TWI844836B - Power supplying device, method and secure system - Google Patents
Power supplying device, method and secure system Download PDFInfo
- Publication number
- TWI844836B TWI844836B TW111113053A TW111113053A TWI844836B TW I844836 B TWI844836 B TW I844836B TW 111113053 A TW111113053 A TW 111113053A TW 111113053 A TW111113053 A TW 111113053A TW I844836 B TWI844836 B TW I844836B
- Authority
- TW
- Taiwan
- Prior art keywords
- voltage
- encryption
- driving voltage
- encryption device
- power supply
- Prior art date
Links
- 238000000034 method Methods 0.000 title claims description 27
- 238000013459 approach Methods 0.000 claims description 3
- 239000003990 capacitor Substances 0.000 description 19
- 101100464779 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) CNA1 gene Proteins 0.000 description 10
- 238000010586 diagram Methods 0.000 description 8
- 101000685663 Homo sapiens Sodium/nucleoside cotransporter 1 Proteins 0.000 description 7
- 102100023116 Sodium/nucleoside cotransporter 1 Human genes 0.000 description 7
- 101100464782 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) CMP2 gene Proteins 0.000 description 5
- 230000000694 effects Effects 0.000 description 5
- 230000001629 suppression Effects 0.000 description 5
- 230000007423 decrease Effects 0.000 description 4
- 238000005516 engineering process Methods 0.000 description 2
- 230000001105 regulatory effect Effects 0.000 description 2
- 101000827703 Homo sapiens Polyphosphoinositide phosphatase Proteins 0.000 description 1
- 102100023591 Polyphosphoinositide phosphatase Human genes 0.000 description 1
- 101100012902 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) FIG2 gene Proteins 0.000 description 1
- 101100233916 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) KAR5 gene Proteins 0.000 description 1
- 238000001514 detection method Methods 0.000 description 1
- 238000007599 discharging Methods 0.000 description 1
- 230000005672 electromagnetic field Effects 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
Landscapes
- Power Sources (AREA)
- Direct Current Feeding And Distribution (AREA)
Abstract
Description
本發明涉及一種用於電源供應裝置、方法與安全系統,且特別是可以避免駭客(hacker)惡意透過偵測電源的系統電壓變化及其相應的電流值變化來竊取安全資訊的電源供應裝置、方法與安全系統。The present invention relates to a power supply device, method and security system, and in particular to a power supply device, method and security system that can prevent hackers from maliciously stealing security information by detecting changes in system voltage of a power supply and changes in its corresponding current value.
近年來,安全應用已在許多領域實施,包括身份證、信用卡、計算機訪問控制和移動電話(例如,SIM卡)。 這些應用程序通常依賴於基於嵌入在存儲器中的密鑰的加密計算來實現高安全性。駭客會試圖從卡中提取這些密鑰以生成未經授權的交易。側通道攻擊(side attack)是在正常運行期間,從卡或計算機系統收集信息的最常用方法。它可以根據時序信息、功耗和電磁場對密鑰進行解密。 因此,保持數據安全並避免側通道攻擊是設計安全系統時需要考量的因素。In recent years, security applications have been implemented in many areas, including identity cards, credit cards, computer access control, and mobile phones (e.g., SIM cards). These applications usually rely on cryptographic calculations based on keys embedded in memory to achieve high security. Hackers will try to extract these keys from the card to generate unauthorized transactions. Side channel attacks are the most common method to collect information from a card or computer system during normal operation. It can decrypt the keys based on timing information, power consumption, and electromagnetic fields. Therefore, keeping data secure and avoiding side channel attacks are factors that need to be considered when designing a secure system.
電源側通道攻擊的情況說明如下。駭客可以在加解密裝置(透過多個邏輯閘實現)的邏輯閘切換期間,檢測檢測電流變化及由此電流變化產生的電源特徵(通常施加至加解密裝置的驅動電壓也會跟著電流變化而改變),並透過電源接腳監控這些電源特徵,以用於恢復密鑰。為了禁止從邏輯閘讀取電源和接地信號,通常會將電源接腳和接地接腳與外部焊盤(pad)隔離。The power side channel attack is described as follows. During the switching of the logic gate of the encryption device (implemented by multiple logic gates), the hacker can detect the current change and the power characteristics generated by the current change (usually the driving voltage applied to the encryption device will also change with the current change), and monitor these power characteristics through the power pins to recover the key. In order to prohibit reading the power and ground signals from the logic gate, the power pins and ground pins are usually isolated from the external pads.
請參照圖1,圖1是先前技術的安全系統的電路圖。安全系統1包括電源10、電源供應裝置12與加解密裝置14,其中電源供應裝置12電性連接於電源10與加解密裝置14之間,以藉此避免駭客透過偵測電源10的電源接腳與接地接腳便可以獲取關聯於安全資訊的電源特徵。電源供應裝置12包括多個開關SW1~SW5與電荷儲存電容CS。開關SW1的一端電性連接電源10的系統電壓,開關SW1的另一端電性連接開關SW2的一端、開關SW5的一端與電荷儲存電容CS的一端。開關SW2的另一端電性連接加解密裝置14的一端,並藉此輸出供應電壓給加解密裝置14作為加解密裝置14的驅動電壓。開關SW3的一端電性連接電源10的接地電壓。開關SW3的另一端電性連接開關SW4的一端、開關SW5的另一端與電荷儲存電容CS的另一端。開關SW4的另一端電性連接加解密裝置14的另一端,以提供接地電壓給加解密裝置14。Please refer to FIG. 1, which is a circuit diagram of a security system of the prior art. The security system 1 includes a power supply 10, a power supply device 12, and an encryption device 14, wherein the power supply device 12 is electrically connected between the power supply 10 and the encryption device 14 to prevent hackers from obtaining power supply characteristics related to security information by detecting the power pins and ground pins of the power supply 10. The power supply device 12 includes a plurality of switches SW1 to SW5 and a charge storage capacitor CS. One end of the switch SW1 is electrically connected to the system voltage of the power supply 10, and the other end of the switch SW1 is electrically connected to one end of the switch SW2, one end of the switch SW5, and one end of the charge storage capacitor CS. The other end of the switch SW2 is electrically connected to one end of the encryption device 14, thereby outputting a supply voltage to the encryption device 14 as a driving voltage of the encryption device 14. One end of the switch SW3 is electrically connected to the ground voltage of the power source 10. The other end of the switch SW3 is electrically connected to one end of the switch SW4, the other end of the switch SW5 and the other end of the charge storage capacitor CS. The other end of the switch SW4 is electrically connected to the other end of the encryption device 14 to provide a ground voltage to the encryption device 14.
電源供應裝置12提供供應電壓的流程如下。首先,在第一階段,僅有開關SW5導通,其他開關SW1~SW4斷路,以對電荷儲存電容CS放電至特定的電壓準位,即開關SW5當作重置開關使用。在第二階段,開關SW1、SW3導通,其他開關SW2、SW4、SW5斷路,故電源10的系統電壓可對電荷儲存電容CS進行充電,在充電到系統電壓的電壓準位後,才進入第三階段。在第三階段, 開關SW2、SW4導通,其他開關SW1、SW3、SW5斷路,電荷儲存電容CS提供供應電壓給加解密裝置14作為驅動電壓。然後,在第四階段,加解密裝置14才被允許進行加解密。在結束第四階段後,再次回到第一階段。The process of the power supply device 12 providing the supply voltage is as follows. First, in the first stage, only the switch SW5 is turned on, and the other switches SW1 to SW4 are turned off to discharge the charge storage capacitor CS to a specific voltage level, that is, the switch SW5 is used as a reset switch. In the second stage, the switches SW1 and SW3 are turned on, and the other switches SW2, SW4, and SW5 are turned off, so the system voltage of the power supply 10 can charge the charge storage capacitor CS. After charging to the voltage level of the system voltage, it enters the third stage. In the third stage, the switches SW2 and SW4 are turned on, and the other switches SW1, SW3, and SW5 are turned off, and the charge storage capacitor CS provides the supply voltage to the encryption and decryption device 14 as a driving voltage. Then, in the fourth stage, the encryption and decryption device 14 is allowed to perform encryption and decryption. After the fourth stage is finished, it returns to the first stage again.
透過上述做法,雖可以避免駭客透過偵測電源10的電源接腳與接地接腳來獲取關聯於安全資訊的電源特徵,但上述做法必須確保電荷儲存電容CS儲存的電荷量必須能夠供應加解密裝置14進行加解密時所消耗的大量電荷,因此這導致電荷儲存電容CS的尺寸必須足夠大。再者,上述做法不是一種省電的解決方案,因為上述做法必須在第一階段將電荷儲存電容CS放電至預定電壓準位。另外,電荷儲存電容CS的尺寸越大,充放電時間也會越久,整體來說會較為耗時,更不用說,上述做法還共需要四個階段來確保加解密裝置14可以正常工作。Through the above method, although it is possible to prevent hackers from obtaining power supply characteristics related to security information through the power pin and the ground pin of the detection power supply 10, the above method must ensure that the amount of charge stored in the charge storage capacitor CS must be able to supply the large amount of charge consumed by the encryption and decryption device 14 during encryption and decryption, so this results in the size of the charge storage capacitor CS to be large enough. Furthermore, the above method is not a power-saving solution, because the above method must discharge the charge storage capacitor CS to a predetermined voltage level in the first stage. In addition, the larger the size of the charge storage capacitor CS, the longer the charging and discharging time will be, which will be more time-consuming overall, not to mention that the above method requires a total of four stages to ensure that the encryption and decryption device 14 can work normally.
本發明實施例提供一種電源供應裝置,其係用於提供電源給安全系統的加解密裝置,且包括安全電力提供裝置、穩定電壓源與電壓選取裝置。安全電力提供裝置用於提供供應電壓,其中供應電壓可根據加解密裝置之運作而動態調整。穩定電壓源用於提供穩定電壓。電壓選取裝置電性連接安全電力提供裝置、穩定電壓源與加解密裝置。當加解密裝置進行運作且加解密裝置的驅動電壓落入上限電壓與下限電壓構成的電壓區間內,電壓選取裝置僅使用供應電壓作為加解密裝置的驅動電壓。當加解密裝置進行加解密且驅動電壓位於電壓區間之外,電壓選取裝置使用供應電壓與穩定電壓作為加解密裝置的驅動電壓,且調整供應電壓直到驅動電壓落入電壓區間。An embodiment of the present invention provides a power supply device, which is used to provide power to the encryption device of the security system, and includes a safe power supply device, a stable voltage source and a voltage selection device. The safe power supply device is used to provide a supply voltage, wherein the supply voltage can be dynamically adjusted according to the operation of the encryption device. The stable voltage source is used to provide a stable voltage. The voltage selection device is electrically connected to the safe power supply device, the stable voltage source and the encryption device. When the encryption device is in operation and the driving voltage of the encryption device falls within the voltage range formed by the upper limit voltage and the lower limit voltage, the voltage selection device only uses the supply voltage as the driving voltage of the encryption device. When the encryption and decryption device performs encryption and decryption and the driving voltage is outside the voltage range, the voltage selection device uses the supply voltage and the stable voltage as the driving voltage of the encryption and decryption device, and adjusts the supply voltage until the driving voltage falls into the voltage range.
本發明實施例還提供一種安全系統,此安全系統包括上述電源供應裝置與加解密裝置。The embodiment of the present invention also provides a security system, which includes the power supply device and the encryption and decryption device.
本發明實施例還提供一種電源供應方法,此電源供應方法係用於提供電源給安全系統的加解密裝置,且執行以下步驟。當加解密裝置進行運作且加解密裝置的驅動電壓大於上限電壓,使用安全電力提供裝置提供的供應電壓與穩定電壓源提供的穩定電壓作為驅動電壓,並調降供應電壓,直到驅動電壓小於上限電壓後,才僅使用供應電壓作為驅動電壓。當加解密裝置進行運作且驅動電壓小於下限電壓,使用供應電壓與穩定電壓作為驅動電壓,並調升供應電壓,直到驅動電壓大於下限電壓後,才僅使用供應電壓作為驅動電壓。當加解密裝置進行運作且驅動電壓未大於上限電壓與未小於下限電壓,僅使用供應電壓作為驅動電壓。The embodiment of the present invention also provides a power supply method, which is used to provide power to the encryption and decryption device of the security system, and performs the following steps. When the encryption and decryption device is in operation and the driving voltage of the encryption and decryption device is greater than the upper limit voltage, the supply voltage provided by the security power supply device and the stable voltage provided by the stable voltage source are used as the driving voltage, and the supply voltage is reduced until the driving voltage is less than the upper limit voltage, and then only the supply voltage is used as the driving voltage. When the encryption and decryption device is in operation and the driving voltage is less than the lower limit voltage, the supply voltage and the stable voltage are used as the driving voltage, and the supply voltage is increased until the driving voltage is greater than the lower limit voltage, and then only the supply voltage is used as the driving voltage. When the encryption and decryption device is in operation and the driving voltage is not greater than the upper limit voltage and not less than the lower limit voltage, only the supply voltage is used as the driving voltage.
本發明實施例提供一種電源供應裝置,其係用於提供電源給安全系統的加解密裝置,且包括安全電力提供裝置、穩定電壓源與電壓選取裝置。安全電力提供裝置用於根據系統電壓提供供應電壓,其中供應電壓可根據加解密裝置之運作而動態調整。穩定電壓源用於提供穩定電壓。電壓選取裝置電性連接安全電力提供裝置、穩定電壓源與加解密裝置。當加解密裝置進行運作且加解密裝置的驅動電壓位於上限電壓與下限電壓構成的電壓區間之內,電壓選取裝置僅使用供應電壓作為加解密裝置的驅動電壓。在加解密裝置進行運作且驅動電壓位於電壓區間之外,電壓選取裝置僅使用穩定電壓作為加解密裝置的驅動電壓,且調整供應電壓直到驅動電壓位於電壓區間之內後,僅使用供應電壓作為所述加解密裝置的驅動電壓。The embodiment of the present invention provides a power supply device, which is used to provide power to the encryption and decryption device of the security system, and includes a safe power supply device, a stable voltage source and a voltage selection device. The safe power supply device is used to provide a supply voltage according to the system voltage, wherein the supply voltage can be dynamically adjusted according to the operation of the encryption and decryption device. The stable voltage source is used to provide a stable voltage. The voltage selection device is electrically connected to the safe power supply device, the stable voltage source and the encryption and decryption device. When the encryption device is in operation and the driving voltage of the encryption device is within the voltage range formed by the upper voltage limit and the lower voltage limit, the voltage selection device uses only the supply voltage as the driving voltage of the encryption device. When the encryption device is in operation and the driving voltage is outside the voltage range, the voltage selection device uses only the stable voltage as the driving voltage of the encryption device, and after adjusting the supply voltage until the driving voltage is within the voltage range, only the supply voltage is used as the driving voltage of the encryption device.
綜上所述,相較於先前技術,本發明實施例提供的多種不同電源供應裝置、方法與安全系統可以達到減少電荷儲存電容所需要的尺寸、操作時間、耗電電流與電路面積等技術效果的至少一者。本發明實施例的電源供應裝置可以有效地保護安全系統,並避免駭客透過電源接腳與接地接腳偵測出來的電源特徵獲取安全資訊。In summary, compared with the prior art, the various power supply devices, methods and security systems provided by the embodiments of the present invention can achieve at least one of the technical effects of reducing the size, operation time, power consumption current and circuit area required for the charge storage capacitor. The power supply device of the embodiments of the present invention can effectively protect the security system and prevent hackers from obtaining security information through the power characteristics detected by the power pins and the ground pins.
為了進一步理解本發明的技術、手段和效果,可以參考以下詳細描述和附圖,從而可以徹底和具體地理解本發明的目的、特徵和概念。然而,以下詳細描述和附圖僅用於參考和說明本發明的實現方式,其並非用於限制本發明。In order to further understand the technology, means and effects of the present invention, the following detailed description and drawings may be referred to, so that the purpose, features and concepts of the present invention can be thoroughly and specifically understood. However, the following detailed description and drawings are only used for reference and explanation of the implementation of the present invention, and are not used to limit the present invention.
現在將詳細參考本發明的示範實施例,其示範實施例會在附圖中被繪示出。在可能的情況下,在附圖和說明書中使用相同的元件符號來指代相同或相似的部件。另外,示範實施例的做法僅是本發明的設計概念的實現方式之一,下述的該等示範皆非用於限定本發明。Reference will now be made in detail to exemplary embodiments of the present invention, which are illustrated in the accompanying drawings. Where possible, the same reference numerals are used in the drawings and the specification to refer to the same or similar components. In addition, the exemplary embodiments are only one of the implementation methods of the design concept of the present invention, and the following examples are not intended to limit the present invention.
為解決先前技術的問題,本發明實施例提供的多種不同電源供應裝置、方法與安全系統可以避免駭客透過電源接腳與接地接腳偵測出來的電源特徵獲取安全資訊,且在達到安全保護效果時,還能達到減少電荷儲存電容所需要的尺寸、操作時間、耗電電流與電路面積等技術效果的至少一者。To solve the problems of the prior art, the various power supply devices, methods and security systems provided by the embodiments of the present invention can prevent hackers from obtaining security information through the power characteristics detected by the power pins and the ground pins, and while achieving the security protection effect, can also achieve at least one of the technical effects of reducing the size, operation time, power consumption current and circuit area required for the charge storage capacitor.
在本發明實施例中,電源供應裝置包括安全電力提供裝置、穩定電壓源與電壓選取裝置,其中電壓選取裝置電性連接安全電力提供裝置、穩定電壓源與加解密裝置。當加解密裝置進行加解密(即,加解密裝置進行運作)時,電壓選取裝置會監控加解密裝置的驅動電壓。在驅動電壓介於上限電壓與下限電壓之間,則電壓選取裝置選取安全電力提供裝置提供的供應電壓作為加解密裝置的驅動電壓;以及在驅動電壓大於上限電壓或小於下限電壓(即位於上限電壓與下限電壓形成的電壓區間之外),則電壓選取裝置會同時選取穩定電壓源提供的穩定電壓與安全電力提供裝置提供的供應電壓同時作為加解密裝置的驅動電壓。In the embodiment of the present invention, the power supply device includes a safe power supply device, a stable voltage source and a voltage selection device, wherein the voltage selection device is electrically connected to the safe power supply device, the stable voltage source and the encryption device. When the encryption device performs encryption and decryption (i.e., the encryption device operates), the voltage selection device monitors the driving voltage of the encryption device. When the driving voltage is between the upper limit voltage and the lower limit voltage, the voltage selection device selects the supply voltage provided by the safe power supply device as the driving voltage of the encryption device; and when the driving voltage is greater than the upper limit voltage or less than the lower limit voltage (i.e., outside the voltage range formed by the upper limit voltage and the lower limit voltage), the voltage selection device will simultaneously select the stable voltage provided by the stable voltage source and the supply voltage provided by the safe power supply device as the driving voltage of the encryption device.
進一步地,在驅動電壓大於上限電壓時,電壓選取裝置還會降低安全電力提供裝置提供的供應電壓,直到驅動電壓降低至小於於上限電壓。再者,在驅動電壓小於下限電壓時,電壓選取裝置還會提升安全電力提供裝置提供的供應電壓,直到驅動電壓升高至大於上限電壓。Furthermore, when the driving voltage is greater than the upper voltage limit, the voltage selection device will also reduce the supply voltage provided by the safety power supply device until the driving voltage is reduced to less than the upper voltage limit. Furthermore, when the driving voltage is less than the lower voltage limit, the voltage selection device will also increase the supply voltage provided by the safety power supply device until the driving voltage is increased to greater than the upper voltage limit.
電壓選取裝置可以包括切換模式控制器與切換開關。在啟動期間,透過切換模式控制器控制切換開關導通,僅由穩定電壓源提供穩定電壓給加解密裝置作為驅動電壓。在啟動期間內,加解密裝置的驅動電壓會逐漸上升,當上升到目標電壓值(例如,比最大的系統電壓低的另一個系統電壓)時,且持續一段時間後,啟動期間結束。在啟動期間結束後,切換模式控制器根據加解密裝置是否要進行加解密控制切換開關斷路或導通,以決定由安全電力提供裝置提供供應電壓給加解密裝置作為驅動電壓,還是由穩定電壓源提供穩定電壓給加解密裝置作為驅動電壓。The voltage selection device may include a switching mode controller and a switching switch. During the startup period, the switching mode controller controls the switching switch to be turned on, and only the stable voltage source provides a stable voltage to the encryption device as a driving voltage. During the startup period, the driving voltage of the encryption device will gradually increase. When it rises to a target voltage value (for example, another system voltage lower than the maximum system voltage) and continues for a period of time, the startup period ends. After the startup period ends, the switching mode controller controls the switching switch to open or close according to whether the encryption and decryption device needs to perform encryption and decryption, so as to determine whether the security power supply device provides the supply voltage to the encryption and decryption device as the driving voltage, or whether the stable voltage source provides the stable voltage to the encryption and decryption device as the driving voltage.
此作法在啟動期間結束後,讓穩定電壓源在加解密裝置不進行加解密時,維持驅動電壓為穩定電壓,僅有在加解密裝置進行加解密,且驅動電壓位於上限電壓與下限電壓的電壓區間之內時,才僅讓安全電力提供裝置提供供應電壓給加解密裝置作為驅動電壓,而在驅動電壓超出電壓區間時,同時讓穩定電壓與供應電壓作為驅動電壓,並同時調整供應電壓的大小,以使驅動電壓能夠落於電壓區間內。據此,本發明實施例提供的電源供應裝置可以解決加解密裝置在進行加解密時需要龐大消耗電流導致驅動電壓忽然下降的技術問題。相較於先前技術,此實施例的做法依然能夠有效減少電荷儲存電容所需要的尺寸、操作時間、耗電電流與電路面積。This method allows the stable voltage source to maintain the driving voltage at a stable voltage when the encryption device is not performing encryption and decryption after the startup period ends. Only when the encryption device is performing encryption and decryption and the driving voltage is within the voltage range of the upper limit voltage and the lower limit voltage, the security power supply device will provide the supply voltage to the encryption device as the driving voltage. When the driving voltage exceeds the voltage range, the stable voltage and the supply voltage are used as the driving voltage at the same time, and the size of the supply voltage is adjusted at the same time so that the driving voltage can fall within the voltage range. Accordingly, the power supply device provided by the embodiment of the present invention can solve the technical problem that the encryption device needs to consume a large amount of current when performing encryption and decryption, resulting in a sudden drop in the driving voltage. Compared with the previous technology, the method of this embodiment can still effectively reduce the size, operation time, power consumption current and circuit area required by the charge storage capacitor.
首先,請參照圖2,請參照圖2,圖2是本發明實施例的安全系統的電路圖。安全系統2包括電源供應裝置20與加解密裝置22,其中電源供應裝置20包括穩定電壓源200、切換模式控制器202、安全電力提供裝置204與切換開關206,其中切換模式控制器202與切換開關206構成電壓選取裝置。電源供應裝置20係用於提供電源給安全系統2的加解密裝置22,其主要目的是為了使駭客無法透過偵測電源接腳與接地接腳得到的電源特徵變化(即,系統電壓的電源特徵變化)來獲得安全資訊。換言之,加解密裝置22進行加解密的過程中,也不會讓系統電壓的電源特徵有大幅度的變化。First, please refer to FIG. 2, which is a circuit diagram of a security system according to an embodiment of the present invention. The security system 2 includes a power supply device 20 and an encryption device 22, wherein the power supply device 20 includes a stable voltage source 200, a switching mode controller 202, a safety power supply device 204, and a switching switch 206, wherein the switching mode controller 202 and the switching switch 206 constitute a voltage selection device. The power supply device 20 is used to provide power to the encryption device 22 of the security system 2, and its main purpose is to prevent hackers from obtaining security information by detecting power characteristic changes obtained by the power pin and the ground pin (i.e., power characteristic changes of the system voltage). In other words, during the encryption and decryption process of the encryption and decryption device 22, the power supply characteristics of the system voltage will not change significantly.
安全電力提供裝置204用於根據系統電壓產生供應電壓,並提供供應電壓,其中供應電壓施加於加解密裝置22,以作為驅動加解密裝置22的驅動電壓VDIG(關聯於切換開關206的導通與斷路),且供應電壓可根據加解密裝置之運作而動態調整。透過安全電力提供裝置204,在加解密裝置22進行加解密時,系統電壓的電源特徵變化幅度能小於特定幅度,例如,電流或電壓變化幅度小於5%,但本發明不以此為限制。然而,僅有安全電力提供裝置204提供供應電壓作為加解密裝置22的驅動電壓VDIG時,有可能無法提供足夠的輸出總電流給加解密裝置22作為在進行加解密所需要的消耗的電流,亦即,在安全電力提供裝置204中開啟以用於提供電流的切換電流單元不足時,無法提供足夠的輸出總電流給加解密裝置22。因此,穩定電壓源200、切換模式控制器202與切換開關206設置於電源供應裝置20中,以解決上述技術問題。The safety power supply device 204 is used to generate a supply voltage according to the system voltage and provide the supply voltage, wherein the supply voltage is applied to the encryption device 22 as a driving voltage VDIG for driving the encryption device 22 (related to the on and off of the switch 206), and the supply voltage can be dynamically adjusted according to the operation of the encryption device. Through the safety power supply device 204, when the encryption device 22 performs encryption and decryption, the power supply characteristic variation of the system voltage can be less than a specific range, for example, the current or voltage variation is less than 5%, but the present invention is not limited to this. However, when only the safety power supply device 204 provides the supply voltage as the driving voltage VDIG of the encryption device 22, it may not be able to provide a sufficient total output current to the encryption device 22 as the current consumed in encryption and decryption. That is, when the switching current unit opened in the safety power supply device 204 to provide current is insufficient, it is impossible to provide a sufficient total output current to the encryption device 22. Therefore, the stable voltage source 200, the switching mode controller 202 and the switching switch 206 are provided in the power supply device 20 to solve the above technical problems.
穩定電壓源200用於提供不易受到變動的穩定電壓,其中穩定電壓源200可以是由能隙電壓產生器、低壓降穩壓器等直流轉直流轉換裝置實現,例如但不限定是由圖2的比較器CMP1、電阻R1與PMOS電晶體MP1來實現。切換模式控制器202電性連接加解密裝置22,用於產生第一開關信號,以及根據第一開關信號與加解密裝置22的驅動電壓VDIG產生第二開關信號,其中第一開關信號是根據用於表示加解密裝置22是否進行加解密的加解密工作信號ENCRP(如圖3與圖4)與用於表示驅動電壓VDIG是否超出上限電壓與下限電壓形成的電壓區間的兩輸出信號OUT1、OUT2(如圖3)來決定。切換模式控制器202的其中一種實現方式如同圖3所示,其細節將於後面描述中介紹,且本發明不以此為限制。切換開關206具有第一端、第二端與控制端,其中第一端電性連接穩定電壓源200,第二端電性連接加解密裝置22,以及控制端電性連接切換模式控制器202以接收第一開關信號。切換開關206的導通或斷路(即,第一端與第二端的導通或斷路)由第一開關信號所控制。The stabilized voltage source 200 is used to provide a stable voltage that is not susceptible to changes, wherein the stabilized voltage source 200 can be implemented by a DC-to-DC converter such as a bandgap voltage generator, a low-dropout voltage regulator, etc., for example but not limited to, by the comparator CMP1, the resistor R1 and the PMOS transistor MP1 of FIG. 2 . The switching mode controller 202 is electrically connected to the encryption device 22, and is used to generate a first switch signal, and generate a second switch signal according to the first switch signal and the drive voltage VDIG of the encryption device 22, wherein the first switch signal is determined according to the encryption and decryption working signal ENCRP (as shown in FIG. 3 and FIG. 4) used to indicate whether the encryption and decryption device 22 performs encryption and decryption and two output signals OUT1 and OUT2 (as shown in FIG. 3) used to indicate whether the drive voltage VDIG exceeds the voltage range formed by the upper limit voltage and the lower limit voltage. One implementation of the switching mode controller 202 is shown in FIG. 3, and its details will be introduced in the following description, and the present invention is not limited thereto. The switch 206 has a first end, a second end and a control end, wherein the first end is electrically connected to the stable voltage source 200, the second end is electrically connected to the encryption device 22, and the control end is electrically connected to the switching mode controller 202 to receive the first switch signal. The conduction or disconnection of the switch 206 (i.e., the conduction or disconnection of the first end and the second end) is controlled by the first switch signal.
安全電力提供裝置204產生的輸出總電流受控於第二開關信號。當加解密裝置22進行加解密時,先由供應電壓作為驅動電壓VDIG,但若加解密裝置22的消耗電流增加,加解密裝置22的驅動電壓VDIG下降至低於下限電壓,則第一開關信號切換開關206,使得穩定電壓與供應電壓同時作為驅動電壓VDIG,同時第二開關信號被更新並控制安全電力提供裝置204增加安全電力提供裝置204的輸出總電流,以藉此提升供應電壓與驅動電壓VDIG。接著,驅動電壓VDIG回到上限電壓與下限電壓構成的電壓區間內,且第一開關信號切換開關206,將供應電壓作為驅動電壓VDIG,相較於前一次的供應電壓,此次供應電壓已經被提昇,故能夠再次僅使用供應電壓作為驅動電壓VDIG。The total output current generated by the safety power supply device 204 is controlled by the second switch signal. When the encryption and decryption device 22 performs encryption and decryption, the supply voltage is first used as the driving voltage VDIG. However, if the current consumption of the encryption and decryption device 22 increases and the driving voltage VDIG of the encryption and decryption device 22 drops below the lower limit voltage, the first switch signal switches the switch 206 so that the stable voltage and the supply voltage are used as the driving voltage VDIG at the same time. At the same time, the second switch signal is updated and controls the safety power supply device 204 to increase the total output current of the safety power supply device 204, thereby increasing the supply voltage and the driving voltage VDIG. Then, the driving voltage VDIG returns to the voltage range formed by the upper limit voltage and the lower limit voltage, and the first switch signal switches the switch 206, and the supply voltage is used as the driving voltage VDIG. Compared with the previous supply voltage, the supply voltage has been increased this time, so only the supply voltage can be used as the driving voltage VDIG again.
另外一方面,當加解密裝置22進行加解密時,先由供應電壓作為驅動電壓VDIG,但當加解密裝置22的驅動電壓VDIG上升至高於上限電壓,則第一開關信號切換開關206,將穩定電壓與供應電壓同時作為驅動電壓VDIG,同時第二開關信號被更新並控制安全電力提供裝置204減少安全電力提供裝置204的輸出總電流,以藉此降低供應電壓與驅動電壓VDIG。接著,驅動電壓VDIG回到上限電壓與下限電壓構成的電壓區間內,且第一開關信號切換開關206,將供應電壓作為驅動電壓VDIG,相較於前一次的供應電壓,此次供應電壓已經被降低,故能夠再次僅使用供應電壓作為驅動電壓VDIG。On the other hand, when the encryption and decryption device 22 performs encryption and decryption, the supply voltage is first used as the driving voltage VDIG. However, when the driving voltage VDIG of the encryption and decryption device 22 rises to a level higher than the upper limit voltage, the first switch signal switches the switch 206, and uses the stable voltage and the supply voltage as the driving voltage VDIG at the same time. At the same time, the second switch signal is updated and controls the safety power supply device 204 to reduce the total output current of the safety power supply device 204, thereby reducing the supply voltage and the driving voltage VDIG. Then, the driving voltage VDIG returns to the voltage range formed by the upper limit voltage and the lower limit voltage, and the first switch signal switches the switch 206, using the supply voltage as the driving voltage VDIG. Compared with the previous supply voltage, the supply voltage has been lowered this time, so only the supply voltage can be used as the driving voltage VDIG again.
接著,當加解密裝置22未進行加解密或在啟動期間時,則僅由穩定電壓源200提供穩定電壓給加解密裝置22作為驅動電壓VDIG,因此,切換模式控制器202產生的第一開關信號使安全電力提供裝置204不會提供供應電壓與產生輸出總電流給加解密裝置22。Then, when the encryption/decryption device 22 is not performing encryption/decryption or is in the startup period, only the stable voltage source 200 provides the stable voltage to the encryption/decryption device 22 as the driving voltage VDIG. Therefore, the first switching signal generated by the switching mode controller 202 causes the security power supply device 204 not to provide the supply voltage and generate the total output current to the encryption/decryption device 22.
請同時參照圖1與圖4,圖4是本發明實施例的安全系統的部分信號的波形圖。於啟動期間(區間T1),切換模式控制器202產生第一開關信號使切換開關206導通(切換開關206的第一端與第二端導通),並使安全電力提供裝置204不提供供應電壓,加解密裝置22僅接收穩定電壓作為驅動電壓VDIG。在驅動電壓VDIG到達或趨近於驅動電壓VDIG的目標值後,結束啟動期間(區間T1),且切換模式控制器202產生第一開關信號使切換開關206導通(切換開關206的第一端與第二端導通),以及使安全電力提供裝置204不提供供應電壓,以使加解密裝置22僅接收穩定電壓作為驅動電壓VDIG。Please refer to FIG. 1 and FIG. 4 at the same time. FIG. 4 is a waveform diagram of some signals of the security system of the embodiment of the present invention. During the startup period (interval T1), the switching mode controller 202 generates a first switch signal to turn on the switching switch 206 (the first end and the second end of the switching switch 206 are turned on), and the security power supply device 204 does not provide a supply voltage, and the encryption and decryption device 22 only receives a stable voltage as a driving voltage VDIG. After the driving voltage VDIG reaches or approaches the target value of the driving voltage VDIG, the startup period (interval T1) ends, and the switching mode controller 202 generates a first switching signal to turn on the switching switch 206 (the first end and the second end of the switching switch 206 are turned on), and the security power supply device 204 does not provide a supply voltage, so that the encryption and decryption device 22 only receives a stable voltage as the driving voltage VDIG.
在結束啟動期間(區間T1)後,切換模式控制器202根據加解密工作信號ENCRP決定是否讓供應電壓作為驅動電壓VDIG。在區間T1之後的區間T2,加解密裝置22未進行加解密,第一開關信號使切換開關206導通,以及使安全電力提供裝置204不提供供應電壓,故加解密裝置22僅接收穩定電壓作為驅動電壓VDIG。After the start-up period (interval T1) ends, the switching mode controller 202 determines whether to use the supply voltage as the driving voltage VDIG according to the encryption and decryption working signal ENCRP. In the interval T2 after the interval T1, the encryption and decryption device 22 does not perform encryption and decryption, the first switch signal turns on the switching switch 206, and the safety power supply device 204 does not provide the supply voltage, so the encryption and decryption device 22 only receives the stable voltage as the driving voltage VDIG.
在區間T3,加解密裝置22進行加解密(加解密工作信號ENCRP為邏輯高準位),若驅動電壓VDIG在上限電壓與下限電壓構成的電壓區間內,第一開關信號使切換開關206斷路,以及第二開關信號使安全電力提供裝置204輸出總電流,並提供供應電壓給加解密裝置22作為驅動電壓VDIG。在區間T3中,若驅動電壓VDIG超出上限電壓與下限電壓構成的電壓區間時,則第一開關信號使切換開關206導通,並切換成使用穩定電壓與供應電壓作為驅動電壓VDIG。進一步地,在使用穩定電壓與供應電壓作為驅動電壓VDIG時,如驅動電壓VDIG大於上限電壓,第二開關信號會使供應電壓下降,直到驅動電壓VDIG小於上限電壓為止,才僅讓供應電壓作為驅動電壓VDIG並停止調降供應電壓。類似地,在使用穩定電壓與供應電壓作為驅動電壓VDIG時,如驅動電壓VDIG小於下限電壓,第二開關信號會使供應電壓上升,直到驅動電壓VDIG大於下限電壓為止,才僅讓供應電壓作為驅動電壓VDIG並停止調升供應電壓。在區間T3之後的區間T4,加解密裝置22未進行加解密,第一開關信號使切換開關206導通,以及使安全電力提供裝置204不提供供應電壓,故加解密裝置22僅接收穩定電壓作為驅動電壓VDIG。In the interval T3, the encryption and decryption device 22 performs encryption and decryption (the encryption and decryption working signal ENCRP is a logical high level). If the driving voltage VDIG is within the voltage range formed by the upper voltage limit and the lower voltage limit, the first switch signal disconnects the switching switch 206, and the second switch signal causes the safety power supply device 204 to output the total current and provide the supply voltage to the encryption and decryption device 22 as the driving voltage VDIG. In the interval T3, if the driving voltage VDIG exceeds the voltage range formed by the upper voltage limit and the lower voltage limit, the first switch signal turns on the switching switch 206 and switches to use the stable voltage and the supply voltage as the driving voltage VDIG. Furthermore, when the regulated voltage and the supply voltage are used as the driving voltage VDIG, if the driving voltage VDIG is greater than the upper voltage limit, the second switch signal will cause the supply voltage to decrease until the driving voltage VDIG is less than the upper voltage limit, and then the supply voltage will be used as the driving voltage VDIG and the supply voltage reduction will stop. Similarly, when the stable voltage and the supply voltage are used as the driving voltage VDIG, if the driving voltage VDIG is less than the lower limit voltage, the second switch signal will cause the supply voltage to rise until the driving voltage VDIG is greater than the lower limit voltage, and then only the supply voltage is used as the driving voltage VDIG and the supply voltage is stopped from being raised. In the interval T4 after the interval T3, the encryption and decryption device 22 does not perform encryption and decryption, the first switch signal turns on the switching switch 206, and causes the safety power supply device 204 to not provide the supply voltage, so the encryption and decryption device 22 only receives the stable voltage as the driving voltage VDIG.
附帶一提的是,雖然本發明實施例中,在啟動期間與非加解密期間都是使用穩定電壓作為驅動電壓VDIG,但本發明不以此為限制。在其他種情況下,也可能是使用供應電壓作為驅動電壓VDIG。Incidentally, although in the embodiment of the present invention, a stable voltage is used as the driving voltage VDIG during the startup period and the non-encryption and decryption period, the present invention is not limited to this. In other cases, the supply voltage may also be used as the driving voltage VDIG.
請繼續回去參照圖2,穩定電壓源200可以包括PMOS電晶體MP1、比較器CMP1與電阻R1。PMOS電晶體MP1的源極電性連接系統電壓VDD。比較器CMP1的輸出端電性連接PMOS電晶體的閘極,比較器CMP1的負輸入端接收低於目標電壓值的電壓(例如,比系統電壓VDD更低的另一系統電壓DVDD),比較器CMP1的正輸入端電性連接切換開關206第一端與PMOS電晶體MP1的汲極。電阻R1具有分別電性連接到PMOS電晶體MP1的汲極與低電壓(例如,接地電壓)的兩端。上述架構形成負回饋電路,使得比較器CMP1在穩態時,比較器CMP1的正輸入端與負輸入端上的電壓值會彼此相同。Please continue to refer to FIG. 2 , the stabilized voltage source 200 may include a PMOS transistor MP1, a comparator CMP1, and a resistor R1. The source of the PMOS transistor MP1 is electrically connected to the system voltage VDD. The output of the comparator CMP1 is electrically connected to the gate of the PMOS transistor, the negative input of the comparator CMP1 receives a voltage lower than the target voltage value (e.g., another system voltage DVDD lower than the system voltage VDD), and the positive input of the comparator CMP1 is electrically connected to the first end of the switching switch 206 and the drain of the PMOS transistor MP1. The resistor R1 has two ends electrically connected to the drain of the PMOS transistor MP1 and a low voltage (e.g., a ground voltage), respectively. The above structure forms a negative feedback circuit, so that when the comparator CMP1 is in a stable state, the voltage values on the positive input terminal and the negative input terminal of the comparator CMP1 are the same.
安全電力提供裝置204的其中一種實現方式說明如下,但本發明不以此為限制。安全電力提供裝置204包括多個切換電流單元CU1~CUn,其中多個切換電流單元CU1~CUn的多個端電性連接系統電壓VDD,多個切換電流單元CU1~CUn的另外多個端彼此電性連接,並用於輸出供應電壓作為驅動電壓VDIG,且多個切換電流單元CU1~CUn受控於多個第三開關信號,其中第二開關信號包括多個第三開關信號。One implementation of the safety power supply device 204 is described as follows, but the present invention is not limited thereto. The safety power supply device 204 includes a plurality of switching current units CU1-CUn, wherein a plurality of terminals of the plurality of switching current units CU1-CUn are electrically connected to the system voltage VDD, and another plurality of terminals of the plurality of switching current units CU1-CUn are electrically connected to each other and used to output the supply voltage as the driving voltage VDIG, and the plurality of switching current units CU1-CUn are controlled by a plurality of third switch signals, wherein the second switch signal includes a plurality of third switch signals.
