Semiconductor chip, communication method, and communication system

Abstract

The present disclosure relates to a semiconductor chip, a communication method, and a communication system that enable reliable management of the authenticity of semiconductor chips. A communication interface communicates with a host in accordance with a predetermined communication standard, and a non-rewritable storage unit stores ID information in a non-rewritable state at the time of shipment. Then, in response to a request from an external terminal via the host, the ID information stored in the non-rewritable storage unit is output from the communication interface. The present technology can be applied, for example, to communication systems that verify the authenticity of CMOS image sensors.

Description

Semiconductor chip, communication method, and communication system

[0001] The present disclosure relates to a semiconductor chip, a communication method, and a communication system, and more particularly to a semiconductor chip, a communication method, and a communication system that enable reliable management of the authenticity of the semiconductor chip.

[0002] In recent years, there has been a strong demand for traceability of various components, including semiconductor chips such as CMOS (Complementary Metal-Oxide-Semiconductor) image sensors. For example, with CMOS image sensors, there is a need for a function that links information required by the market, such as the CMOS image sensor itself, the manufacturing environment and materials involved in the production of CMOS image sensors.

[0003] Conventionally, as disclosed in Patent Document 1, a technique has been proposed for performing highly secure communication between an image sensor and a host (application processor).

[0004] International Publication No. 2022 / 050057

[0005] However, in the conventional technology, while it is possible to perform secure communication between an image sensor and a host directly connected to the image sensor, it is not possible to perform secure communication between the image sensor and an external user terminal. Therefore, even if the host can confirm that the information held by the image sensor is correct, the external user terminal cannot confirm that the information held by the image sensor is correct, and it has been difficult, for example, for the external user terminal to manage the authenticity of the image sensor.

[0006] The present disclosure has been made in view of the above circumstances, and makes it possible to reliably manage the authenticity of semiconductor chips.

[0007] A semiconductor chip according to one aspect of the present disclosure comprises a communication interface that communicates with a host in accordance with a predetermined communication standard, and a non-rewritable memory unit that stores ID information in a state that makes it impossible to rewrite it at the time of shipment, and outputs the ID information stored in the non-rewritable memory unit from the communication interface in response to a request from an external terminal via the host.

[0008] A communication method according to one aspect of the present disclosure includes a semiconductor chip having a communication interface for communicating with a host in accordance with a predetermined communication standard and a non-rewritable memory unit for storing ID information in a state that cannot be rewritten at the time of shipment, and outputting the ID information stored in the non-rewritable memory unit from the communication interface in response to a request from an external terminal via the host.

[0009] A communication system according to one aspect of the present disclosure is a communication system comprising a semiconductor chip having a communication interface for communicating with a host in accordance with a predetermined communication standard, a non-rewritable memory unit for storing ID information in a state that cannot be rewritten at the time of shipment, and an external terminal for sending requests via the host, and in response to the request, outputs the ID information stored in the non-rewritable memory unit from the communication interface.

[0010] In one aspect of the present disclosure, communication with a host is performed via a communication interface in accordance with a predetermined communication standard, and ID information is stored in a non-rewritable storage unit in a state that makes it impossible to rewrite it at the time of shipment. Then, in response to a request from an external terminal via the host, the ID information stored in the non-rewritable storage unit is output from the communication interface.

[0011] FIG. 1 is a block diagram showing a configuration example of a first embodiment of a communication system to which the present technology is applied. FIG. 2 is a diagram showing an example of a product ID and a classification ID. FIG. 3 is a diagram explaining IF functions. FIG. 4 is a block diagram showing a configuration example of a second embodiment of a communication system to which the present technology is applied. FIG. 5 is a diagram explaining an example of a first selection method for selecting ID information. FIG. 6 is a diagram explaining an example of a second selection method for selecting ID information. FIG. 7 is a sequence diagram explaining an example of communication processing. FIG. 8 is a block diagram showing a configuration example of a third embodiment of a communication system to which the present technology is applied. FIG. 9 is a diagram showing an example of the format of image data into which signature data is inserted. FIG. 10 is a diagram explaining an example of use of ID information. FIG. 11 is a block diagram showing a configuration example of an embodiment of a computer to which the present technology is applied.

[0012] Hereinafter, specific embodiments to which the present technology is applied will be described in detail with reference to the drawings.

[0013] <First Configuration Example of Communication System> FIG. 1 is a block diagram showing a configuration example of a first embodiment of a communication system to which the present technology is applied.

[0014] In the communication system 11 shown in FIG. 1, the user terminal 12 communicates with the module 13, thereby enabling management of the authenticity of the CMOS image sensor 32 mounted on the module 13.

[0015] The user terminal 12 is configured with a startup confirmation unit 21 and an authenticity confirmation unit 22, and is used, for example, when a user of an end product such as an electronic device equipped with the module 13 confirms the authenticity of the CMOS image sensor 32 included in the module 13. Furthermore, the user terminal 12 can transmit and receive data encrypted using a common key, public key, private key, or session key to and from the CMOS image sensor 32 via a host 31 provided within the module 13.

[0016] The startup confirmation unit 21 communicates with the host 31 of the module 13, transmits a startup confirmation request requesting confirmation that the CMOS image sensor 32 is started, and receives a startup notification response notifying that the CMOS image sensor 32 is started. Then, when the startup confirmation unit 21 confirms that the CMOS image sensor 32 is started, it notifies the authenticity confirmation unit 22 of this fact.

[0017] When the activation confirmation unit 21 confirms that the CMOS image sensor 32 is activated, the authenticity confirmation unit 22 transmits a sensor authenticity certification request to the host 31 of the module 13, requesting certification of the authenticity of the CMOS image sensor 32. Then, the authenticity confirmation unit 22 receives a sensor authenticity certification response transmitted from the host 31 as a result of the sensor authenticity certification process performed in the CMOS image sensor 32.

[0018] The module 13 includes a host 31 and a CMOS image sensor 32 .

[0019] The host 31 can communicate with both the user terminal 12 and the CMOS image sensor 32. For example, the host 31 communicates with the communication IF 41 of the CMOS image sensor 32 in accordance with a communication standard such as SPI (Serial Peripheral Interface), I2C (Inter-Integrated Circuit), or I3C (Improved Inter Integrated Circuit). The host 31 has a function for confirming the activation of the CMOS image sensor 32 (for example, a function for knowing the start timing of a WDT (Watch Dog Timer)) and a function for receiving proof of authenticity of the CMOS image sensor 32 (for example, a function for receiving a sensor authenticity proof request and random data required for proof of authenticity).

[0020] For example, when the host 31 receives a startup confirmation request transmitted from the startup confirmation unit 21 and the CMOS image sensor 32 is not started, the host 31 can power on the CMOS image sensor 32 and execute a startup sequence. After starting the CMOS image sensor 32, or if the CMOS image sensor 32 is started, the host 31 transmits a startup notification response to the startup confirmation unit 21.

[0021] For example, when the host 31 receives a sensor authenticity certification request sent from the authenticity verification unit 22, it can perform register communication in accordance with a sequence determined by the CMOS image sensor 32. Here, the host 31 is basically only required to be able to write to or read from the registers of the CMOS image sensor 32, and can communicate with the CMOS image sensor 32 using functions provided by a general host. Furthermore, a security function is not required for the communication itself between the host 31 and the CMOS image sensor 32. For example, in the communication system 11, the security function is required only for the CMOS image sensor 32 that issues the signature and the user terminal 12 that verifies the signature. Therefore, even if a security function is provided between the host 31 and the CMOS image sensor 32, the system can operate even when the security function is not yet ready (e.g., immediately after startup).

[0022] The CMOS image sensor 32 is configured to include a communication IF (Interface) 41, a rewritable storage unit 42, a non-rewritable storage unit 43, a signature processing unit 44, and a processing state output terminal 45. The CMOS image sensor 32 further includes pixels 51 that output pixel values, a data processing unit 52 that performs data processing on image data formed from the pixel values ​​output from the pixels 51, and an output IF 53 that outputs the image data that has been processed by the data processing unit 52 to the outside in a predetermined format.

[0023] The communication IF 41 can communicate with the host 31 in accordance with communication standards such as SPI, I2C, and I3C, and writes data sent from the host 31 into the rewritable storage unit 42 .

