Additional resources here: https://microwiki.org/wiki/index.php/Infrared

Backside analysis can include:

This page is mostly geared towards fault injection, but general imaging is also lumped here.

Fabs often thin wafers and perform backside analysis to get at the transistors without going through metal. [Functional IC Analysis] doesn't look like they thinned and they got pretty decent refsults.

Sample preparation example

Summary:

https://www.riscure.com/uploads/2017/07/ringlight_datasheet.pdf

https://link.springer.com/chapter/10.1007/3-540-36400-5_2

http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.486.7647&rep=rep1&type=pdf

Simple Photonic Emission Analysis of AES

PICA

Reference systems

SS

https://www.cl.cam.ac.uk/techreports/UCAM-CL-TR-630.pdf

Hamamatsu C2741-03C + Mituotyo NIR objections on FS60Y

Halogen lamP: Gilway L6409-G has gold coating that is more IR reflective

Volodymyr Pikhur

‏ Source: https://twitter.com/vpikhur/status/973583545351335936

https://twitter.com/vpikhur/status/976998977026453504

https://twitter.com/vpikhur/status/975161177528459264

(11:54:38 AM) vold: I know for sure tube from lamp house to trinocular prism has IR coating
(11:54:54 AM) vold: but I tried side illumination and didn't work either
(11:55:13 AM) vold: maybe prism reflects a lot of IR too

(11:58:51 AM) vold: I tried now ring illuminator and different optics
(11:59:04 AM) vold: it was great on small magnification

(12:51:32 PM) vold: I bought 3W 1064nm c-mount diode out of ebay
(12:51:52 PM) vold: https://www.ebay.com/itm/1064nm-3W-100-m-Aperture-C-Mount-Laser-Diode-/262694273052

(01:01:24 PM) vold: right now I'm using bench PSU with chinese c-mount housing
(01:02:01 PM) vold: https://www.ebay.com/itm/House-Housing-Heatsink-for-C-mount-Laser-Diode-LD-Module-33-80mm-w-Glass-Lens-/120921382858

Using CCD: https://www.ptgrey.com/chameleon-13-mp-mono-usb-2-sony-icx445-camera

Got a good high level backside image. Looks like a CSP on some random PCB

Includes:

  • Camera: Hamamatsu C2741-03
    • Vidicon type. Are these more sensitive?
  • Lens: random eBay Chinese lens
    • Tried Mitutoyo NIR 20x objective but didn't get good results. Why / what happened?
  • Illumination: halogen light + fiber

Alphanov presentation: http://conferenze.dei.polimi.it/FDTC17/shared/FDTC%202017%20-%20session%203.1.pdf

  • Spot source: 980nm
  • Spot power: 250mW
  • Sport duration: 100ns to 200ns
  • Spot size: 1 to 10 microns

mcmaster PoC

Notes below

mcmaster TODO: try Brainscope illuminator(s). Order another fiber if necessary

Riscure / ALpHANOV

Riscure paper

Commercial solutions include:

Sample commercial unit

With IR imaging and laser fault injection

Camera:

Camera

Excellent resource: https://github.com/cameras/camerasIR

TODO: understand what is best for this application:

  • Vidicon
  • CCD
  • CMOS

mcmaster: I bought an MU800 with the intention of removing the IR filter, but then I realized it also has color filters on the pixels. Ended up using a GW CMOS camera like came with Brainscope instead

Above: “Figure 1. The electro-optical spectrum shows the relationship of the visible, short-wave infrared, mid-wave infrared and long-wave infrared wavelength bands. Also illustrated are the response curves for detectors in the visible and short-wave IR.” [SWIR IPT]

“InGaAs cameras have been replacing near-IR vidicon tubes in furnace inspection applications due to their high resolution, low lag, long lifetime, and superior signal-to-noise performance.” [SWIR IPT] Think this is primarily thermal focused though?

Above: Vidicon seems to have pretty bad efficiency in SWIR? Data is not explicitly given though. Source

Some good choices for cameras might be:

  • Astronomy cameras. Apogee seems to be pretty popular and had a few <$1000 USB options on eBay
    • Ex: Alta U2
      • 1536 x 1024, 9 x 9 micron pixels
      • 5 MHz 12-bit and 1 MHz 16-bit digitization
      • Programmable, intelligent cooling to 50 ° C below ambient
      • Linear Full Well (typical): 100K electrons
      • Peak QE (640 nm): 82% (1603ME)
      • Imaging Area: 13.82 x 9.22 mm (127 mm2)
      • Video out: USB
      • Exposure Time: 30 milliseconds to 183 minutes (2.56 microsecond increments)
      • Dark Current (typical): 0.1 e - /pixel/sec (-25 ° C)
  • Gel cameras? Alpha Innotech had a bunch. I think these are cooled CCDs
    • Ex: AlphaImager HP System
      • 1.4 Megapixel camera with 12 bit A/D
      • Full well capacity: 32,000 e-
      • Read noise: 31 e- rms
      • Dark current: 2e-/p/s
      • Video out: composite?

Illumination

mcmaster: I also might put silicon wafer in the imaging path to filter out the visible light. Unclear if my microscope optics can pass the IR light, say, even the relay lens. But I suppose if they have an IR filter it must pass some?. Ordering some IR lasers

mcmaster: ordered some IR LEDs. Going to try to make a ring illuminator

Optical fault injection

Basic idea: change how the circuit switches current in order to introduce a glitch. For a combinitorial circuit you probably want a CW laser to keep the glitch active. If its a CPU, you probably want a pulsed laser to trigger the glitch for a short period of time

Above: “FIGURE 3.1 Transmission spectrum of crystalline silicon from the visible to the near-IR.” (source)

In its simplest form, a CSP can be strobed with a camera flash

You need to excite the silicon with a photo of wavelength no more than 1.1 um (reference: “1234.5eV⋅nm/1.1eV is about 1100 nm. Putting 1100 back into the denominator yields 1.1 eV” (link))

Sergei paper references using 1065 nm laser. The paper shows using IR objectives. So maybe a broadband source would work okay too.

Above: silicon transmission marked with bandgap and for 980 nm laser (commonly available)

Possible sources:

  • Photo flash, such as with mask
  • 980 nm laser will have high attenuation (roughly 2% transmittance), but should work if power is high enough
    • Specifically? Maybe 100's of mW, maybe even 500. Needs testing
  • 1065 nm (ie 1064 nm from Nd:YAG) and such is probably ideal
    • Must Nd:YAG are flashlamp pumped
    • Depending on glitch target might want either flashlamp or diode pumped

2018-02-20: bought some sources:

2018-03-12

  • PoC worked!
    • IR filter placed on top of objective (where illuminator mounts)
      • Focused using visible light initially
      • Then installed IR filter
    • Random CCD camera from eBay (GW202D or something like that)
    • Heatlamp placed very close
      • High heat, not sustainable
    • Mituotyo NIR 10x objective
    • Used 2x filter
  • Ordered some IR LEDs last night
    • 1125-1416-ND: EMITTER IR 1060NM 5MM RADIAL
    • 1125-1331-ND: SWIR EMITTER 1200NM 1206 SMD
  • Order 2x more filter
    • Broke one
    • Want some spare
  • TODO: try silicon wafer as filter
    • Think I have a small one
    • Alternatively cut down a wafer

BJT emission

References

 
fi/backside.txt · Last modified: 2019/06/21 17:51 by mcmaster
 
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution 4.0 International
Recent changes RSS feed Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki