Method, system and apparatus for security assurance, protection, monitoring and analysis of integrated circuits and electronic systems in relation to hardware trojans

1. A method of operating a hardware trojan instrument facility configured to monitor a logic circuit, said trojan instrument facility comprising:

a plurality of Internal Joint Test Action Group (IJTAG) scannable access points arranged in series;

a plurality of instrument interfaces each comprising an IJTAG scannable register comprising an alert field, said alert field adapted to selectively open an active one of said plurality of scannable access points; and

a trojan detection instrument integrated into a golden model comprising the logic circuit, said trojan detection instrument embedded into the logic circuit, said trojan detection instrument operable to detect hardware trojan activity by testing that comprises comparing logic circuit output against a reference limited threshold during ongoing functional operation of the logic circuit, said logic circuit output comprising actual time captured for the logic circuit performing operations, said reference limited threshold defined in relation to detecting hardware trojan activity during ongoing functional operation of the logic circuit, said reference limited threshold comprising at least one of a worst-case time and a best-case time for the logic circuit to perform operations, said trojan detection instrument operable to determine in relation to the at least one of a worst-case time and a best-case time a corresponding at least one of a high out-of-time event for actual time exceeding the worst-case time and a low out-of-time event for actual time less than the best-case time, said trojan detection instrument operable to maintain a count of high out-of-time events and a count of low out-of-time events, said reference limited threshold comprising at least one of a high threshold count and low threshold count to differentiate delinquent operation of the logic circuit, said trojan detection instrument operable to output alert data where the maintained count is outside the at least one of a high threshold count and low threshold count;

said method comprising:

outputting the output alert data from said trojan detection instrument;

capturing said output alert data in said alert field;

opening said active one of said plurality of scannable access points; and

inserting, in relation to said opening, said scannable register into an active scan chain with an associated one of said plurality of instrument interfaces.

2. The method according to claim 1 , said method comprising:

said outputting, the output alert data, being in relation to comparing the logic circuit output against the reference limited threshold.

3. The method according to claim 1 , said method comprising:

providing said output alert data to alert processing logic outside the active scan chain.

4. The method according to claim 1 , said method comprising:

providing said output alert data to a countermeasure to activate the countermeasure.

5. A facility configured to perform the method of claim 1 .

6. A hardware trojan instrument facility configured to monitor a logic circuit, said trojan instrument facility comprising:

a trojan detection instrument integrated into a golden model comprising the logic circuit, said trojan detection instrument embedded into the logic circuit, said trojan detection instrument operable to detect hardware trojan activity by testing that comprises comparing logic circuit output against a reference limited threshold during ongoing functional operation of the logic circuit, said logic circuit output comprising actual time captured for the logic circuit performing operations, said reference limited threshold defined in relation to detecting hardware trojan activity during ongoing functional operation of the logic circuit,

said reference limited threshold comprising at least one of a worst-case time and a best-case time for the logic circuit to perform operations, said trojan detection instrument operable to determine in relation to the at least one of a worst-case time and a best-case time a corresponding at least one of a high out-of-time event for actual time exceeding the worst-case time and a low out-of-time event for actual time less than the best-case time, said trojan detection instrument operable to maintain a count of high out-of-time events and a count of low out-of-time events, said reference limited threshold comprising at least one of a high threshold count and low threshold count to differentiate delinquent operation of the logic circuit, said trojan detection instrument operable to output alert data where the maintained count is outside the at least one of a high threshold count and low threshold count;

a plurality of Internal Joint Test Action Group (IJTAG) scannable access points arranged in series;

a plurality of instrument interfaces each comprising an IJTAG scannable register comprising an alert field;

said alert field configured to capture said output alert data, said alert field adapted to selectively open an active one of said plurality of scannable access points;

said trojan instrument facility configured to insert, in relation to said opening, said scannable register into an active IJTAG scan chain with an associated one of said plurality of instrument interfaces.

7. The trojan instrument facility comprising according to claim 6 , said trojan instrument facility comprising:

said trojan detection instrument outputting the output alert data in relation to comparing the logic circuit output against the reference limited threshold.

8. The trojan instrument facility comprising according to claim 6 , said trojan instrument facility comprising:

said trojan instrument facility configured to provide the output alert data to alert processing logic outside the active scan chain.

9. The trojan instrument facility comprising according to claim 6 , said trojan instrument facility comprising:

said trojan instrument facility configured to provide the output alert data to a countermeasure to activate the countermeasure.