Integration work

This commit is contained in:
jaseg 2025-10-02 07:09:50 +02:00
parent 84e80a1944
commit 086d45306e
10 changed files with 430 additions and 31 deletions

View file

@ -4,20 +4,6 @@
}
\chaptertitle{Inertial Hardware Security Modules}
\begin{abstract}
In this paper, we introduce a novel countermeasure against physical attacks: Inertial Hardware Security Modules
(IHSMs). Conventional systems have in common that their security requires the crafting of fine sensor structures
that respond to minute manipulations of the monitored security boundary or volume. Our approach is novel in that we
reduce the sensitivity requirement of security meshes and other sensors and increase the complexity of any
manipulations by rotating the security mesh or sensor at high speed---thereby presenting a moving target to an
attacker. Attempts to stop the rotation are easily monitored with commercial MEMS accelerometers and gyroscopes.
Our approach leads to an HSM that can easily be built from off-the-shelf parts by any university electronics lab,
yet offers a level of security that is comparable to commercial HSMs. We have built a proof-of-concept hardware
prototype that demonstrates solutions to the concept's main engineering challenges. As part of this
proof-of-concept, we have found that a system using a coarse security mesh made from commercial printed circuit
boards and an automotive high-g-force accelerometer already provides a useful level of security.
\end{abstract}
\section{Introduction}
While information security technology has matured a great deal in the last half-century, physical security did not keep
@ -55,7 +41,7 @@ quickly become inhospitable to human life (see Section~\ref{sec_swivel_chair_att
or optical attacks are more limited in the first place and can be shielded, we have effectively forced the attacker to
use an ``attack robot''.
This paper contains the following contributions:
This chapter contains the following contributions:
\begin{enumerate}
\item We present the \emph{Inertial HSM} concept. Inertial HSMs enable cost-effective, small-scale production of
highly secure HSMs.
@ -81,7 +67,7 @@ basis, in Section~\ref{sec_ihsm_construction} we will elaborate the principles o
analyze its weaknesses in Section~\ref{sec_attacks}. Based on these results we have built a proof-of-concept hardware
prototype. In Section~\ref{sec_proto} we will elaborate on the design of this prototype. In Section~\ref{sec_accel_meas}
we present our characterization of an automotive MEMS accelerometer IC as a rotation sensor in this proof-of-concept
prototype. We conclude this paper with a general evaluation of our design in Section~\ref{sec_conclusion}.
prototype. We conclude this chapter with a general evaluation of our design in Section~\ref{sec_conclusion}.
\section{Related work}
\label{sec_related_work}
@ -248,9 +234,9 @@ attacker from following the device's motion since doing so would subject them to
Essentially, this limits the approximate maximum size and mass of an attacker under an assumption on tolerable
centrifugal force.
In this paper, we focus on rotating IHSMs for simplicity of construction. For our initial research, we focus on systems
with a fixed axis of rotation due to their simple construction but we do wish to note the challenge of hardening the
shaft against tampering that any production device would have to tackle.
In this chapter, we focus on rotating IHSMs for simplicity of construction. For our initial research, we focus on
systems with a fixed axis of rotation due to their simple construction but we do wish to note the challenge of hardening
the shaft against tampering that any production device would have to tackle.
\subsection{Tamper detection mesh construction}
@ -974,7 +960,7 @@ the fly, without stopping the rotor.
\section{Conclusion}
\label{sec_conclusion}
In this paper, we introduced Inertial Hardware Security Modules (IHSMs), a novel concept for the construction of
In this chapter, we introduced Inertial Hardware Security Modules (IHSMs), a novel concept for the construction of
advanced hardware security modules from simple components. We analyzed the concept for its security properties and
highlighted its ability to significantly strengthen otherwise weak tamper detection barriers. We validated our design
by creating a proof-of-concept hardware prototype. In this prototype, we have demonstrated practical solutions to the