FR2823887A1 - Integrated circuits fitted with intruder protection, uses gas filled sealed enclosure over circuit or part of it, any variation in gas pressure actuates a warning signal generator - Google Patents

Abstract

Where the sensor (5) and the active signal generator(s) (6) of the active signal or indicator are mixed, the active signal or indicator corresponding to the noise detection signal is processed by a discriminator, filter and/or amplifier. The sensor and generator (5,6) are distinct devices,. The generator (6) analyzes the signals delivered by the sensor and delivers an active signal or indicator when the signals respond or not to pre-defined criteria. Integrated circuit card(s) including at least an integrated circuit or part of one with physical protection against intrusion aimed at alteration of the circuits function or its stored data. Includes at least a means (5) for detecting variation of pressure on a closed hermetically sealed closed volume (3) or the variation of pressure difference between at least two closed hermetically sealed volumes (3), each volume containing a gas or gaseous mixture at a set pressure. The or one of the volumes encloses or surrounds the integrated circuit (2) or its part to be protected. An active signal or indicator generator (6) operates as a function of the variation detected.

Description

transfer device (10) according to any one of claims 20

at 22.

- 1 - 2823887

DESCRIPTION

  The present invention relates to the field of physical security of sensitive electronic devices or at least parts thereof, and relates to a device of the aforementioned type having physical protection against fraudulent acts, in particular those aimed at physically altering one or more integrated circuit (s) forming part of this device. The present invention relates more particularly, but not limited to, elechonic devices of the integrated circuit card (s) type, and more specifically those commonly called "smart cards" in English ("smart cards"). The aforementioned type of cards generally consists of a card body which contains at least one so-called "module" sub-unit comprising contact bones and an integrated circuit or "chip", mounted on either side of a plate-shaped support made of insulating polymer (for example polyamide) and connected together. This module is generally housed with adhesive fixing in a corresponding recess made in a part of the card body, so that the contact terminals are

  substantially flush with one of the faces of said card.

  Figure I is a schematic representation, in the form

  a cross sectional view of a map of the aforementioned type.

  The integrated circuit, as well as its connections with the contact terminals which are associated with it, are covered with a resin which forms, after hardening, a protective mass and can also ensure the fixing of the module. Currently, one of the major problems of securing such cards consists in the search for protection against physical intrusions, and more particularly the detection of such intrusions at

  level of the integrated circuit constituting the sensitive element.

  It has been proposed to protect the latter by means of mechanical barriers or similar envelopes. But these can be fractured or removed, so it must be able to detect the break-in, the

piercing or removal.

  Different solutions have already been proposed to ensure this detection, but they all have drawbacks or limitations

notables.

- 2 - 2823887

  Thus, in certain embodiments, light detectors have been integrated into the integrated circuit, which results in more complex manufacture and at a higher cost price for said circuit and for the card.

which incorporates it.

  It has also been proposed to set up metallic resins with a complex structure, which are difficult to implement and

  significantly increasing the final cost price.

  Furthermore, none of the solutions currently proposed makes it possible to guarantee said detection with high security and high reliability. Problems entirely similar to those described above by way of examples in relation to integrated circuit (s) cards exist in many electronic devices, fixed or mobile, containing confidential data or information or sensitive or integrating

  integrated circuits providing safety functions.

  The present invention aims in particular to overcome the

aforementioned drawbacks.

  To this end, it relates to an electronic device, in particular an integrated circuit card (s), comprising at least one integrated circuit or part of an integrated circuit to be physically protected against a break-in or intrusion aimed, for example , alter it, alter its operation or the data stored in this circuit, recover it, or extract said at least one integrated circuit from said device, characterized in that it comprises, on the one hand, at least means for detecting a variation of at least one pressure in at least one hermetically sealed volume or of the variation of a pressure difference between at least two hermetically sealed volumes, each volume containing a gas or a gaseous mixture at a given pressure and the or one of the volume (s) containing or surrounding said integrated circuit or said part of integrated circuit to be protected, and, on the other hand, at least one means of possible generation of a sign active or indicator according to the detected variation

  or a consequence of the latter.