切換電流單元CU1包括電流源CR1與開關SC1,其中電流源CR1的一端電性連接系統電壓VDD,開關SC1的兩端分別電性連接電流源CR1的另一端與系統電壓VDD,以及開關SC1受控於第二開關信號。同樣地,切換電流單元CU2包括電流源CR2與開關SC2,切換電流單元CU3包括電流源CR3與開關SC3,切換電流單元CUn包括電流源CRn與開關SCn,且電流源CR2、CR3、CRn的每一者與多個開關SC2、SC3、SCn的對應醫者的電性連接方式類似於電流源CR1與開關SC1的電性連接方式,故不贅述。The switching current unit CU1 includes a current source CR1 and a switch SC1, wherein one end of the current source CR1 is electrically connected to the system voltage VDD, two ends of the switch SC1 are electrically connected to the other end of the current source CR1 and the system voltage VDD, and the switch SC1 is controlled by a second switch signal. Similarly, the switching current unit CU2 includes a current source CR2 and a switch SC2, the switching current unit CU3 includes a current source CR3 and a switch SC3, the switching current unit CUn includes a current source CRn and a switch SCn, and the electrical connection method between each of the current sources CR2, CR3, CRn and the corresponding switches SC2, SC3, SCn is similar to the electrical connection method between the current source CR1 and the switch SC1, so it is not repeated.
當加解密裝置22進行加解密,加解密裝置22的消耗電流增加,驅動電壓VDIG會下降。在驅動電壓VDIG小於下限電壓VTG-Δ時,切換模式控制器202產生的第二開關信號(包括多個第三開關信號)會使多個切換電流單元CU1~CUn被打開的數量增加,以增加多個切換電流單元CU1~CUn的輸出總電流來提升驅動電壓VDIG的電壓值,其中Δ為差異量電壓。多個切換電流單元CU1~CUn的輸出總電流有可能過量,使得驅動電壓VDIG上升,驅動電壓VDIG大於上限電壓VTG+Δ時,切換模式控制器202產生的第二開關信號(包括多個第三開關信號)會使多個切換電流單元CU1~CUn被關閉的數量增加,以減少多個切換電流單元CU1~CUn的輸出總電流來降低驅動電壓VDIG的電壓值。When the encryption and decryption device 22 performs encryption and decryption, the current consumption of the encryption and decryption device 22 increases, and the driving voltage VDIG decreases. When the driving voltage VDIG is less than the lower limit voltage VTG-Δ, the second switch signal (including multiple third switch signals) generated by the switching mode controller 202 increases the number of multiple switching current units CU1~CUn that are turned on, so as to increase the total output current of the multiple switching current units CU1~CUn to increase the voltage value of the driving voltage VDIG, where Δ is the differential voltage. The total output current of the multiple switching current units CU1~CUn may be excessive, causing the driving voltage VDIG to rise. When the driving voltage VDIG is greater than the upper limit voltage VTG+Δ, the second switch signal (including multiple third switch signals) generated by the switching mode controller 202 will increase the number of multiple switching current units CU1~CUn that are closed, thereby reducing the total output current of the multiple switching current units CU1~CUn to reduce the voltage value of the driving voltage VDIG.
附帶一提的是,電源提供裝置2更可以保括並聯於加解密裝置22的電容C1與/或並聯於加解密裝置22的漣波抑制單元208。透過並聯於加解密裝置22的電容C1與/或並聯於加解密裝置22的漣波抑制單元208,可以更有效維持驅動電壓的穩定,其中漣波抑制單元208可以是一個閘極接收固定偏壓VLEED的PMOS電晶體MP2,此PMOS電晶體MP2的源極與汲極分別接收驅動電壓VDIG與低電壓(例如,接地電壓),故能夠減少驅動電壓VDIG變動時的漣波。Incidentally, the power supply device 2 may further include a capacitor C1 connected in parallel to the encryption device 22 and/or a ripple suppression unit 208 connected in parallel to the encryption device 22. The capacitor C1 connected in parallel to the encryption device 22 and/or the ripple suppression unit 208 connected in parallel to the encryption device 22 may more effectively maintain the stability of the driving voltage, wherein the ripple suppression unit 208 may be a PMOS transistor MP2 whose gate receives a fixed bias voltage VLEED, and the source and drain of the PMOS transistor MP2 receive the driving voltage VDIG and a low voltage (e.g., a ground voltage) respectively, so that the ripple when the driving voltage VDIG changes can be reduced.
請接著參照圖3,圖3是本發明實施例的切換模式控制器的電路圖。切換模式控制器202的其中一種實現方式可以如圖3,但本發明不以此為限制。切換模式控制器202包括比較器CMP2、CMP3、計數器CNT1與邏輯電路LG1。比較器CMP2具有分別接收上限電壓VTG+Δ與驅動電壓VDIG的正輸入端與負輸入端。比較器CMP3具有分別接收驅動電壓VDIG與下限電壓VTG-Δ的正輸入端與負輸入端。計數器CNT1具有分別電性連接比較器CMP2的輸出端與比較器CMP3的輸出端的兩輸入端,由第一開關信號決定致能與否,並用於比較器CMP2的輸出信號與比較器CMP3的輸出信號進行上數或下數,以產生第二開關信號。Please refer to FIG. 3, which is a circuit diagram of a switching mode controller of an embodiment of the present invention. One implementation of the switching mode controller 202 may be as shown in FIG. 3, but the present invention is not limited thereto. The switching mode controller 202 includes comparators CMP2, CMP3, a counter CNT1, and a logic circuit LG1. The comparator CMP2 has a positive input terminal and a negative input terminal for receiving an upper limit voltage VTG+Δ and a driving voltage VDIG, respectively. The comparator CMP3 has a positive input terminal and a negative input terminal for receiving a driving voltage VDIG and a lower limit voltage VTG-Δ, respectively. The counter CNT1 has two input terminals electrically connected to the output terminals of the comparator CMP2 and the comparator CMP3 respectively, is enabled or not determined by the first switch signal, and is used to count up or down the output signals of the comparator CMP2 and the comparator CMP3 to generate the second switch signal.
進一步地,當第一開關信號使切換開關206導通時,計數器CNT1被禁能,因此,安全電力提供裝置204不提供供應電壓。進一步地,當第一開關信號使切換開關206斷路時,數器CNT1被致能,因此,安全電力提供裝置204根據計數器CNT1輸出的第二開關信號增加或減少輸出總電流,以調整驅動電壓VDIG的大小。Further, when the first switch signal turns on the switching switch 206, the counter CNT1 is disabled, and therefore, the safety power providing device 204 does not provide a supply voltage. Further, when the first switch signal turns off the switching switch 206, the counter CNT1 is enabled, and therefore, the safety power providing device 204 increases or decreases the total output current according to the second switch signal output by the counter CNT1 to adjust the size of the driving voltage VDIG.
邏輯電路LG1用於接收比較器CMP1、CMP2的輸出信號OUT1、OUT2與加解密工作信號ENCRP,以據此產生第一開關信號,且第一開關信號被傳送到切換開關206與計數器CNT1。請同時參照圖3與圖4,由於只有在輸出信號OUT1、OUT2為邏輯高準位(驅動電壓位於電壓區間內)與加解密工作信號ENCRP為邏輯高準位(進行加解密)時,切換開關206才不會導通,因此,邏輯電路LG1可以是一個及閘,且本發明並不以此為限制。The logic circuit LG1 is used to receive the output signals OUT1 and OUT2 of the comparators CMP1 and CMP2 and the encryption and decryption working signal ENCRP to generate a first switch signal, and the first switch signal is transmitted to the switching switch 206 and the counter CNT1. Please refer to FIG. 3 and FIG. 4 at the same time. Since the switching switch 206 will not be turned on only when the output signals OUT1 and OUT2 are at a logical high level (the driving voltage is within the voltage range) and the encryption and decryption working signal ENCRP is at a logical high level (encryption and decryption are performed), the logic circuit LG1 can be an AND gate, and the present invention is not limited to this.
