成本在智能卡集成电路安全特性集成中的作用
The Role of Cost in the Integration of Security Features in Integrated Circuits for Smart Cards
摘要：
本文探讨了成本在安全集成电路开发和生产中的作用。首先，我对智能卡上的硬件攻击及其背后的一些原因做了一个小小的介绍。随后，我介绍了集成到智能卡的芯片的生产阶段，并试图确定影响每个阶段的成本。我继续确定如何增加这种集成电路的安全功能可能会影响其开发和生产的成本。然后，我对开发针对此类芯片的硬件攻击的成本进行了更彻底的调查，并试图估计此类攻击的潜在损害和损失。我还继续研究降低安全芯片生产成本的潜在方法，同时确定采用它们的困难。本文最后得出的结论是，为用于安全应用程序的芯片添加安全功能是非常值得的，因为开发攻击的成本与开发和生产芯片的成本相当，而这种攻击造成的潜在损害和损失可能远远高于这些成本。因此，尽管集成电路的生产和开发需要一定的成本，并且安全性引入了进一步的额外成本，但在这种芯片中，安全性本质上是不可避免的。最后，我还指出，安全是一个不断发展的概念，并不旨在使芯片完全不可穿透，因为这可能是不可能的，而是将潜在的风险，包括被破坏的风险，降低到可接受的水平。因此，需要在安全水平与费用和风险水平之间找到平衡。
英文摘要：
This essay investigates the role of cost in the development and production of secure integrated circuits. Initially, I make a small introduction on hardware attacks on smart cards and some of the reasons behind them. Subsequently, I introduce the production phases of chips that are integrated to smart cards and try to identify the costs affecting each one of them. I proceed to identify how adding security features on such integrated circuits may affect the costs of their development and production. I then make a more thorough investigation on the costs of developing a hardware attack for such chips and try to estimate the potential damages and losses of such an attack. I also go on to examine potential ways of reducing the cost of production for secure chips, while identifying the difficulties in adopting them. This essay ends with the conclusion that adding security features to chips meant to be used for secure applications is well worth it, because the costs of developing attacks are of comparable amounts to the costs of developing and producing a chip and the potential damages and losses caused by such attacks can be way higher than these costs. Therefore, although the production and development of integrated circuits come at a certain cost and security introduces further additional costs, security is inherently unavoidable in such chips. Finally, I additionally identify that security is an evolving concept and does not aim to make a chip totally impenetrable, as this may be impossible, but to lower the potential risks, including that of being compromised, to acceptable levels. Thus, a balance needs be found between the level of security and the levels of cost and risk.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
