Return
A Secure JTAG Wrapper for SoC Testing and Debugging
DOI:10.1109/ACCESS.2022.3164712.png)
Abstract
En 中文
IEEE Std. 1149.1, also known as the Joint Test Access Group (JTAG) standard, provides excellent controllability and observability for ICs and hence is widely used in IC testing, debugging, failure analysis, or even online chip control/monitoring. Unfortunately, it has also become a backdoor for attackers to manipulate the ICs or grab confidential information from the ICs. One way to address this problem is to disable JTAG pins after manufacturing testing. However this countermeasure prohibits the in-filed testing and debugging capability. Other countermeasures such as authentication and encryption/decryption methods based on specific static keys have also been proposed. However, these approaches may suffer from side-channel or memory attacks that may figure out the specific keys. This paper presents an authentication-based secure JTAG wrapper with a dynamic feature to defend against the attacks mentioned above. We generate different keys for different test data dynamically. Therefore, only legal test data can be updated to the test data registers (TDRs) through JTAG. Furthermore, the attackers will get fake responses if they shift in illegal test data, which makes it extremely difficult to break our proposed method. We can also employ the physical unclonable function (PUF) to distinguish the legal test data for different chips. Experiments on a RISC-V CPU processor called SCR1 show that our proposed method can have an area overhead of only 0.49%.
Keywords:
Generators
Debugging
Testing
Authentication
Registers
Integrated circuits
Physical unclonable function
Hardware security
IEEE test standard security
JTAG security
memory attack
secure JTAG wrapper
physical unclonable function (PUF)
in-field testing
in-field debugging
Journal
IF:
3.6
Papers:
9.8W
Citations:
29.4W

