IP Library Granted Patent US 10,311,253
Granted Patent B2
US 10,311,253 · App. 14/913,569 · Granted Jun 4, 2019

Method for protecting an integrated circuit against unauthorized access

Inventors: Friedrich Eppensteiner (Spitz, AT); Majid Ghameshlu (Vienna, AT); Herbert Taucher (Moedling, AT)
Assignee: Siemens AG Österreich
G06F21/629G06F21/55G06F21/71
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,311,253
App. No.
14/913,569
Granted
Jun 4, 2019
Kind
B2
Abstract

A method for protecting an integrated circuit against unauthorized access to key registers, wherein functions and/or applications of the integrated circuit are unlocked and/or activated via data stored in key registers, such as during the start-up of the integrated circuit and/or during ongoing operation, where if such a key register is accessed, the data word used to perform the access is compared with specified key data, and if access via a data word deviating from the specified key data is detected, the access is marked as unauthorized, the access marked as unauthorized is then recorded and evaluated, and after the analysis, appropriate protective measures are triggered to prevent further unauthorized access such that a key register method for protecting sensitive data is expanded in a simple manner and hacker attacks are quickly detected and thwarted.

Claims (16)

1. A method for protecting against unauthorized accessing of key registers in an integrated, electronic circuit, wherein functions of the integrated, electronic circuit are at least one of enabled and activated by storing predefined key data in said key registers, the method comprising:

comparing a used data word with key data when specific key registers are accessed;

marking the specific key registers accesses using a data word at variance with the stored predefined key data as unauthorized;

recording and analyzing the specific key registers accesses marked as unauthorized, said analyzing comprising detecting patterns of accesses comprising a data word which is incremented and marked as unauthorized; and

initiating predefined protective measures after analysis of the unauthorized accesses based on said detected patterns of accesses comprising the data word which is incremented and marked as unauthorized.

2. The method as claimed in claim 1 , wherein said unauthorized accesses to the specific key registers comprises evaluating at least one of (i) a number of unauthorized accesses and (ii) a number of unauthorized accesses within a predefined period of time.

3. The method as claimed in claim 2 , wherein, in a case of a startup process, security functions of the integrated, electronic circuit are immediately activated as a protective measure based on evaluation of the unauthorized accesses.

4. The method as claimed in claim 2 , wherein, in the case of the startup process, the integrated, electronic circuit is reset to a defined initial state as a protective measure based on the evaluation of the unauthorized accesses.

5. The method as claimed in claim 4 , further comprising:

performing a check to determine whether a predefined number of unauthorized accesses has been exceeded for an integrated circuit reset.

6. The method as claimed in claim 2 , wherein a message comprising an interrupt request or a specific reset request is transmitted to currently operating components of the integrated, electronic circuit as a protective measure during ongoing operation based on results of the analysis.

7. The method as claimed in claim 2 , wherein specified functions of the integrated, electronic circuit are deactivated as a protective measure during ongoing operation based on results of the analysis.

8. The method as claimed in claim 1 , wherein, in a case of a startup process, security functions of the integrated, electronic circuit are immediately activated as a protective measure based on evaluation of the unauthorized accesses.

9. The method as claimed in claim 8 , wherein the protective measures for the startup process are deactivated after a successful startup.

10. The method as claimed in claim 1 , wherein a message comprising an interrupt request or a specific reset request is transmitted to currently operating components of the integrated, electronic circuit as a protective measure during ongoing operation based on results of the analysis.

11. The method as claimed in claim 1 , wherein specified functions of the integrated, electronic circuit are deactivated as a protective measure during ongoing operation based on results of the analysis.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 22, 2016
From: EPPENSTEINER, FRIEDRICH; GHAMESHLU, MAJID; TAUCHER, HERBERT
To: SIEMENS AG OESTERREICH
Reel/Frame 037789/0058 →
Priority Claims (1)
DE 10 2013 216 692 · Aug 22, 2013 · national
Continuity (1)
Related Publication 20160203325A1 · Jul 14, 2016
Cited By (1)
US 12,423,246