[0024] The rewritable storage unit 42 is configured, for example, with a non-volatile memory or the like, and stores data written via the communication IF 41. For example, the rewritable storage unit 42 is provided with a register 61 that stores various settings for the CMOS image sensor 32, a request receiving area 62 that stores a sensor authenticity certification request transmitted from the user terminal 12, and a security information area 63 that stores a sensor authenticity certification response output from the CMOS image sensor 32.

[0025] The non-rewritable storage unit 43 is configured, for example, by a fuse-type PROM (Programmable ROM) that is not rewritable when the CMOS image sensor 32 is shipped, and stores data that should be prohibited from being rewritten after the CMOS image sensor 32 is shipped. For example, the non-rewritable storage unit 43 is provided with an ID information area 64 that stores ID (Identification) information, and an information area 65 that stores information other than the ID information.

[0026] In response to a sensor authenticity certification request transmitted from the user terminal 12, the signature processing unit 44 performs a signature process in which the ID information read from the ID information area 64 of the non-rewritable storage unit 43 is encrypted using a common key or a public key to apply a signature, and stores the signature data, with the ID information signed, in the security information area 63. The signature data stored in the security information area 63 can be decrypted in the authenticity verification unit 22 using a private key corresponding to the common key or public key used by the signature processing unit 44. Meanwhile, the sensor authenticity certification request transmitted from the user terminal 12 is encrypted using a common key or a public key (first key), and the signature processing unit 44 can decrypt the encrypted sensor authenticity certification request using a private key (second key) corresponding to the common key or public key used for encryption. Furthermore, the signature processing unit 44 outputs a processing state indicating the start or end of the sensor authenticity certification process to the host 31 via the processing state output terminal 45. The encryption method applied to the ID information and the encryption method applied to the sensor authenticity certification request are not limited to the above, and for example, a session key encryption method may be used.

[0027] Here, the non-rewritable storage unit 43 is configured to, for example, reflect information when the CMOS image sensor 32 is mounted, or to write information during the manufacture of the CMOS image sensor 32, and then to make the information non-rewritable by cutting fuses. Therefore, when the CMOS image sensor 32 is shipped, the information written in the non-rewritable storage unit 43 can be made non-rewritable.

[0028] The data stored in the information area 65 of the non-rewritable storage unit 43 includes, for example, class information, which will be described later, data for linking generation conditions from the user terminal 12 or the like, a shipping status indicating the state of the CMOS image sensor 32 at the time of shipping, and shipping destination data indicating the purchase destination of the CMOS image sensor 32. Since these data can be written when the individual evaluation results and the purchase destination are determined, the CMOS image sensor 32 is shipped after being written to the non-rewritable storage unit 43, where the information cannot be rewritten by cutting the fuses.

[0029] At least a product ID and a category ID are used as the ID information stored in the ID information area 64 of the non-rewritable storage unit 43 .

[0030] The product ID is an ID for identifying the product as the CMOS image sensor 32. That is, the product ID is an ID for information common to all CMOS image sensors 32, and includes information about the manufacturer that produced the CMOS image sensor 32 (hereinafter referred to as the CIS manufacturer).

[0031] The classification ID is an ID (or a group of IDs consisting of multiple IDs) linked to the manufacturing environment, materials, etc. of the CMOS image sensor 32. For example, in a stacked CMOS image sensor 32 in which multiple chips are stacked, each chip may be designed / manufactured by a different foundry, and multiple IDs linked to those foundries are used as the classification ID of the CMOS image sensor 32. In addition, various types of information required in the market may be linked to the classification ID.

[0032] The ID information may include an individual identification ID for individually identifying the CMOS image sensor 32. For example, although it is not essential to include an individual identification ID in the ID information, including an individual identification ID in the ID information can enhance security.

[0033] The product ID and classification ID included in the ID information may be issued by different sources, such as a CIS manufacturer, a third-party organization, or a contractor (such as a foundry, equipment manufacturer, or material manufacturer). Note that the output of the product ID and classification ID may be switched depending on the source of issue.

[0034] Furthermore, when using product IDs and classification IDs issued by a CIS manufacturer, or when a CIS manufacturer merges information such as the manufacturing environment and receives new certification from a third-party organization, it is possible to combine information such as the manufacturing environment and material manufacturer into a product ID by changing the product ID for each manufacturing environment or material manufacturer, i.e., to merge multiple classification IDs. For example, although all classification IDs may be merged into a product ID, it is preferable to separate each classification ID so that customers can use only the information they need.

