本文關鍵詞： WSN 無線收發(fā)機 OOK PLL 安全 侵入式、半侵入式物理攻擊 PUF　出處：《華中科技大學》2015年博士論文　論文類型：學位論文

【摘要】：無線傳感器網(wǎng)絡(Wireless Sensor Network,WSN)用于采集、處理和傳輸處于網(wǎng)絡覆蓋區(qū)域內(nèi)的溫度、濕度、壓力、光照強度以及氣流速度等多種環(huán)境數(shù)據(jù),它具有布網(wǎng)靈活、使用時間長、隱蔽性強以及容錯性高等特點,目前已經(jīng)廣泛應用于醫(yī)療健康、農(nóng)業(yè)環(huán)境、智能家居和智能建筑、火災救援、軍事以及海洋監(jiān)測等領域。由于其網(wǎng)絡節(jié)點資源受限并長時間暴露在外部環(huán)境中,無線傳感器網(wǎng)絡仍然面臨著成本、功耗和安全的問題。為了降低WSN的成本和功耗,本文分別在體系結(jié)構(gòu)和具體電路上對WSN的無線收發(fā)機芯片進行優(yōu)化研究;為了提升WSN的安全性,本文還對無線收發(fā)機芯片的物理安全防護措施展開了研究。首先,在體系結(jié)構(gòu)上,提出了一種新型的低中頻通斷鍵控(On/Off Keying,OOK)調(diào)制無線收發(fā)機結(jié)構(gòu),其核心思想是同時在模擬域和數(shù)字域?qū)Φ椭蓄l信號進行濾波:首先對放大后的中頻信號進行閾值比較,并放大至軌到軌數(shù)字信號,以實現(xiàn)模擬域的閾值比較濾波;然后數(shù)字基帶解調(diào)電路對該數(shù)字信號進行數(shù)字域的脈沖計數(shù)濾波。該接收結(jié)構(gòu)能夠提升接收機的抗噪聲性能,所要求的基帶輸入信號信噪比小于6 dB,且無需自動增益控制電路,基帶解調(diào)電路也較為簡單,因而總的功耗和面積均較小。對接收誤碼率的理論分析和MATLAB仿真驗證了該收發(fā)機結(jié)構(gòu)的有效性。其次,在具體電路上,為了降低無線收發(fā)機的成本,首先研究了無片上電感的射頻前端電路,包括無電感寬帶低噪放大器(Low Noise Amplifier,LNA)、鍵合線電感功率放大器(Power Amplifier,PA)以及基于環(huán)形振蕩器的鎖相環(huán)(Phase Locked Loop,PLL)電路;同時,提出了一種只有10個MOS晶體管構(gòu)成的線性電壓-電流轉(zhuǎn)換器,以進一步降低PLL的面積。該電壓-電流線性轉(zhuǎn)換器結(jié)構(gòu)簡單,不包含運算放大器和電阻,面積僅為2200μm2;然后,采用多個片上低壓差線性穩(wěn)壓源對各個電路模塊進行分電源供電,以減小片外器件的使用。而為了降低無線收發(fā)機的功耗,首先,對收發(fā)機進行電源管理,及時關閉無需工作的電路模塊。其次,針對PLL中功耗較大的高速預分頻器,提出了只有5條NMOS-like支路構(gòu)成的2/3預分頻器,該新型2/3預分頻器在降低功耗的同時,還能獲得較寬的工作頻率范圍,由其構(gòu)成的16/17預分頻器工作頻率范圍擴展至0.5~8 GHz,最大電流消耗僅為0.8 mA。然后,設計了工作在中低頻范圍的鏡像抑制濾波器、硬判決電路、基準電源電路以及基帶解調(diào)器電路。由于無電感寬帶LNA沒有鏡像抑制能力,因此采用了基于Nauto反相器跨導單元的片上復數(shù)濾波器對鏡像干擾信號進行抑制;同時,采用帶失調(diào)消除功能的硬判決電路對濾波后的中頻信號進行放大和閾值濾波;而基準電源包括電源管理、帶隙基準電壓源、數(shù)字類和模擬類低壓差線性穩(wěn)壓源和參考電壓產(chǎn)生電路等,用于為整個芯片提供不隨工藝、溫度和電壓變化的穩(wěn)定的電源和偏置電壓。為了將數(shù)字中頻信號轉(zhuǎn)換為有用接收信號,還基于脈沖計數(shù)理論提出了適合該新型OOK收發(fā)機的數(shù)字基帶解調(diào)器。最后,基于開關電容物理不可克隆函數(shù)(Physical Uncolonable Function,PUF)對無線收發(fā)機芯片進行了防外部侵入式和半侵入式攻擊研究:首先提出一種基于PUF和高級加密標準(Advanced Encryption Standard,AES)密碼算法的無線收發(fā)機安全體系結(jié)構(gòu),以對無線傳感器節(jié)點進行物理層保護;然后,提出了一種基于開關電容的PUF電路,用于為AES密碼算法提供穩(wěn)定的、統(tǒng)計性良好的密鑰;同時,利用開關電容PUF的容性敏感特性并結(jié)合隨機復位技術對無線收發(fā)機芯片進行了防外部侵入式和半侵入式攻擊設計。與現(xiàn)有芯片安全防護技術相比,該安全防護措施具有更高、更穩(wěn)定的防外部侵入式攻擊靈敏度,其所能檢測的由外部攻擊引起的容值變化為2.65 fF。仿真結(jié)果表明,本文提出的新型OOK無線收發(fā)機能夠正確進行數(shù)據(jù)的發(fā)送和接收,其芯片面積小于2.8 mm2,發(fā)射機和接收機的電流消耗分別低至7.6 mA和7.06 mA,同時實現(xiàn)了低成本和低功耗。測試結(jié)果表明,本文提出的芯片安全性防護措施能夠有效防止外部侵入式攻擊,并最終能夠?qū)崿F(xiàn)WSN數(shù)據(jù)的安全傳輸。研究成果對無線收發(fā)機低成本、低功耗設計以及芯片物理安全防護設計的發(fā)展有積極的理論和實踐意義。
[Abstract]:Wireless sensor network (Wireless Sensor Network, WSN) for acquisition, processing and transmission in the network within the coverage area of the temperature, humidity, pressure, light intensity and air velocity and other environmental data, it has a flexible layout, long service time, strong concealment and characteristics of higher fault tolerance, it has been widely used in medical treatment health, agricultural environment, intelligent Home Furnishing and intelligent building, fire rescue, military and marine monitoring. Due to the network resource constrained nodes and long time exposure to the external environment, the wireless sensor network is still faced with the cost, power consumption and safety problems. In order to reduce the cost and power consumption of WSN, are discussed in this paper and the specific the circuit architecture of wireless transceiver chip WSN to optimize the study; in order to enhance the safety of WSN, this paper also wireless transceiver chip physical security measures The study. First, in architecture, proposed a new low frequency on-off keying (On/Off Keying OOK) modulation wireless transceiver structure, its core idea is also to filter low frequency signals in the analog and digital domains: firstly, the intermediate frequency signal is amplified compared to the threshold, and amplification to rail to rail digital signal to achieve the analog domain threshold comparison filter; pulse counting filter and digital baseband demodulation circuit of the digital domain of the digital signal. The receiver can improve the anti noise performance of the receiver, the required baseband input signal to noise ratio is less than 6 dB, and without the automatic gain control circuit, baseband demodulation circuit is simple, and the total power consumption and area were small. The receiver BER theoretical