  The invention will be better understood, thanks to the description below

  next, which relates to preferred embodiments, given by way of nonlimiting example, and explained with reference to the appended schematic drawings, in which: FIGS. 2 to 4 are schematic views, in side elevation and in section of part of an electronic device or card

3- 2823887

  with a card module, comprising at least one integrated circuit, according to three different varieties of a first embodiment of the invention, and, FIGS. 5 and 6 are views similar to those of FIGS. 2 to 4 according to two variants different from a second embodiment of the invention. As shown in Figures 2 to 6 of the accompanying drawings, the eleckonic device 1, for example of the integrated circuit card (s) type, comprises at least one integrated circuit 2 or an integrated circuit part 2 'to be physically protected against a break-in or intrusion aimed, for example, at altering it, at altering its operation or at the data stored in this or these circuit (s), at recovering the latter, or at extracting said at

  minus an integrated circuit 2 of the card 1.

  According to the invention, said device or said card 1 comprises, in a pat, at least one means 5 for detecting the variation of at least one pressure in at least one hermetically sealed volume 3, 4 or of the variation d '' a pressure difference between at least two hermetically sealed volumes 3, 4, each volume 3, 4 containing a gas or a gaseous mixture at a given pressure and the or one or 3 of the volume (s) 3, 4 containing or surrounding said integrated circuit 2 or said part of integrated circuit 2 'to be protected, and, on the other hand, at least one means 6 of possible generation of an active signal or indicator as a function of the detected variation

  or a consequence of the latter.

  The term active signal is understood here to mean a signal capable of triggering a physical action itself such as actuation of a switch, erasure, interruption of connections or the like. By indicator signal is meant a signal which is not active in itself, but which provides information such as a value, a state, a flag or the like, used by another device or means 6 performing the action.

  physical or delivering the active signal.

  The variation in pressure or pressure difference may, in connection with an attempt to break in or remove circuit 2 or the part of circuit 2 ', be generated by deformation of the limits of the volume (s) 3, 4, by compression of the latter (s) and, link understood, by

  drilling and communication with the outside.

  In accordance with a simple embodiment of the invention, the means (s) 5 of detection and the means (s) 6 of possible generation of active signal or indicator are combined, the active signal or indicator corresponding to the detection signal raw or processed by a means

  discriminator, filter and / or amplifier.

  However, according to an alternative embodiment which is more complex, but also more flexible in application, of the invention, the detection means (s) 5 and the means (s) 6 of possible generation of active signal or indicator are separate means, the means (s) 6 analyzing the signals delivered by the detection means 5 and delivering an active or indicator signal when said signals respond or no longer respond to predefined characteristics or criteria. In this case, the means 6 can advantageously correspond to the integrated circuit 2 to be protected and the active signal consist in erasing the memory of the latter or of a part

at least of the latter.

  The invention also makes it possible, depending on the functionalities offered by the electronic device or the card 1 or the wishes of the manufacturer or the user, to generate an immediate reaction at the time of detection.

  of breaking in or delaying such a reaction.

  Thus, the emission of an active or indicator signal can be immediately exploited to modify or alter at least one hardware part, at least one software part and / or at least one data storage sector forming part of the circuit (s) ) integrated (s) 2. In the case of a card 1, this operation can be carried out whether said card 1 is

  connected to a host device or not.

  It can also be provided, in particular in the case of a card 1, that the emission of an active signal or indicator is only exploited during the first consecutive connection of said card 1 with a

  host device or subsequent energization of the integrated circuit 2.

  In the following description, the invention will be described more

  particularly in relation to a device 1 in the form of an integrated circuit card (s). However, it is understood that all of the characteristics described and the provisions mentioned below can be applied generally and without particular modification to any electronic device comprising at least one integrated circuit or part

integrated circuit to protect.

  If a first embodiment of the inventi on is shown in FIGS. 2 to 4 of the appended drawings, the cover or the device 1 comprises a single hermetically closed volume 3 delimited by an envelope 3 ′ in cooperation with the support or the substrate 7 potant the or 1st circuit (s)

  integrated (s) 2 to protect or the part concerned 2 'of the latter.

- 2823887

  According to a second embodiment of the invention shown in Figures 5 and 8 of the accompanying drawings, the card or the device 1 comprises, on the one hand, a first hermetically sealed volume 3 delimited by an envelope 3 'cooperating with the support or the subshat 7 pot or the circuit (s) intogré (s) 2 to protect or the part concerned 2 'of the latter, this first volume 3 containing or surrounding said circuit 2 or said part of circuit 2' and, on the other share, at least one second hermetically closed volume 4 also delimited jointly by an envelope 4 ′ and by the support or the substrate 7 carrying the integrated circuit (s) 2 to be protected or the part

concerned 2 'of the latter.

  Although the second embodiment is more complex in terms of construction and manufacturing, it provides additional protection for circuit 2 or the circuit block 2 'sensitive to securlser. Thus, it is possible to double the protective measures, by providing that the envelope 3 ′, delimiting the first closed volume 3, is

  arranged in the second closed volume 4 (Figure 5).

  It is also possible to offer a substantially omni-directional protection to mitigate the risks of possible

  intrusions from below the integrated circuit 2.

  In this case, it can be provided that, the first closed volume 3 extending at the level of the front face of the support or of the substrate 7, the second closed volume 4 extends at the level of the back side of said support or substrate 7 , at least at the level of a zone of the latter corresponding to the zone

  of the front face carrying said circuit 2 or said circuit part 2 '(FIG. 6).

  The integrated circuit 2 is then suspended in a closed bubble, whether or not it is compatible with the support 7 (possibly perforated or perforated) carrying the circuit.

  2 and formed by the association of the two closed volumes 3 and 4 adjacent.

  The presence of two closed volumes 3 and 4 also makes it possible, when the detection is based on a variation of the difference in pressures in the two volumes 3 and 4, to exploit a relative parameter and to overcome any variations due to natural phenomena (variation of atmospheric pressure, variation of external pressure due to a change in altitude, etc.) or to imperfections or technological limitations (for example progressive leaks over time

  gases enclosed in enclosed volumes).

- 6 - 2823887

  These progressive pressure variations may, in the case of a single closed volume 3, be taken into account and evaluated by means 6

  as not resulting from a break-in or intrusion.

  In the presence of two closed volumes 3 and 4, the active signal or indicator can be sent on the basis of a pressure variation in one of the two closed volumes 3 and 4 or on the basis of pressure variations

  in the two closed volumes 3 and 4.

  According to a characteristic of the invention, the pressure prevailing in each closed volume 3, 4 is fixed, in a programmed manner or randomly, during manufacture. In addition, each integrated circuit 2 is associated with a specific pressure value for the or each of the closed volumes 3, 4 which is (are) assigned to it, this or these value (s) being different for each integrated circuit 2 or common (s) to a random group of such circuits 2. This avoids an adaptation and a progressive adjustment of the attack parameters or criteria by repetition of break-in or intrusion attempts, determination by experimentation of the pressure (s) prevailing in the volume (s) 3, 4 and application of such pressure (s) to obtain internal / external balancing making the

  inoperative detection due to the absence of pressure variation.

  As shown in Figures 3 to 6 of the accompanying drawings, the closed volume (s) 3, 4 is (are) located in the resin mass 9 rec opening the integrated circuit (s) ) 2 and joining this (these) deny (s) to

  body of card 1 or to a module mounted on or in card 1.

  It should be noted that the application of such a resin will contribute

  also for sealing the closed volume (s) 3, 4.

  It is also possible according to the invention to implement

  different variants of modes and means of detection.

  Thus, according to the first variant of the invention, and as shown in particular in FIG. 2 of the accompanying drawings, the means 5 for detecting the pressure variation forms part of the integrated circuit 2 or of the part of the integrated circuit 2 ′, or is associated with this (head) last, and is located in the closed volume 3 containing this (head) last (e) and delimited jointly by an envelope 3 'and the substrate or the report 7 carrying the circuit (s) ( s)

  integrated (s) 2 or said part of integrated circuit 2 '.

  3 5 In accordance with a particularly advantageous practical embodiment, the detection means 5 is constituted by a mechanical oscillator 5 'whose electrical consumption is a function of the gas density in the closed volume 3 delimited by the envelope 3', said

7- 2823887

  consumption being controlled continuously or at regular intervals by the integrated circuit 2 or the integrated circuit part 2 '. Such an oscillator is used in particular in cards 1 with integrated power supply intended for

  real-time applications and therefore require an internal clock.

  According to a second alternative embodiment of the invention shown in Figures 3 and 4 of the accompanying drawings, or one of the detection means (s) 5 is at least in part formed by an envelope 3 ', 4' or by a portion or component of such an envelope 3 ', 4' delimiting the or at least one of the closed volume (s) 3, 4, if necessary in cooperation with the substrate or the support 7 carrying the circuit (s) (s)

  integrated circuit (s) 2 or said integrated circuit part 2 'to be protected.

  Thus, the casing 3 or at least one of the casings 3, 4 can be made of a piezoelectric material or comprises a component

in such a material (figure 3).