[0035] FIG. 2 shows an example of a product ID and a category ID used as ID information.

[0036] For example, a product ID is an ID for information common to all products and is issued by a CIS manufacturer. A classification ID a is an ID linked to foundry information and is issued by a foundry. A classification ID b is an ID linked to material information and / or material manufacturer information and is issued by a material manufacturer.

[0037] The product ID' is an ID for information common to all products and is issued by a third party. The classification ID a' is an ID linked to foundry information and is issued by a third party. The classification ID b' is an ID linked to material information and / or material manufacturer information and is issued by a third party.

[0038] Product ID'' is an ID for information common to all products, and is issued by a CIS manufacturer or a third-party organization. Classification IDx is an ID for identifying a group of information such as foundry information and material information, and is issued by a CIS manufacturer or a third-party organization. In other words, classification IDs for information required in the supply chain may be merged, and classification IDa' and classification IDb' are merged to form classification IDx. Furthermore, all classification IDs may be merged into a product ID, but there are cases where this is not possible.

[0039] For example, if the CMOS image sensor 32 is designed and manufactured by multiple foundries or if the materials used in the CMOS image sensor 32 are provided by multiple material manufacturers, linking the product ID with multiple classification IDs makes it possible to match the information disclosed by the CIS manufacturer and link it to information about the foundry, material manufacturer, etc. Then, the CIS manufacturer discloses the minimum necessary information from the linked multiple pieces of information to customers and users of the end product. At this time, the disclosure content can be different for each customer and user.

[0040] In this way, the product ID and category ID stored in the ID information area 64 of the non-rewritable storage unit 43 are used as ID information output from the CMOS image sensor 32 in response to a request for authenticity certification. In addition to the ID information, shipping status and shipping destination data stored in the information area 65 may also be output.

[0041] The IF function of the CMOS image sensor 32 will be described with reference to FIG.

[0042] In order to securely output ID information and the like, the CMOS image sensor 32 is provided with a register IF (IF functions necessary to realize the sequence (such as a register and a RAM area capable of communication)) as shown in FIG. 3 as a means of communication with the host 31.

[0043] As shown in A of FIG. 3, CIS_AUT_REQ is a register IF into which the host 31 writes an authentication authentication request. CIS_AUT_REQDATA is a register IF into which the host 31 writes request data (RB ∥ Text1). CIS_AUT_ACKDATA is a register IF into which the host 31 reads response data (TokenAB ∥ CertA). CIS_AUT_MODE is a register IF into which the host 31 writes to select the ID information to be output in the sensor authentication authentication process (output mode selection). For example, when CIS_AUT_MODE is 0, all ID information is selected to be output, and when CIS_AUT_MODE is other than 0, ID information depending on the product or market is selected to be output.

[0044] If the CMOS image sensor 32 has an IF function for other security purposes, the IF function may be shared with the IF function. For example, a data area for other security purposes may be shared and used as an area for writing request data and response data, or the security command may be extended to perform command extension instead of the authentication certification request register.

[0045] As described above, the processing state is output to the host 31 via the processing state output terminal 45, and the register IF can be used so that the host 31 receives a one-bit processing state indicating that the authentication process is currently being executed, as shown in B of Fig. 3. Note that registers and signals may be shared with other functions.

[0046] The communication system 11 is configured as described above, and the CMOS image sensor 32 can output the ID information stored in the non-rewritable storage unit 43 from the host 31 in response to an authenticity certification request from the user terminal 12 via the host 31. In the communication system 11, the authenticity of the CMOS image sensor 32 is managed in the user terminal 12 based on the ID information output from the CMOS image sensor 32.

[0047] Furthermore, in the communication system 11, data encrypted using a common key or a public key (such as an encrypted sensor authenticity certification request or signature data in which ID information is signed) can be transmitted and received between the user terminal 12 and the signature processing unit 44. This enables the communication system 11 to communicate securely with a user terminal 12 that is not directly connected to the CMOS image sensor 32, and enables more reliable management of the authenticity of the CMOS image sensor 32.

