Integration work
This commit is contained in:
parent
84e80a1944
commit
086d45306e
10 changed files with 430 additions and 31 deletions
|
|
@ -4,20 +4,6 @@
|
|||
}
|
||||
\chaptertitle{Inertial Hardware Security Modules}
|
||||
|
||||
\begin{abstract}
|
||||
In this paper, we introduce a novel countermeasure against physical attacks: Inertial Hardware Security Modules
|
||||
(IHSMs). Conventional systems have in common that their security requires the crafting of fine sensor structures
|
||||
that respond to minute manipulations of the monitored security boundary or volume. Our approach is novel in that we
|
||||
reduce the sensitivity requirement of security meshes and other sensors and increase the complexity of any
|
||||
manipulations by rotating the security mesh or sensor at high speed---thereby presenting a moving target to an
|
||||
attacker. Attempts to stop the rotation are easily monitored with commercial MEMS accelerometers and gyroscopes.
|
||||
Our approach leads to an HSM that can easily be built from off-the-shelf parts by any university electronics lab,
|
||||
yet offers a level of security that is comparable to commercial HSMs. We have built a proof-of-concept hardware
|
||||
prototype that demonstrates solutions to the concept's main engineering challenges. As part of this
|
||||
proof-of-concept, we have found that a system using a coarse security mesh made from commercial printed circuit
|
||||
boards and an automotive high-g-force accelerometer already provides a useful level of security.
|
||||
\end{abstract}
|
||||
|
||||
\section{Introduction}
|
||||
|
||||
While information security technology has matured a great deal in the last half-century, physical security did not keep
|
||||
|
|
@ -55,7 +41,7 @@ quickly become inhospitable to human life (see Section~\ref{sec_swivel_chair_att
|
|||
or optical attacks are more limited in the first place and can be shielded, we have effectively forced the attacker to
|
||||
use an ``attack robot''.
|
||||
|
||||
This paper contains the following contributions:
|
||||
This chapter contains the following contributions:
|
||||
\begin{enumerate}
|
||||
\item We present the \emph{Inertial HSM} concept. Inertial HSMs enable cost-effective, small-scale production of
|
||||
highly secure HSMs.
|
||||
|
|
@ -81,7 +67,7 @@ basis, in Section~\ref{sec_ihsm_construction} we will elaborate the principles o
|
|||
analyze its weaknesses in Section~\ref{sec_attacks}. Based on these results we have built a proof-of-concept hardware
|
||||
prototype. In Section~\ref{sec_proto} we will elaborate on the design of this prototype. In Section~\ref{sec_accel_meas}
|
||||
we present our characterization of an automotive MEMS accelerometer IC as a rotation sensor in this proof-of-concept
|
||||
prototype. We conclude this paper with a general evaluation of our design in Section~\ref{sec_conclusion}.
|
||||
prototype. We conclude this chapter with a general evaluation of our design in Section~\ref{sec_conclusion}.
|
||||
|
||||
\section{Related work}
|
||||
\label{sec_related_work}
|
||||
|
|
@ -248,9 +234,9 @@ attacker from following the device's motion since doing so would subject them to
|
|||
Essentially, this limits the approximate maximum size and mass of an attacker under an assumption on tolerable
|
||||
centrifugal force.
|
||||
|
||||
In this paper, we focus on rotating IHSMs for simplicity of construction. For our initial research, we focus on systems
|
||||
with a fixed axis of rotation due to their simple construction but we do wish to note the challenge of hardening the
|
||||
shaft against tampering that any production device would have to tackle.
|
||||
In this chapter, we focus on rotating IHSMs for simplicity of construction. For our initial research, we focus on
|
||||
systems with a fixed axis of rotation due to their simple construction but we do wish to note the challenge of hardening
|
||||
the shaft against tampering that any production device would have to tackle.
|
||||
|
||||
\subsection{Tamper detection mesh construction}
|
||||
|
||||
|
|
@ -974,7 +960,7 @@ the fly, without stopping the rotor.