analysis and MATLAB simulation results verify the validity of the transceiver structure. Secondly, in the specific circuit, in order to To reduce the cost of wireless transceiver, first studied the RF front-end circuit without on-chip inductor, including non inductance broadband low noise amplifier (Low Noise, Amplifier, LNA), bond wire inductance of the power amplifier (Power Amplifier, PA) and based on the phase-locked loop ring oscillator (Phase Locked, Loop, PLL) circuit; at the same time, put forward a linear voltage of only 10 MOS transistors - current converter, to further reduce the area of PLL. The linear voltage current converter has the advantages of simple structure, does not contain the operational amplifier and resistor, the area is only 2200 m2; then, using multiple on-chip low dropout linear regulator for each circuit module of in order to use the power supply, reducing scrap external devices. In order to reduce the power consumption, the first wireless transceiver, power management of transceiver, closed circuit module without the need to work in a timely manner. Secondly, according to the PLL power consumption The high speed prescaler, proposed 2/3 prescaler only 5 NMOS-like branch, the new 2/3 prescaler in reducing power consumption at the same time, but also get a wide frequency range, which is composed of the 16/17 prescaler working frequency range is extended to 0.5~8 GHz, the maximum current consumption is only 0.8 mA. then, image reject filter is designed to work in low frequency range, hard decision circuit, reference power circuit and baseband demodulator circuit. The inductance of broadband LNA mirror inhibition ability, so the suppression of image interference signal Nauto single chip inverter transconductance element based on complex filter; at the same time, amplification and threshold filter of intermediate frequency signal after filtering the hard decision circuit with offset cancellation function; while the benchmark power includes power management, bandgap voltage reference, digital and analog low dropout line Of the voltage source and reference voltage generation circuit, used for the entire chip provided with process, temperature and voltage variations of stable power supply and bias voltage. In order to convert digital signal for receiving signals, digital baseband demodulator is proposed for the new OOK transceiver based on the theory of pulse counting. Finally, switch capacitor physical unclonable functions (based on Physical Uncolonable Function, PUF) of the wireless transceiver chip to carry out the anti invasive and semi invasive external research attack: first proposed a PUF and based on the advanced encryption standard (Advanced Encryption Standard AES) wireless transceiver architecture of security of cryptographic algorithms, for physical layer protection for wireless sensor node; then, proposed a PUF based switched capacitor circuit, to provide a stable AES algorithm, statistical good key; at the same time, Using capacitive sensing characteristics of switched capacitor PUF and the wireless transceiver chip to prevent external invasive and invasive design with random reduction technology. Compared with the existing chip security protection technology, the safety protection measures has a higher and more stable against external intrusion attack sensitivity, it can detect caused by external attack capacitance value change is 2.65 fF.. The simulation results show that the new OOK wireless transceiver is proposed in this paper can correctly send and receive the data, the chip area is less than 2.8 mm2, the current consumption of the transmitter and receiver are as low as 7.6 mA and 7.06 mA, while achieving a low cost and low power consumption. The test results show that chip, safety protection measures are proposed in this paper can effectively prevent outside intrusion attack, and ultimately to achieve the security of WSN data transmission. The research results of low cost wireless transceiver There are positive theoretical and practical significance in the development of low power design and the development of chip physical security protection design.

【學位授予單位】：華中科技大學
【學位級別】：博士
【學位授予年份】：2015
【分類號】：TN859;TN402
，

本文編號：1449541