  11 can also be provided for the envelope 3 ′ or at least one of the envelopes 3 ′, 4 ′ comprising a metallic component 8, in the form of a constituent part or of an interior or exterior coating portion, of so as to form with a metallic component 8 'added or formed on another envelope 4, 3, on a cooperating part closing the closed volume 3, 4 delimited by said envelope 3', 4 'or on the support or the substrate 7 or the integrated circuit (s) 2 or the relevant part 2 'of

  the latter, a capacitive device (Figure 4).

  The signal produced by the piezoelectric device or acitive cap may either directly cause the desired action, or be amplified and / or

  treated to cause such action.

  In the context of this second variant embodiment of the invention, the pressure variation is not directly detected, but in fact the deformation of the envelope 3 ′, 4 ′ delimiting the closed volume 3, 4 coesponding. In this case, any application of abnormal pressure will also be detected on said envelopes 3 ', 4', at least partially deformable, or even on the resin 9 covering the latter, even before any pressure variation in the volumes 3, 4. However , an intrusion by one side of the volumes not delimited by said envelopes will produce a

  pressure viation and therefore also a deformation of said envelopes.

  3 5 In the case of a structure with double volumes 3 and 4 and 3 'and 4' envelopes, it is possible either to apply the same detection variant to the two volumes or envelopes, or to provide a variant

  different for each volume / envelope associated.

- 8 - 2823887

  In the detection mode by variation of pressure or detection of the application of pressure on a 3 ′, 4 ′ envelope, as described previously, a detection or securing mode can be added.

  additional complementary and compatible.

  Thus, it can be provided that the gas or the gaseous mixture contained in the or at least one of the closed volumes 3, 4 constitutes a protective atmosphere for a substance or a material contained in the volume 3 or 4 considered and possibly forming part of said circuit

  integrated 2 or covering the latter.

  Finally, according to an additional characteristic of the invention, the card I can also comprise a means of detecting a modification of the gaseous composition present in the or at least one

volumes 3, 4.

  The different embodiments and variants of intrusion detection or intrusion detection means 5 described above produce either an action signal (erasure, alteration, destruction, etc.) directly in effect in real time, or a measurement or indication signal, used in real time by a processing means 6 (analog or digital) of the detection signal to produce, if necessary, immediately an active signal (applicable in particular when the cat 1 has an integrated power supply ) or postponed until the next power up

circuits of the cate 1.

  The detection means 5 can, as a variant, also produce a non-active detection signal, which will not be used until the next connection of the card 1 by an external device suitable for

the host device.

  Of course, the invention is not limited to the embodiments described and shown in the accompanying drawings. Modifications remain possible, in particular from the point of view of the constitution of the various elements or by substitution of technical equivalents, without leaving for

  as much of the scope of protection of the invention.

Claims (18)

