Synthesizer Glitch Energy

The rapid switching of a synthesizer's voltage-controlled oscillator (VCO) and phase-locked loop (PLL) generates broadband spectral splatter. This energy is not confined to the target channel and manifests as a momentary rise in the noise floor across adjacent frequencies. The specific shape and bandwidth of this splatter are directly related to the loop filter's transient response and the switching speed of the charge pump, making it a rich source of identifying features.

The path the instantaneous frequency takes to reach its steady-state value is a unique frequency settling profile. Instead of an instantaneous jump, the synthesizer exhibits a trajectory that may include PLL overshoot, damped oscillation, and exponential convergence. This trajectory is a direct analog of the PLL's damping factor and natural frequency, which are defined by precise, tolerance-specific component values.

During a channel change, the phase relationship between the old and new frequencies is often non-deterministic, creating an abrupt phase discontinuity. The subsequent transient phase trajectory in the complex IQ plane as the loop re-acquires lock reveals the non-linear dynamics of the phase detector and VCO. This trajectory is highly sensitive to component-level variances.

The total duration of the glitch event, from the initiation of the channel change to final settling, is a critical parameter. The transient energy envelope—the time-varying power of the glitch—is characterized by its attack, decay, and any ringing artifacts. The shape of this envelope is dictated by the charge pump current, loop filter capacitance, and VCO gain, all of which are subject to manufacturing tolerances.

The glitch energy often contains discrete, non-harmonic spurious tones that are not related to the carrier or reference frequency. These tones arise from transient intermodulation within the synthesizer's mixers and dividers, or from momentary injection locking between the VCO and other on-chip oscillators. The exact frequency and amplitude of these spurs form a distinct spectral signature.

Because the glitch is a non-stationary, non-Gaussian event, its transient kurtosis and transient bispectrum reveal non-linear phase couplings invisible to standard power spectral density analysis. These higher-order statistics can isolate the deterministic, non-linear hardware interactions from background Gaussian noise, providing a robust feature set for device identification.

The complete time-domain response of a phase-locked loop (PLL) as it acquires lock after a channel change or power-up event. This transient encompasses the frequency overshoot, phase error convergence, and damped oscillations that occur before the loop stabilizes. The settling profile is highly dependent on component tolerances—specifically the loop filter capacitor and charge pump current—making it a rich source of unique hardware signatures. Unlike steady-state phase noise, the settling transient exposes the dynamic non-linear behavior of the voltage-controlled oscillator (VCO) and phase detector. The duration of this period, known as PLL lock time, is a critical parameter for frequency-hopping systems and a primary window for fingerprint extraction.

The time-dependent path of the instantaneous frequency deviation from the nominal carrier during a glitch event. This trajectory visualizes the complete frequency settling behavior of the transmitter's synthesis chain, revealing the VCO's tuning sensitivity and the loop filter's damping factor. Analysis involves plotting the instantaneous frequency—often extracted via zero-crossing analysis or the derivative of the instantaneous phase—against time. A critically damped system returns monotonically to the carrier frequency, while an underdamped system exhibits ringing artifacts. The shape of this trajectory, including the peak frequency error and settling time, serves as a distinct, unclonable identifier of the synthesizer hardware.

Broadband spectral noise generated by the rapid switching of the transmitter during a channel change or power-up event. This momentary interference spreads energy into adjacent channels, a phenomenon historically termed key-click analysis in telegraphy systems. The splatter's bandwidth and power spectral density are directly proportional to the switching speed of the synthesizer and the rise time of the control signals. Faster switching produces wider, lower-amplitude splatter, while slower switching concentrates the energy. The unique spectral shape of this splatter—including its adjacent channel power ratio (ACPR) during the transient—reveals the non-linear switching characteristics of the synthesizer's digital logic and charge pump.

The undesired shift in the voltage-controlled oscillator's (VCO) frequency caused by a sudden impedance change at its output port. When the power amplifier (PA) turns on or changes state, the abrupt load variation reflects back through the matching network to the VCO, momentarily pulling its oscillation frequency off target. This effect is distinct from PLL dynamics because it occurs through direct electromagnetic coupling rather than the loop control path. The magnitude and duration of the pulling are determined by the reverse isolation of the buffer amplifier stage and the impedance matching network topology. The resulting frequency glitch is a direct fingerprint of the physical layout and component selection.

The momentary fluctuation in the transmitter's regulated supply voltage caused by the inrush current during a synthesizer state change. When the charge pump, dividers, and VCO switch simultaneously, the sudden current demand creates a voltage sag on the supply rail due to the equivalent series resistance (ESR) of decoupling capacitors and the impedance of the power distribution network (PDN). This sag directly amplitude-modulates the VCO output, imprinting the PDN's electrical characteristics onto the RF carrier. The resulting amplitude-frequency co-modulation during the glitch is a unique signature of the printed circuit board layout, capacitor selection, and voltage regulator transient response.

A higher-order spectral analysis technique that reveals quadratic phase coupling within the transient glitch signal. Unlike the power spectrum, which loses phase information, the bispectrum detects non-linear interactions between different frequency components generated during the synthesizer's switching event. This method effectively suppresses Gaussian noise while highlighting the deterministic non-linearities of the hardware—such as the mixing products between the VCO pulling artifact and the power supply modulation. The resulting two-dimensional frequency-frequency map provides a translation-invariant feature space that is robust to channel effects and highly discriminative for individual device identification.