Anti-Counterfeiting of Integrated Circuits: RFID Tags as a Countermeasure

Transcription

1 Anti-Counterfeiting of Integrated Circuits: RFID Tags as a Countermeasure Sathya Kanth Vardhanapu Fall

2 Counterfeiting of Integrated Circuits Counterfeit Electronic part is defined by U.S. Dept. of Commerce as: One that is not genuine because it is an unauthorized copy. Does not conform to original OCM design, model, or performance standards. Not produced by the OCM, or is produced by unauthorized contractors. An off-specification, defective, or used OCM product sold as new or working. Has incorrect or false markings or documentation, or both. Counterfeiting is done on a large scale and counterfeiting costs US based semiconductor companies more than $7.5 billion per year Semiconductor Industry Association as of Fall

3 Sample of ATMEL Counterfeit Source: A. Huang, The one on the left has date code as 1004, which means it was fabbed on the 4 th week of The one on the right has date code 0723, which means it was fabbed on the 23 rd week of The ATmega328 wasn t in production in Fall

4 STMicroelectronics Counterfeit Source: A. Huang, s.com/blog/?p=208, 2007 Fall

5 On the Die Source: A. Huang, The chip is by STMicroelectronics, but the die says it s by Fairchild Semiconductors Fall

6 Security Aspect: General Perception In electronic devices, primarily security is seen in terms of Software and Hardware. Focus is mostly on Software. Hardware security is usually taken for granted. Threats specific to ICs are: ØCounterfeiting: Authenticity issue, the counterfeits quality is usually lacking. ØReverse Engineering: Data Confidentiality is at risk, based on the working at critical junctures of the device, steal information or extract IP. ØTampering: Change logic of the hardware, Integrity is at risk. Fall

7 History: Counterfeiting Electronics China, Korea, Chinese Taipei, Hong Kong, and the Philippines were the top five counterfeit goods suppliers to the U.S. in 13. Data provided by US and EU States Customs Services. Most counterfeit and pirated goods come from Asia as of today. OECDs report in 2007 reported that, close to $200 billion of International trade was pirated and counterfeited in This number increased to $250 billion in Fall

8 Estimate of Total Value of Counterfeit and Pirated Products OECD Category Internationally traded counterfeit and pirated products Domestically produced and consumed counterfeit and pirated products Estimate (2008 data) Estimate (2015 data) $ billion $960 billion $ billion $570 billion Digitally pirated products $30-75 billion $240 billion Total $ billion $1.77 trillion Source: M.Tehranipoor, U. Guin, D. Forte, Counterfeit Integrated Circuits, Springer, 2015 Fall

9 Security Threats Have negative impact on day-to-day life. As electronics are used widely. For instance, if we have a counterfeit component in a space vehicle, the vehicle could fail. The loss would be extremely high. In a pacemaker, a counterfeit component could cause the device to fail which would lead to someone losing their life. In a vehicle, if the ABS fails, there could be damage to the vehicle owner and others on the road. People might lose their lives. Fall

10 Types of IC Counterfeiting Recycled Forged Documentation Remarked Overproduced Out-of-spec/Defective Cloned Tampered Fall

11 Methods Used for Anti-Counterfeiting RFID Tags (includes some puf based types) EM Fingerprints Hardware Watermarking Metering PUF based methods Fuse and Time Stamp Circuits Fall

12 RFID Tags- Why Choose it over the rest? Low Cost Doesn t have a Power Unit. Don t need to be placed in Line-of-Sight. Provides high security. Data can be encrypted or Password Protected Not only used for Identification. It can be used for Anticounterfeiting as well. They are re-usable and have high durability. Fall

13 RFID Tag Source: Web, Fall

14 Implemented With PUFs RFID Tag-Methods to Counter Counterfeiting With Fuse and Time Stamp Circuits RFID Tags with FPGAs for Authentication Counterfeit Detection and System Traceability (CST) Fall

15 With PUFs Functions based on physical characteristics Unique for each chip Can provide key which cannot be easily reverse engineered. RFID tags using PUFs based on hidden timing and delay information of Integrated Circuits. Regular RFIDs can still be counterfeited PUF RFID chip has its own unique secrets PUF adds a secure authentication to prevent counterfeiting Fall

16 Overview of PUF based Authentication Source: S. Devdas et al., Design and Implementation of PUF-Based Unclonable RFID Ics for Anti-Counterfeiting and Security Applications, IEEE Intnl. Conf. on RFID, Nevada, 2008 Fall

17 Anti-Counterfeit Structure Source: Web, Nxp semiconductors, RFID documents archive Fall

18 Counterfeit Detection and System Traceability (CST) Has different types of on-chip sensors and in-system structures. Verifies the authenticity of the system. Core is an RFID tag which is used as a storage and a channel to read information different types of chips on the PCBs. This system addresses the problem with authenticity of chips on a PCB apart from other security concerns. Fall

19 Counterfeit Detection and System Traceability (CST) Source: K. Yang et al., An RFID-based technology for electronic component and system Counterfeit detection and Traceability, IEEE Intnl. Symp. on Tech. for Homeland Security (HST), Massachusetts, 2015 (a) A PCB with an RFID tag connected to different chips, (b) Internal structure of a chip with various sensors, (c) Internal structure of an RFID tag, and (d) Internal structure of the digital control unit in an RFID tag. Fall

20 Counterfeit of ICs- Semiconductor Companies Asia is the primary source for counterfeit goods or pirated goods in case of ICs. Many companies have a countermeasure for counterfeit ICs today. Each have their own parameters that are key to detection of ICs. Fall

21 Most Counterfeited Semiconductors Rank Commodity Type 1 Analog IC 25.2% 2 Microprocessor IC 13.4% 3 Memory IC 13.1% 4 Programmable Logic IC 8.3% 5 Transistor 7.6% Source: IHS Parts Management, 2012 % of Reported Incidents Fall

22 Part Type Percentage by Application Market Industrial Automotive Consumer Wireless Wired Compute Other Analog IC 14% 17% 21% 29% 6% 14% 0% Microproc 4% essor IC 1% 4% 2% 3% 85% 0% Memory IC 3% 2% 13% 26% 2% 53% 1% Programm able Logic 30% 3% 14% 18% 25% 11% 0% IC Transistor 22% 12% 25% 8% 10% 22% 0% Source: IHS isuppli, 2012 Fall

23 Companies with Countermeasures ON Semiconductor. ATMEL (CryptoMemory products). STMicroelectronics. Maxim Integrated (DeepCover Secure Authenticators). NXP Semiconductors Parker Hannifin (In Medical Devices) Fall

24 Verayo Solution for Anti-Counterfeiting Source: Web, RFIDjournal.net, Verayo Webinar, 2008 Fall

25 Marvell 88PA810 Trusted Authentication IC Source: Maxim product datasheets Maxim s deep cover embedded solutions MAX66242 is a Transponder IC. Combines ISO/IEC and ISO Mode 1-compatible RF front-end, an I2C frontend, a FIPS 180-based SHA-256 engine and 4096 bits of user EEPROM in a single chip. Fall

26 Basic Working Two way authentication between Host system and MAX Bidirectional security model. Each device has unique 64 bit ROM ID. ROM ID is used as input during cryptographic operations and acts as electronic serial number within application. I2C interface can act as master or slave port. Can harvest energy from active RF field. Fall

27 Conclusions Counterfeiting is growing at a rapid pace Current measures taken by semiconductor companies are inadequate. Many companies don t even have an inbuilt system in their products to prevent counterfeiting! Security is compromised because of counterfeiting. RFID is a cost effective method to combat this. Depending on application, right mixture of authentication and data protection techniques can provide complete product protection. Fall

28 Futurescope RFID tags even with existing precautions can be cloned. In order to prevent this, there is an approach called Hardware Intrinsic Security. In the Hardware Intrinsic Security, we often have PUFs. Verayo, an MIT based Spinoff Company are the only one company that have implemented this form. PUFs and RFID. Fall

29 The End Any Questions? Fall