|
|||
\section{Conclusion}
|
||||
\label{sec_conclusion}
|
||||
|
||||
In this paper, we introduced Inertial Hardware Security Modules (IHSMs), a novel concept for the construction of
|
||||
In this chapter, we introduced Inertial Hardware Security Modules (IHSMs), a novel concept for the construction of
|
||||
advanced hardware security modules from simple components. We analyzed the concept for its security properties and
|
||||
highlighted its ability to significantly strengthen otherwise weak tamper detection barriers. We validated our design
|
||||
by creating a proof-of-concept hardware prototype. In this prototype, we have demonstrated practical solutions to the
|
||||
|
|
|
|||
|
|
@ -518,8 +518,3 @@ approaches can even be integrated into existing HSM designs to provide better se
|
|||
|
||||
% FIXME FIXME FIXME chapter overview
|
||||
|
||||
\printbibliography[heading=bibintoc]
|
||||
|
||||
\end{document}
|
||||
|
||||
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
\chaptertitle{Physical Security in Quantum Key Distribution}
|
||||
\chaptertitle{Case Study: Physical Security in Quantum Key Distribution}
|
||||
|
||||
Quantum Computing promises efficient solutions to a number of widely used cryptographic computational problems. As a
|
||||
countermeasure, new \emph{post-quantum} cryptosystems have been developed that are not susceptible to known quantum or
|
||||
|
|
@ -33,7 +33,7 @@ requirements of a QKD system.
|
|||
|
||||
\begin{figure}
|
||||
\begin{center}
|
||||
\includegraphics[width=0.7\textwidth]{fiber_passthrough_mech_model__8290_small_annotations_censored.pdf}
|
||||
\includegraphics[width=0.7\textwidth]{fiber_passthrough_mech_model__8290_small_annotations.pdf}
|
||||
\end{center}
|
||||
\caption{Photo of our mechanical prototype.
|
||||
1 - Bracket connecting payload and shaft with hidden spiral conduit for optical fibers.
|
||||
|
|
@ -397,7 +397,7 @@ feedthrough that improves on the simple helical feedthrough we introduced above.
|
|||
\begin{figure}
|
||||
\centering
|
||||
\includegraphics[width=0.45\textwidth]{schema_wire.pdf}
|
||||
\includegraphics[width=0.6\textwidth]{figures/pic_bracket_routing_small.png}
|
||||
\includegraphics[width=0.6\textwidth]{pic_bracket_routing_small.png}
|
||||
\caption{Offset labyrinth mesh schema with fiber layout}
|
||||
\label{qkd_fig_offset_lab_fiber}
|
||||
\end{figure}
|
||||
|
|
@ -426,9 +426,9 @@ resulted in a difference below the measurement floor of approximately \qty{0.25}
|
|||
|
||||
\begin{figure}
|
||||
\begin{center}
|
||||
\includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8288_small_censored.jpg}
|
||||
\includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8288_small.jpg}
|
||||
\hspace*{5mm}
|
||||
\includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8292_small_censored.jpg}
|
||||
\includegraphics[width=0.45\textwidth]{fiber_passthrough_mech_model__8292_small.jpg}
|
||||
\end{center}
|
||||
\caption{An disassembled view of our optical passthrough mechanical prototype. The fiber is passed through from the
|
||||
shaft going through the IHSM's primary tamper sensing mesh cage to the outside into the interior of the IHSM through
|
||||
|
|
|
|||
BIN
chapter-qkd/figures/fiber_passthrough_mech_model__8288_small.jpg
Normal file
BIN
chapter-qkd/figures/fiber_passthrough_mech_model__8288_small.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 367 KiB |
Binary file not shown.
File diff suppressed because one or more lines are too long
|
After Width: | Height: | Size: 526 KiB |
BIN
chapter-qkd/figures/fiber_passthrough_mech_model__8292_small.jpg
Normal file
BIN
chapter-qkd/figures/fiber_passthrough_mech_model__8292_small.jpg
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 335 KiB |
BIN
chapter-qkd/figures/pic_bracket_routing_small.png
Normal file
BIN
chapter-qkd/figures/pic_bracket_routing_small.png
Normal file
Binary file not shown.
|
After Width: | Height: | Size: 260 KiB |
|
|
@ -1,4 +1,4 @@
|
|||
\chaptertitle{Multiparty Computation in Scalable Hardware Security Modules}
|
||||
\chaptertitle{Case Study: Multiparty Computation in Scalable Hardware Security Modules}
|
||||
|
||||
\section{Fast MPC and Slow HSMs}
|
||||
|
||||
|
|
|
|||
|
|
@ -1,4 +1,5 @@
|
|||
\DeclareSIUnit{\baud}{Bd}
|
||||
\DeclareSIUnit{\rpm}{rpm}
|
||||
|
||||
\DeclarePairedDelimiter{\ceil}{\lceil}{\rceil}
|
||||
\DeclarePairedDelimiter{\paren}{(}{)}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue