Design for Testability and Hardware Security

可测试性和硬件安全性设计

• 批准号: RGPIN-2017-04926
• 负责人: Rashidzadeh, Rashid
• 金额: $ 1.75万
• 依托单位: University of Windsor
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2017
• 资助国家: 加拿大
• 起止时间: 2017-01-01 至 2018-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=637187
• 关键词: Design; Testability; Hardware; Security

The new generation of integrated circuits include high performance analog and digital blocks, processing units, memories, and sensors. While such new microchips provide opportunities to enhance the performance of portable devices significantly, they also pose new challenges. Developing manufacturing tests for advanced integrated circuits while ensuring their hardware security is a formidable task. A great deal of progress has been made in developing various test methodologies for microchips. Efficient Design-for-Testability (DFT) techniques such as scan and Built-in Self-Test (BIST) are widely used to carry out tests on digital circuits. However, the DFT methodologies have been developed without adequate attention to security implications. For instance scan-chain insertion, one of the most effective DFT techniques, can be utilized to access the critical information inside a chip. The requirements for testability and hardware security are in sharp contrast with one another. To test a chip, access to the internal circuits are needed to apply test vectors to desired sub-circuits and observe their responses. While such full access is considered ideal for manufacturing tests, it is clear that such unrestricted access to the internal circuits of a device can undermine its security. For decades, hardware was assumed to be the source of trust-and-security but this assumption is not true anymore due to outsourcing. The costs of a fabrication line are so high that only a few companies can afford to have an in-house fabrication line. The outsourcing of in-house fabrication to overseas foundries provides opportunities for malicious activities and paves the way for potential security threats known as hardware Trojans. The current solutions for testability have to be modified to detect undesired hardware modifications and prevent security breaches using the test infrastructure.

新一代集成电路包括高性能模拟和数字模块、处理单元、存储器和传感器。虽然这种新的微芯片提供了机会，以提高便携式设备的性能显着，他们也提出了新的挑战。开发先进集成电路的制造测试，同时确保其硬件安全性是一项艰巨的任务。微芯片的各种测试方法的发展已经取得了很大的进展。有效的可测性设计（DFT）技术，如扫描和内建自测试（BIST）被广泛用于对数字电路进行测试。然而，DFT方法的开发没有充分注意安全问题。例如，扫描链插入，最有效的DFT技术之一，可以用来访问芯片内的关键信息。对可测试性和硬件安全性的要求形成了鲜明的对比。为了测试芯片，需要访问内部电路以将测试向量应用于所需的子电路并观察它们的响应。虽然这种完全访问被认为是制造测试的理想选择，但很明显，对设备内部电路的这种不受限制的访问可能会破坏其安全性。几十年来，硬件被认为是信任和安全的来源，但由于外包，这种假设不再正确。生产线的成本如此之高，以至于只有少数公司能够负担得起内部生产线。将内部制造外包给海外代工厂为恶意活动提供了机会，并为被称为硬件木马的潜在安全威胁铺平了道路。必须修改当前的可测试性解决方案，以检测不希望的硬件修改，并使用测试基础设施防止安全漏洞。