Design Andrealization Of SecurityTestin Svstem Based On Optical Attack Technoly For Financial IC Card Chips

To build China’s own security testing and certification system for financial IC card chips, China UnionPay leads the construction of2011’National Information Security Special Project-"National Financial IC Card Security Testing Center" under the guidance of the People’s Bank of China, focusing on chip security testing technologies. This thesis belongs to the "National Financial IC Card Security Testing Center" project, as part of capacity-building of chip security testing technologies. The objective is to establish a reliable testing system and a set of standardized test procedures, which can provide quick and reliable testing methods for security implementation of DES/3DES encryption algorithm in financial IC card, and improve chip security testing and certification infrastructure.The main work of this thesis includes:(1) Made a principle analysis of optical attack, differential fault attack and DES encryption algorithm, and summarized the principle of differential fault attacks for DES algorithm to give a good theoretical basis for realization of the testing system.(2) Designed a chip security testing system based on optical attack technologies, and detailed the system’s hardware and software implementation, which included equipment selection, hardware design of the main control board, program of embedded software and PC control software. The implementation solved the difficult problem-the precise control of the timing and physical location of laser injection, and realized automated tests.(3) Designed a standardized testing process for optical injection attack, performed a real optical injection attack to a chip when it was doing DES algorithm and finally got the DES encryption key, which confirmed that the system could verify reliably the anti-optical attack capabilities of financial IC card chips.The security testing system based on optical attack for financial IC card chips achieved by this thesis, provided an efficient and reliable testing and validation methods for security implementation of DES/3DES encryption algorithm in financial IC card, and as an important technology accumulation of "National Financial IC card Security Testing Center", it had passed the technical approval of the expert review group whose leader was Ni Guangnan academician, supporting the nationalization of the testing and certification in China’s financial field. By practice, the system has good stability and ensures that the products which pass the system’s tests have high security, combined with standardized attack procedures. So the security testing service based on optical attack technologies for financial IC card is available for the society.