG>, in another embodiment, the control logic of the turning-on and turning-off states of the first switch S1 by the first clock signal CLKA is as follows. When the first clock signal CLKA is at the high level, the first switch S1 is turned off; and when the first clock signal CLKA is at the low level, the first switch S1 is turned on. The control logic of the turning-on and turning-off states of the second switch S2 by the second clock signal CLKB is as follows. When the second clock signal CLKB is at the low level, the second switch S2 is turned off; and when the second clock signal CLKB is at the high level, the second switch S2 is turned on.

In an embodiment, the first switch S1 can be implemented by a PMOS transistor, for example, as shown in the part <NUM> in <FIG>; and the second switch S2 can be implemented by an inverter and a PMOS transistor, for example, as shown in the part <NUM> in <FIG>.

Different from the control logic of the turning-on and turning-off states of the first switch S1 by the first clock signal CLKA and the control logic of the turning-on and turning-off states of the second switch S2 by the second clock signal CLKB in the laser fault injection attack detection circuit shown in <FIG>, in another embodiment, the control logic of the turning-on and turning-off states of the first switch S1 by the first clock signal CLKA is as follows. When the first clock signal CLKA is at the low level, the first switch S1 is turned off; and when the first clock signal CLKA is at the high level, the first switch S1 is turned on. The control logic of the turning-on and turning-off states of the second switch S2 by the second clock signal CLKB is as follows. When the second clock signal CLKB is at the high level, the second switch S2 is turned off; and when the second clock signal CLKB is at the low level, the second switch S2 is turned on.

In an embodiment, the first switch S1 can be implemented by an inverter and a PMOS transistor, for example, as shown in the part <NUM> in <FIG>; and the second switch S2 can be implemented by a PMOS transistor, for example, as shown in the part <NUM> in <FIG>.

For the working principle of the detection circuit for the laser fault injection attack in the present embodiment, reference can be made to the working principle of the detection circuit for the laser fault injection attack shown in <FIG>, and will not be repeated herein.

The detection circuit for the laser fault injection attack in the present disclosure can be applied to any chip, such as a security chip. <FIG> is a structural diagram of a security chip according to an embodiment of the present disclosure. As shown in <FIG>, a security chip <NUM> can include a processor <NUM> and a detection circuit <NUM> for the laser fault injection attack in embodiments of the present disclosure.

The processor <NUM> can output the first clock signal CLKA and the second clock signal CLKB to the detection circuit <NUM> for the laser fault injection attack. When the detection circuit <NUM> for the laser fault injection attack detects that the security chip <NUM> is under laser fault injection attack, the detection circuit <NUM> for the laser fault injection attack outputs a processing signal to the processor <NUM>. The processor <NUM> performs corresponding processing based on the processing signal, such as interrupt or chip reset. The subsequent processing performed by the processor <NUM> based on the processing signal is not limited in the embodiments of the present disclosure.

<FIG> is a structural diagram of a security chip according to another embodiment of the present disclosure. As shown in <FIG>, a security chip <NUM> can include a detection circuit <NUM> for a laser fault injection attack and a storage circuit <NUM>. The first voltage signal and the second voltage signal outputted by the detection circuit <NUM> for the laser fault injection attack are configured to control removal of contents of the storage circuit <NUM>.

In an embodiment, the first clock signal CLKA and the second clock signal CLKB can be sent to the detection circuit for the laser fault injection attack by a processor of the security chip.

In the embodiments of this disclosure, "at least one" means one or more, and "a plurality of" means two or more. The term "and/or" describes an association relationship for describing associated objects and represents existence of three relationships. For example, A and/or B may represent the following three cases: A alone, both A and B, and B alone, where A and B can be in a singular or plural form. The character "/" usually indicates an "or" relationship between the associated objects. "At least one of the following" or a similar expression thereof means any combination of these items, including a singular item or any combination of a plurality of items. For example, at least one of a, b, or c may indicate: a, b, c, a and b, a and c, b and c, or a, b, and c, where a, b, and c may be in a singular or plural form.

A person of ordinary skill in the art can be aware that the units and algorithm operations described in the embodiments disclosed in this specification can be implemented by electronic hardware or a combination of computer software and electronic hardware. Whether the functions are performed by hardware or software depends on particular disclosures and design constraint conditions of the technical solutions. A person skilled in the art may use different methods to implement the described functions for each particular disclosure, but it should not be considered that the implementation goes beyond the scope of this disclosure.

It can be clearly understood by a person skilled in the art that, for the purpose of convenient and brief description, for a detailed working process of the foregoing system, apparatuses, and units, refer to a corresponding process in the foregoing method embodiments.

When the functions are implemented in a form of a software functional unit and sold or used as an independent product, the functions can be stored in a computer-readable storage medium. Based on such understanding, the technical solutions of this disclosure essentially, or the part contributing to the related art, or some of the technical solutions can be implemented in a form of a software product. The software product is stored in a storage medium and includes several instructions for instructing a computer device (which can be a personal computer, a server, or a network device, or the like) to perform all or some of the operations of the methods described in the embodiments of this disclosure. The foregoing storage medium includes any medium that can store program code, such as a USB flash drive, a removable hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, an optical disc, or the like.

Claim 1:
A detection circuit for a laser fault injection attack on a chip, being disposed in the chip and comprising:
a first capacitor (C1);
a second capacitor (C2);
a first switch (S1), wherein the first switch (S1) comprises a control terminal configured to receive a first clock signal (CLKA) for controlling a turning-on state and a turning-off state of the first switch (S1), a first terminal connected to a supply voltage (VDD), and a second terminal grounded through the first capacitor (C1);
a second switch (S2), wherein the second switch (S2) comprises a control terminal configured to receive a second clock signal (CLKB) for controlling a turning-on state and a turning-off state of the second switch (S2), a first terminal connected to the supply voltage (VDD), and a second terminal grounded through the second capacitor (C2);
a photosensitive element (D);
a first NMOS transistor (N1), wherein the first NMOS transistor (N1) comprises a drain connected to the second terminal of the first switch (S1) and configured to output a first voltage signal, a source connected to the photosensitive element (D), and a gate connected to the second terminal of the second switch (S2); and
a second NMOS transistor (N2), wherein the second NMOS transistor (N2) comprises a drain connected to the second terminal of the second switch (S2) and configured to output a second voltage signal, a source connected to the photosensitive element (D), and a gate connected to the second terminal of the first switch (S1); and the first voltage signal and the second voltage signal are configured to indicate the chip is attacked by laser fault injection.