More citations and include Konrad's first batch of fixes

This commit is contained in:
jaseg 2025-11-18 17:14:58 +01:00
parent ebf05f2548
commit 34c0657e66
4 changed files with 54 additions and 47 deletions

View file

@ -6,18 +6,19 @@
In this thesis, we propose Inertial Hardware Security Modules (IHSMs), a new approach to physical security that combines
conventional tamper-sensing meshes with physical movement to bootstrap a highly secure system from low-security,
off-the-shelf parts, solving our first research question introduced in Chapter~\ref{chapter-intro}. To motivate our
research, we show on the German national digital health record system how hardware security is hard to achieve in
practice. Besides some minor cryptographic oddities, our analysis reveals at least one essential specification mistake
that negates the hardware security of the system by unnecessarily introducing a poorly protected HSM. We provide a deep
analyses of two key engineering challenges in IHSM construction, mesh monitoring and power transfer. Solving our second
research question, we propose a low-cost TDR-based mesh monitoring system that exceeds the capabilities of previous
systems from academic or from patent literature. Our system is capable of monitoring large meshes while simultaneously
providing detailed results. Our TDR-based mesh monitoring system is of independent interest, since it can also be
integrated into traditional HSM designs. We additionally propose a new, generalized design for high-frequency PCB
inductors with low parasitic capacitance. Our design provides better bandwidth and lower parasitic capacitance compared
to the state of the art without increasing implementation cost. We conclude this thesis with two chapters elaborating on
two new use cases that are made possible by IHSM technology due to its ability to protect large payloads that have high
power consumption. Together, these results answer our third and final research question.
research, we use the German national digital health record system as an example demonstrating the difficulties in
achieving useful hardware security in practice. Besides some minor cryptographic oddities, our analysis reveals at least
one essential specification mistake that negates the hardware security of the system by unnecessarily introducing a
poorly protected HSM. With this motivation in mind, we support the construction of concretely secure IHSMs by providing
deep analyses of two key engineering challenges in IHSM construction, mesh monitoring and power transfer. Solving our
second research question, we propose a low-cost TDR-based mesh monitoring system that exceeds the capabilities of
previous systems from academic or from patent literature. Our system is capable of monitoring large meshes while
simultaneously providing detailed results. Our TDR-based mesh monitoring system is of independent interest, since it can
also be integrated into traditional HSM designs. We additionally propose a new, generalized design for high-frequency
PCB inductors with low parasitic capacitance. Our design provides better bandwidth and lower parasitic capacitance
compared to the state of the art without increasing implementation cost. We conclude this thesis with two chapters
elaborating on two new use cases that are made possible by IHSM technology due to its ability to protect large payloads
that have high power consumption. Together, these results answer our third and final research question.
The research presented in this thesis is aimed at advancing both academic research and applied engineering in hardware
security. We believe that by publishing our research including its artifacts under open source licenses, we provide the
@ -56,6 +57,6 @@ directions that we consider worthwhile for future investigation.
weights.
\end{itemize}
We will to proceed with future research into IHSM applications. We have published our results up to this point as open
We will proceed with future research into IHSM applications. We have published our results up to this point as open
source hardware and software, and we intend to build on these publications.