Passing hidden information using attack detectors
View Patent ↗An electronic device ( 22 ) includes a communication interface ( 36 ) and a processor ( 30 ), which is configured to store and process secret information and to communicate with a host device ( 24 ) via the communication interface. An environmental detector ( 38 ) is configured to detect a change, relative to a baseline, in an operating environment of the electronic device, and in response to the detected change, to initiate a secure communication between the processor and the host device when the detected change is in a predefined first range, and to invoke a countermeasure against tampering with the device when the detected change is in a predefined second range, disjoint from the first range.
1. An electronic device, comprising:
a communication interface;
a processor, which is configured to store and process secret information and to communicate with a host device via the communication interface; and
an environmental detector, which is configured to detect a change, relative to a baseline, in an operating environment of the electronic device, and in response to the detected change, to initiate a secure communication between the processor and the host device when the detected change is in a predefined first range, and to invoke a countermeasure against tampering with the device when the detected change is in a predefined second range, disjoint from the first range, the environmental detector being operative to issue to the processor, when the detected change is in the predefined first range, an instruction to conduct the secure communication with the host device via the communication interface, the host device being operative to actuate an environmental signal generator to generate changes that are within the predefined first range, relative to the baseline, in the operating environment of the electronic device,
wherein the change detected by the environmental detector comprises at least one of the following:
a glitch in a voltage that is input to the electronic device;
a variation in a frequency of a clock that is provided to the electronic device;
a change in radiation; and
a change in temperature.
2. The device according to claim 1 , wherein the change detected by the environmental detector comprises a glitch in a voltage that is input to the electronic device.
3. The device according to claim 1 , wherein the change detected by the environmental detector comprises a variation in a frequency of a clock that is provided to the electronic device.
4. The device according to claim 1 , wherein the environmental detector comprises a radiation sensor.
5. The device according to claim 1 , wherein the environmental detector comprises a temperature sensor.
6. The device according to claim 1 , wherein the detected change comprises a sequence of changes within the first range, which together encode a data word to be used by the processor in the secure communication.
7. The device according to claim 1 , wherein the communication interface, the processor, and the environmental detector are encapsulated in a smart card.
8. Electronic apparatus, comprising:
(a) a client device, which comprises:
a client communication interface;
a client processor, which is configured to store and process secret information; and
an environmental detector, which is configured to detect a change in an operating environment of the client device; and
(b) a host device, which comprises:
a host communication interface, which is configured to communicate with the client communication interface;
a host processor; and
an environmental signal generator, which is configured to generate changes within a predefined first range, relative to a baseline, in the operating environment of the client device,
wherein the environmental detector is configured, in response to the detected change, to initiate a secure communication between the client processor and the host processor when the detected change, relative to the baseline, is in the first range, and to invoke a countermeasure against tampering with the client device when the detected change, relative to the baseline, is in a predefined second range, disjoint from the first range, and
wherein the change detected by the environmental detector comprises at least one of the following: a glitch in a voltage that is input to the client device; a variation in a frequency of a clock that is provided to the client device; a change in radiation; and a change in temperature.
9. The apparatus according to claim 8 , wherein the changes in the operating environment of the client device comprise one or more of the following:
a glitch in a voltage that is input to the client device by the host device;
a variation in a frequency of a clock that is supplied to the client device by the host device;
comprise a variation in a level of radiation directed to the client device by the host device;
a variation in a temperature of the client device that is applied by the host device.
10. The apparatus according to claim 8 , wherein the host processor is configured to actuate the environmental signal generator so as to cause the environmental detector to issue an instruction to the client processor to conduct the secure communication with the host processor via the client communication interface.
11. The apparatus according to claim 8 , wherein the host processor is configured to encode a data word, to be used by the client processor in the secure communication, in a sequence of the changes that are within the first range.
12. The apparatus according to claim 8 , wherein the client device comprises a smart card, and wherein the host device comprises a smart card reader.
13. A method for communication, comprising:
coupling a processor in a client device, which stores and processes secret information, to communicate with a host device via a communication interface;
detecting a change, relative to a baseline, in an operating environment of the client device; and
in response to the detected change:
initiating a secure communication between the processor and the host device when the detected change is in a predefined first range; and
invoking a countermeasure against tampering with the client device when the detected change is in a predefined second range, disjoint from the first range; and
issuing to the processor, when the detected change is in the predefined first range, an instruction to conduct the secure communication with the host device via the communication interface, the host device being operative to actuate an environmental signal generator to generate changes that are within the predefined first range, relative to the baseline, in the operating environment of the electronic device,
wherein the change detected comprises at least one of the following:
a glitch in a voltage that is input to the electronic device;
a variation in a frequency of a clock that is provided to the electronic device;
a change in radiation; and
a change in temperature.
14. The method according to claim 13 , wherein detecting the change in the operating environment comprises detecting one or more of the following:
a glitch in a voltage that is input to the client device by the host device
a variation in a frequency of a clock that is supplied to the client device by the host device;
a variation in a level of radiation directed to the client device by the host device;
a variation in a temperature of the client device that is applied by the host device;
detecting a sequence of changes that are within the first range and encode a data word, to be used by the client device in the secure communication.
15. The method according to claim 13 , wherein detecting the change comprises detecting a sequence of changes that are within the first range and encode a data word, to be used by the client device in the secure communication.
16. The method according to claim 13 , wherein the client device comprises a smart card, and wherein the host device comprises a smart card reader.