請接著參照圖5,圖5是本發明實施例的電源供應方法的流程圖。此電源供應方法用於提供電源給安全系統的加解密裝置,可以由上述電源供應裝置來執行,且包括以下步驟。首先,在步驟S102,於啟動期間,由穩定電壓源提供穩定電壓給加解密裝置作為驅動電壓,且在驅動電壓趨近於目標電壓值後,結束啟動期間,於啟動期間結束後,繼續由穩定電壓源提供穩定電壓給加解密裝置作為驅動電壓。接著,在步驟S104中,判斷加解密裝置是否進行加解密,如果判斷加解密裝置沒有要進行加解密,則執行步驟S106B,否則,則執行步驟S106A。在步驟S106A中,在驅動電壓落於上限電壓與下限電壓構成的電壓區間內,由安全電力提供裝置提供供應電壓給加解密裝置作為驅動電壓,若驅動電壓超出上限電壓與下限電壓構成的電壓區間,則同時提供供應電壓與穩定電壓作為驅動電壓,並對應地調整供應電壓,直到驅動電壓落於電壓區間內,繼續僅由供應電壓作為驅動電壓。在步驟S106B中,由穩定電壓源提供穩定電壓給加解密裝置作為驅動電壓。Please refer to FIG. 5, which is a flow chart of a power supply method of an embodiment of the present invention. This power supply method is used to provide power to the encryption and decryption device of the security system, and can be executed by the above-mentioned power supply device, and includes the following steps. First, in step S102, during the startup period, the stable voltage source provides a stable voltage to the encryption and decryption device as a driving voltage, and after the driving voltage approaches the target voltage value, the startup period ends, and after the startup period ends, the stable voltage source continues to provide a stable voltage to the encryption and decryption device as a driving voltage. Next, in step S104, it is determined whether the encryption/decryption device is to perform encryption/decryption. If it is determined that the encryption/decryption device is not to perform encryption/decryption, step S106B is executed; otherwise, step S106A is executed. In step S106A, when the driving voltage falls within the voltage range formed by the upper limit voltage and the lower limit voltage, the safe power supply device provides the supply voltage to the encryption device as the driving voltage. If the driving voltage exceeds the voltage range formed by the upper limit voltage and the lower limit voltage, the supply voltage and the stable voltage are provided as the driving voltage at the same time, and the supply voltage is adjusted accordingly until the driving voltage falls within the voltage range, and only the supply voltage continues to be used as the driving voltage. In step S106B, the stable voltage source provides the stable voltage to the encryption device as the driving voltage.
在本發明另一實施例中,電源供應裝置包括安全電力提供裝置、穩定電壓源與電壓選取裝置,其中電壓選取裝置電性連接安全電力提供裝置、穩定電壓源與加解密裝置。在加解密裝置進行加解密時,電壓選取裝置會監控加解密裝置的驅動電壓。在驅動電壓介於上限電壓與下限電壓之間,則電壓選取裝置僅選取安全電力提供裝置提供的供應電壓作為加解密裝置的驅動電壓;以及在驅動電壓大於上限電壓或小於下限電壓(即超出上限電壓與下限電壓形成的電壓區間),則電壓選取裝置僅選取穩定電壓源提供的穩定電壓作為加解密裝置的驅動電壓,且同時持續地調升或調降供應電壓。此實施例的作法需要額外地設置一個開關控制括安全電力提供裝置之供應電壓的提供,且可能比較無法即時快速地將供應電壓調整落入電壓區間內,前面實施例的作法,則比較容易即時快速地將供應電壓調整落入電壓區間內(因為驅動電壓是由供應電壓與穩定電壓提供)。即時快速地將供應電壓調整落入電壓區間內表示在切換成僅由供應電壓作為驅動電壓時,比較不會讓驅動電壓再超出電壓區間。In another embodiment of the present invention, the power supply device includes a safe power supply device, a stable voltage source and a voltage selection device, wherein the voltage selection device is electrically connected to the safe power supply device, the stable voltage source and the encryption device. When the encryption device performs encryption and decryption, the voltage selection device monitors the driving voltage of the encryption device. When the driving voltage is between the upper limit voltage and the lower limit voltage, the voltage selection device only selects the supply voltage provided by the safe power supply device as the driving voltage of the encryption device; and when the driving voltage is greater than the upper limit voltage or less than the lower limit voltage (that is, exceeding the voltage interval formed by the upper limit voltage and the lower limit voltage), the voltage selection device only selects the stable voltage provided by the stable voltage source as the driving voltage of the encryption device, and at the same time continuously increases or decreases the supply voltage. This embodiment requires an additional switch to control the supply voltage of the safety power supply device, and it may be difficult to adjust the supply voltage to fall within the voltage range immediately and quickly. The previous embodiment is easier to adjust the supply voltage to fall within the voltage range immediately and quickly (because the driving voltage is provided by the supply voltage and the stable voltage). Immediately and quickly adjusting the supply voltage to fall within the voltage range means that when switching to only using the supply voltage as the driving voltage, the driving voltage is less likely to exceed the voltage range.
綜合以上所述,本發明實施例提供的多種電源供應裝置、方法與安全系統都可以達到避免駭客偵測電源接腳與接地接腳來獲取安全資訊的技術效果,而且,相較於先前技術,本發明實施例的多種電源供應裝置、方法與安全系統還能夠有效減少電荷儲存電容所需要的尺寸、操作時間、耗電電流與電路面積。另外,附帶一提的是,本發明實施例的多種電源供應裝置、方法與安全系統的系統複雜度並不高,故易於實現,且無須龐大的製造成本,因此,本發明實施例的多種電源供應裝置、方法與安全系統具有極高的實用性與市場價值。In summary, the various power supply devices, methods and security systems provided by the embodiments of the present invention can achieve the technical effect of preventing hackers from detecting power pins and ground pins to obtain security information. Moreover, compared with the prior art, the various power supply devices, methods and security systems of the embodiments of the present invention can also effectively reduce the size, operation time, power consumption current and circuit area required for the charge storage capacitor. In addition, it is mentioned that the system complexity of the various power supply devices, methods and security systems of the embodiments of the present invention is not high, so it is easy to implement and does not require a huge manufacturing cost. Therefore, the various power supply devices, methods and security systems of the embodiments of the present invention have extremely high practicality and market value.
應當理解,本文描述的示例和實施例僅用於說明目的,並且鑑於其的各種修改或改變將被建議給本領域技術人員,並且將被包括在本申請的精神和範圍以及所附權利要求的範圍之內。It should be understood that the examples and embodiments described herein are for illustrative purposes only and that various modifications or changes thereto will be suggested to those skilled in the art and are to be included within the spirit and scope of the present application and the scope of the appended claims.
1、2:安全系統 10:電源 12、20:電源供應裝置 14、22:加解密裝置 200:穩定電壓源 202:切換模式控制器 204:安全電力提供裝置 SW1~SW5:開關 206:切換開關 208:漣波抑制單元 CS:電荷儲存電容 VDIG:驅動電壓 VTG-Δ:下限電壓 VTG+Δ:上限電壓 DVDD、VDD:系統電壓 CU1~CUn:切換電流單元 CR1~CRn:電流源 SC1~SCn:開關 R1:電阻 MP1、MP2:PMOS電晶體 CMP1~CMP3:比較器 C1:電容 VLEED:固定偏壓 T1~T4:區間 ENCRP:加解密工作信號 CNT1:計數器 LG1:邏輯電路 OUT1、OUT2:輸出信號 S102、S104、S106A、S106B:步驟 1, 2: Security system 10: Power supply 12, 20: Power supply device 14, 22: Encryption device 200: Regulated voltage source 202: Switching mode controller 204: Safe power supply device SW1~SW5: Switch 206: Switching switch 208: Surge suppression unit CS: Charge storage capacitor VDIG: Driving voltage VTG-Δ: Lower limit voltage VTG+Δ: Upper limit voltage DVDD, VDD: System voltage CU1~CUn: Switching current unit CR1~CRn: Current source SC1~SCn: Switch R1: Resistor MP1, MP2: PMOS transistor CMP1~CMP3: Comparator C1: Capacitor VLEED: fixed bias T1~T4: interval ENCRP: encryption and decryption working signal CNT1: counter LG1: logic circuit OUT1, OUT2: output signal S102, S104, S106A, S106B: steps
提供的附圖用以使本發明所屬技術領域具有通常知識者可以進一步理解本發明,並且被併入與構成本發明的說明書的一部分。附圖示出了本發明的示範實施例,並且用以與本發明的說明書一起用於解釋本發明的原理。The accompanying drawings are provided to enable a person with ordinary knowledge in the art to which the present invention belongs to further understand the present invention, and are incorporated into and constitute a part of the specification of the present invention. The accompanying drawings show exemplary embodiments of the present invention, and are used together with the specification of the present invention to explain the principles of the present invention.
圖1是先前技術的安全系統的電路圖。FIG. 1 is a circuit diagram of a safety system of the prior art.
圖2是本發明實施例的安全系統的電路圖。FIG2 is a circuit diagram of a safety system according to an embodiment of the present invention.
圖3是本發明實施例的切換模式控制器的電路圖。FIG3 is a circuit diagram of a switching mode controller according to an embodiment of the present invention.
圖4是本發明實施例的安全系統的部分信號的波形圖。FIG4 is a waveform diagram of some signals of the safety system according to an embodiment of the present invention.
圖5是本發明實施例的電源供應方法的流程圖。FIG5 is a flow chart of a power supply method according to an embodiment of the present invention.
2:安全系統 2: Security system
20:電源供應裝置 20: Power supply device
22:加解密裝置 22: Encryption and decryption device
200:穩定電壓源 200:Stable voltage source
202:切換模式控制器 202: Switching mode controller
204:安全電力提供裝置 204: Safe power supply device
206:開關 206: Switch
208:漣波抑制單元 208: Ripple suppression unit
VDIG:驅動電壓 VDIG: driving voltage
DVDD、VDD:系統電壓 DVDD, VDD: system voltage
CU1~CUn:切換電流單元 CU1~CUn: Switching current unit
CR1~CRn:電流源 CR1~CRn: current source
SC1~SCn:開關 SC1~SCn: switch
R1:電阻 R1: resistor
MP1、MP2:PMOS電晶體 MP1, MP2: PMOS transistors
CMP1:比較器 CMP1: Comparator
C1:電容 C1: Capacitor
VLEED:固定偏壓 VLEED: Fixed bias
Claims (10)
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202210490376.XA CN115879170A (en) | 2021-09-27 | 2022-05-07 | Power supply device, method and safety system |
| US17/952,968 US11824393B2 (en) | 2021-09-27 | 2022-09-26 | Power supplying device, method and secure system |
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US202163248664P | 2021-09-27 | 2021-09-27 | |
| US63/248,664 | 2021-09-27 |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| TW202314440A TW202314440A (en) | 2023-04-01 |
| TWI844836B true TWI844836B (en) | 2024-06-11 |
Family
ID=86943034
Family Applications (3)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| TW111113053A TWI844836B (en) | 2021-09-27 | 2022-04-06 | Power supplying device, method and secure system |
| TW111113054A TWI861484B (en) | 2021-09-27 | 2022-04-06 | Power supplying device, method and security system |
| TW111115605A TWI864389B (en) | 2021-09-27 | 2022-04-25 | Power supplying device, method and secure system |
Family Applications After (2)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| TW111113054A TWI861484B (en) | 2021-09-27 | 2022-04-06 | Power supplying device, method and security system |
| TW111115605A TWI864389B (en) | 2021-09-27 | 2022-04-25 | Power supplying device, method and secure system |
Country Status (1)
| Country | Link |
|---|---|
| TW (3) | TWI844836B (en) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TW201502854A (en) * | 2013-05-31 | 2015-01-16 | Chaologix Inc | Charge distribution control system, crypto system and method of protecting against side channel attack by operating the same |
| CN106415580A (en) * | 2014-06-24 | 2017-02-15 | 高通股份有限公司 | Method and system for preventing side channel attacks |
| TW201928677A (en) * | 2017-12-18 | 2019-07-16 | 新唐科技股份有限公司 | Security system and method for coping with fault injection attacks |
| TW202023165A (en) * | 2018-12-12 | 2020-06-16 | 新唐科技股份有限公司 | Switched-capacitor dc-dc power converter circuit |
Family Cites Families (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TWI473381B (en) * | 2011-09-20 | 2015-02-11 | 富達通科技股份有限公司 | Inductive power supply and metal foreign matter detection method thereof |
| US8525545B1 (en) * | 2011-08-26 | 2013-09-03 | Lockheed Martin Corporation | Power isolation during sensitive operations |
| US8912814B2 (en) * | 2012-11-12 | 2014-12-16 | Chaologix, Inc. | Clocked charge domain logic |
| TWI554872B (en) * | 2013-02-01 | 2016-10-21 | 技嘉科技股份有限公司 | Motherboard and method for power controlling thereof |
| FR3026206B1 (en) * | 2014-09-23 | 2017-12-01 | Inside Secure | METHOD OF CONTREPOSING AGAINST ATTACK BY ELECTRICAL CONSUMPTION ANALYSIS FOR CRYPTOGRAPHIC DEVICE |
| CN206505415U (en) * | 2016-12-30 | 2017-09-19 | 北京安天网络安全技术有限公司 | A kind of encryption authentication device based on PCIE |
-
2022
- 2022-04-06 TW TW111113053A patent/TWI844836B/en active
- 2022-04-06 TW TW111113054A patent/TWI861484B/en active
- 2022-04-25 TW TW111115605A patent/TWI864389B/en active
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TW201502854A (en) * | 2013-05-31 | 2015-01-16 | Chaologix Inc | Charge distribution control system, crypto system and method of protecting against side channel attack by operating the same |
| CN106415580A (en) * | 2014-06-24 | 2017-02-15 | 高通股份有限公司 | Method and system for preventing side channel attacks |
| CN106415580B (en) | 2014-06-24 | 2018-03-02 | 高通股份有限公司 | Method and system for preventing side channel attacks |
| TW201928677A (en) * | 2017-12-18 | 2019-07-16 | 新唐科技股份有限公司 | Security system and method for coping with fault injection attacks |
| TW202023165A (en) * | 2018-12-12 | 2020-06-16 | 新唐科技股份有限公司 | Switched-capacitor dc-dc power converter circuit |
Also Published As
| Publication number | Publication date |
|---|---|
| TWI861484B (en) | 2024-11-11 |
| TW202314440A (en) | 2023-04-01 |
| TW202314441A (en) | 2023-04-01 |
| TWI864389B (en) | 2024-12-01 |
| TW202315288A (en) | 2023-04-01 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US7028196B2 (en) | System, method and apparatus for conserving power consumed by a system having a processor integrated circuit | |
| CA1162648A (en) | Low-power battery backup circuit for semiconductor memory | |
| CN100382102C (en) | Smart card with protection circuit against power analysis attack and method of operation thereof | |
| CN202856704U (en) | True reverse current blocking equipment and system | |
| CN102449908B (en) | For the short-circuit protection of switched output stages | |
| CN1711665A (en) | Integrated inrush current limiter circuit and method | |
| JP2006208365A (en) | System and method related to confirming smart battery failure by measuring input charging voltage | |
| CN104781825A (en) | Clocked charge domain logic | |
| JP2011041280A (en) | Surveillance of activity of electronic circuit | |
| TWI844836B (en) | Power supplying device, method and secure system | |
| TW202324872A (en) | Electrical discharge circuit having stable discharging mechanism | |
| CN115883051A (en) | Power supply device, method and safety system | |
| CN101924766A (en) | Double-network communication method | |
| US20180181182A1 (en) | Electronic devices, electronic systems, and control methods therefor | |
| CN115879170A (en) | Power supply device, method and safety system | |
| CN110336316B (en) | UPS parallel operation reverse irrigation prevention control method and device and terminal | |
| CN115879178A (en) | Power supply device, method and safety system | |
| CN212784771U (en) | A power protection circuit and electronic equipment | |
| US20220109318A1 (en) | Charging circuit, charging chip, mobile terminal, and charging system | |
| CN203180937U (en) | A voltage-stablizer preventing power consumption analysis attack for a crypto chip, and the crypto chip | |
| CN211403428U (en) | Solid state disk anti-password system and solid state disk | |
| CN104330998B (en) | The portable terminal and its method of Auto Power On under overvoltage condition can be prevented | |
| CN219740018U (en) | Battery protection chip, battery protection circuit and battery | |
| US20240203480A1 (en) | Memory power control unit | |
| EP3644508B1 (en) | Reverse-current switch |