Abstract:Field Programmable Gate Arrays (FPGAs) are being increasingly deployed in diverse applications including the emerging Internet of Things (IoT), biomedical, and automotive systems. However, security of the FPGA configuration file (i.e. bitstream), especially during in-field reconfiguration, as well as effective safeguards against unauthorized tampering and piracy during operation, are notably lacking. The current practice of bitstreram encryption is only available in high-end FPGAs, incurs unacceptably high overhead for area/energy-constrained devices, and is susceptible to side channel attacks. In this paper, we present a fundamentally different and novel approach to FPGA security that can protect against all major attacks on FPGA, namely, unauthorized in-field reprogramming, piracy of FPGA intellectual property (IP) blocks, and targeted malicious modification of the bitstream. Our approach employs the security through diversity principle to FPGA, which is often used in the software domain. We make each device architecturally different from the others using both physical (static) and logical (time-varying) configuration keys, ensuring that attackers cannot use a priori knowledge about one device to mount an attack on another. It therefore mitigates the economic motivation for attackers to reverse engineering the bitstream and IP. The approach is compatible with modern remote upgrade techniques, and requires only small modifications to existing FPGA tool flows, making it an attractive addition to the FPGA security suite. Our experimental results show that the proposed approach achieves provably high security against tampering and piracy with worst-case 14% latency overhead and 13% area overhead.

A novel bus security solution for bank IC card with FPGA

A Secure Scan Method for Crypto Chips

Design and FPGA Verification of a Novel Reliable Real-Time Data Transfer System

Efficient Countermeasures against Fault Attacks for 3DES Crypto Engine in Bank IC Card

A Novel SPA Countermeasure for SM2 Hardware Implementation with FPGA

Design and FPGA Implementation of 3DES Against Power Analysis Attacks for IC Bankcard

Design And Implementation Of Rsa For Dual Interface Bank Ic Card

FPGA Implementation of Mutual Authentication Protocol for Medication Security System

Fringing Electric Field Sensors for Anti-Attack at System-Level Protection

An Improved Cross-Coupled NAND Gates PUF for Bank IC Card.

A Deep Research on the Chip Verification Platform Based on Network

A SPA Countermeasure for Hardware Implementation of SM2 Algorithm

An Embedded System Design for Practical Security Analysis of Contact Smartcards

Design of Monitor and Protect Circuits against FIB Attack on Chip Security

Design And Fpga Implementation Of Java Card Coprocessor For Emv Compatible Ic Bankcard

A NOVEL JAVA COPROCESSOR with data hazard handling on FPGA for IC bank card

MUTARCH: Architectural diversity for FPGA device and IP security

Design and Implementation of a Fault Attack Platform for Smart IC Card.

Testing of Ethernet Function of Domestically-made FPGA Chip and Acquisition Board for the Application of Protective Relaying

A Low Power Current Equalizer Against Power Analysis For 3-Des Crypto Engine In Bank Ic Card

Analyzing the Vulnerabilities of External SDRAM on System-on-Chip Field Programmable Gate Array Devices