软件定义主动屏蔽层生成及防护技术研究

Research on Software-Defined Active Shield Protection Technology

由于安全芯片信息泄露事件的频发,提高安全芯片的防护能力刻不容缓.本文提出了一种软件定义主动屏蔽层生成及防护系统构建的方法,无需具有安全背景知识即可在短时间内生成高熵值的顶层金属布线防护网络,有效遮蔽芯片加密模块等关键组件,同时满足合规的相关要求.本文所提出的方法可由软件定义布线的类型、线宽、线间距等参数,能够适用于不同的工艺节点,且相关技术已经在华虹130 nm的工艺下进行了仿真验证,实现了主动屏蔽层与2种屏蔽层完整性检测电路的结合,验证了屏蔽层对聚焦离子束和微探针攻击的检测效果,实现了对侵入式物理攻击的有效感知与防护.

With the frequent occurrence of security chip information leakage incidents,it is imperative to improve the protection capabilities of security chips.This paper proposes a method of software-defined active shield generation and protection system construction,which can generate a high-entropy top-level metal protection network in a short time without the need for security background knowledge.The active shield can effectively shield key components such as chip encryption modules,and at the same time meet the regulatory requirements.The method proposed in this paper can define wiring type,line width,line space,and other parameters through the software,and can be applied to different process nodes.Relevant technologies have been simulated,and verified under the Hua Hong 130nm process,realizing the combination of the active shield and two kinds of integrity detection circuits,verifying the detection effect of active shield against focused ion beam and microprobe attacks,and realizing effective perception and protection against intrusive physical attacks.