CLAIMS S   1. Electronic device, in particular an integrated circuit card (s), comprising at least one integrated circuit or part of an integrated circuit to be physically protected against a break-in or intrusion intended, for example, to alter it, to alter its operation or the data stored in this circuit, to recover the latter, or to extract said at least one integrated circuit from the device, characterized in that it compotes, with a pat, at least one means (5) for detecting the variation of at least one pressure in at least one hermetically sealed volume (3, 4) or the variation of a pressure difference between at least two hermetically sealed volumes (3, 4), each volume (3, 4) containing a gas or a gas mixture at a given pressure and the or one (3) of the volume (s) (3, 4) enclosing or surrounding said integrated circuit (2) or said part of integrated circuit (2 ') at protect, and, on the other hand, at least one means (6) of possible generation of an active or indicator signal depending on the detected variation   or a consequence of the latter.   2. Device according to claim 1, characterized in that the means or means (5) of detection and the or the means (s) (6) of possible generation of active signal or indicator are combined, the active signal or indicator corresponding to the raw detection signal or processed by a means   discriminator, filter and / or amplifier.   3. Device according to claim 1, characterized in that the detection means (s) (5) and the means (s) (6) of possible generation of active or indicator signal are separate means, the or the means (s) (6) analyzing the signals delivered by the detection means (5) and delivering an active or indicator signal when said signals respond   or no longer meet predefined characteristics or criteria.   4. Device according to any of claims 1 to 3,   characterized in that the emission of an active or indicator signal is immediately used to modify or alter at least one hardware part, at least one software part and / or at least one sector of   storage of data forming part of the integrated circuit (s) (2).   5. Device according to any one of claims 1 to 3,   characterized in that, in particular in the case of a cate (1), the emission of an active or indicator signal is only exploited during the first consecutive connection of said cate (1) with a host device or a   subsequent energization of the integrated circuit (2). - 2323887   6. Device according to any one of claims 1 to S.   characterized in that the means (5) for detecting the variation in pressure forms part of the integrated circuit (2) or the part of the integrated circuit (2 '), or is associated with this (head) deier (e), and is located in the enclosed volume (3) containing the latter (head) and delimited jointly by an envelope (3 ') and the substrate or the report (7) carrying the circuit (s) intogré (s) ( 2) or said integrated circuit part (2 ').   7. Device according to claim 6, characterized in that the detection means (5) consists of a mechanical oscillator (5 ') whose electrical consumption is a function of the gas density in the closed volume (3) delimited pm l' envelope (3 '), said consumption being controlled continuously or at regular intervals by the integrated circuit (2) or the internal circuit part (2 ').   8. Device according to any one of claims 1 to 5,   characterized in that the or one of the detection means (5) is at least partly formed by an envelope (3 ', 4') or by a portion or a component of such an envelope (3 ' , 4 ') delimiting the or at least one of the closed volume (s) (3, 4), if necessary in cooperation with the sulstrate or the support (7) carrying the integrated circuit (s) (2) or said part of integrated circuit (2 ') to be protected.   9. Device according to claim 8, characterized in that the envelope (3) or at least one of the envelopes (3, 4) is made in a   piezoelectric material or comprises a component of such a material.   lO. Device according to claim 8, characterized in that the envelope (3 ') or at least one of the envelopes (3', 4 ') comprises a metallic component (8), in the form of a constituent part or of '' a portion of interior or exterior coating, so as to form with a metallic component (8 ') attached or formed on another envelope (4, 3), on a cooperating part closing the closed volume (3, 4) delimited by said envelope (3 ', 4') or on the support or the sulstrate (7) carrying the integrated circuit (s) (2) or the relevant part (2 ') of the latter, a capacitive device.   11. Device according to any one of claims 1 to 10,   characterized in that it comprises a single hermetically closed volume (3) delimited by an envelope (3 ') in cooperation with the support or the sulstrate (7) carrying the integrated circuit (s) (2) to protect or the affected part (2) of the latter   12. Device according to any one of claims I to 10,   characterized in that it comprises, on the one hand, a first hennetically closed volume (3) delimited by an envelope (3 ′) cooperating with the support or the substrate (7) supporting the integrated circuit (s) ) (2) to protect or the part concerned (2 ′) from this denier, this first volume (3) enclosing or surrounding said circuit (2) or said circuit part (2 ′) and, on the other part, at least a second hermetically closed volume (4) also delimited jointly by an envelope (4 ′) and by the support or the substrate (7) storing the integrated circuit (s) (2) to be protected or the part concerned (2 ') of this money.   l3. Device according to claim 12, characterized in that the envelope (3 ') delimiting the first closed volume (3) is arranged in the second closed volume (4).   14. Device according to claim 12, characterized in that, the first closed volume (3) extending at the level of the front face of the support OR of the substrate (7), the second closed volume (4) extends at the level of the reverse side of said support or substrate (7), at least at the level of a zone of the latter con spanning the zone of the recto face supporting said circuit (2) or said circuit part (2 ').   15. Device according to any one of claims 1 to 14,   characterized in that the closed volume (s) (3, 4) is (are) located in a resin mass (9) covering the integrated circuit (s) (2) and securing this (these) denier (s) to the support or substrate (7) which the friend (s) or to a   module mounted on or in said substrate (7).   16. Device according to any one of claims 1 to 15,   characterized in that the active or indicator signal is issued on the basis of a   pressure variation in one of the two closed volumes (3 and 4).   17. Device according to any one of claims 1 to 15,   characterized in that the active or indicator signal is issued on the basis of   simultaneous pressure variations in the two closed volumes (3 and 4).   18. Device according to any one of claims I to 17,   characterized in that the gas or the gaseous mixture contained in the or at least one of the closed volumes (3, 4) constitutes a protective atmosphere for a sulstance or a material contained in the volume (3 or 4) considered and possibly making part of said integrated circuit (2) or covering the latter.   19. Device according to any one of claims 1 to 18,   characterized in that it also comprises means for detecting a modification of the gaseous composition present in the or at least one volumes (3, 4).   20. Device according to any one of claims 1 to 18,   characterized in that the pressure prevailing in each closed volume (3, 4) is fixed, in a programmed or random manner, during manufacture, to each integrated circuit (2) being associated with a specific pressure value for the or each of the volumes closed (3, 4) which is (are) assigned to it, this or these value (s) being different (s) for each integrated circuit (2) or