[0048] In the communication system 11, the block including the signature processing unit 44 required for signature processing is not always used, so the CMOS image sensor 32 can be configured to activate only when a signature is required. In other words, the supply of power or clock to each block included in the area enclosed by the dashed-dotted line in FIG. 1 (the signature processing unit 44, the request receiving area 62, the security information area 63, the ID information area 64, and the information area 65) is normally stopped. Then, only when signature processing is performed, for example, upon a startup request from the user terminal 12, can the startup register (CIS_AUT_ACTV) be turned on, thereby supplying power or clock to each block included in the area enclosed by the dashed-dotted line in FIG. 1 .

[0049] Furthermore, the communication system 11 can securely output information stored in the CMOS image sensor 32, such as ID information. For example, using a public key pair stored in the CMOS image sensor 32 and a CA (Certificate Authority) certificate for that public key, the ID information can be output to a party outside the module 13, such as the user terminal 12, with a certificate that can only be attached by the CMOS image sensor 32 attached.

[0050] In the communication system 11, the user terminal 12 transmits and receives a sensor authenticity certification request and a sensor authenticity certification response via the host 31 and the communication IF 41 of the CMOS image sensor 32, but there is no need to protect the communication during this process, and a simple sequence may suffice. In other words, in the communication system 11, it is sufficient if communication is realized from outside the module 13 in accordance with a sequence defined by a general standard through a block such as the host 31 that has the function of communicating with the CMOS image sensor 32.

[0051] Furthermore, when verifying the authenticity of the CMOS image sensor 32 (determining authenticity) in a customer's manufacturing environment, the simple communication IF itself does not need to have security functions, and for example, a personal computer used in the customer's manufacturing environment can be used.

[0052] <Second Configuration Example of Communication System> Fig. 4 is a block diagram showing a configuration example of a second embodiment of a communication system to which the present technology is applied. In the communication system 11A shown in Fig. 4, blocks common to the communication system 11 of Fig. 1 are assigned the same reference numerals, and detailed description thereof will be omitted.

[0053] That is, in the communication system 11A, the user terminal 12 and the host 31 are configured in the same manner as in the communication system 11 of Fig. 1. On the other hand, the communication system 11A is configured differently from the communication system 11 of Fig. 1 in that the CMOS image sensor 32A is provided with an information output selection unit 46.

[0054] The information output selection unit 46 selects the ID information to be output from the CMOS image sensor 32A by referring to the CIS_AUT_MODE described above with reference to Fig. 3, reads the ID information from the ID information area 64, and supplies it to the signature processing unit 44. For example, the information output selection unit 46 can select the ID information to be output from the CMOS image sensor 32A by employing any one of the first to third selection methods described below.

[0055] The first selection method by which the information output selection unit 46 selects ID information is to store multiple tables in which specified product IDs and classification IDs are registered as ID information, and select which table to output according to CIS_AUT_MODE.

[0056] For example, in the first selection method, three tables as shown in FIG. 5 are maintained. FIG. 5A shows a table in which a product ID issued by a CIS manufacturer, a classification ID a issued by a foundry, and a classification ID b issued by a material manufacturer are registered as ID information. FIG. 5B shows a table in which a product ID' issued by a third-party organization, a classification ID a' issued by a third-party organization, and a classification ID b' issued by a third-party organization are registered as ID information. FIG. 5C shows a table in which a product ID'' issued by a CIS manufacturer or a third-party organization and a classification ID x issued by a CIS manufacturer or a third-party organization are registered as ID information.

[0057] Then, when CIS_AUT_MODE=0, the information output selection unit 46 selects the table shown in A of Figure 5, when CIS_AUT_MODE=1, the table shown in B of Figure 5, and when CIS_AUT_MODE=2, the table shown in C of Figure 5.

[0058] The second selection method by which the information output selection unit 46 selects ID information is to select which ID information to output by allocating ID information to each bit of CIS_AUT_MODE.

[0059] For example, in the second selection method, ID information to be output can be assigned to each bit of CIS_AUT_MODE as shown in Fig. 6. For example, a product ID issued by a CIS manufacturer can be assigned to bit 0 of CIS_AUT_MODE, a classification ID a issued by a foundry can be assigned to bit 1 of CIS_AUT_MODE, a classification ID b issued by a material manufacturer can be assigned to bit 2 of CIS_AUT_MODE, a product ID' issued by a third party can be assigned to bit 3 of CIS_AUT_MODE, a classification ID a' issued by a third party can be assigned to bit 4 of CIS_AUT_MODE, a classification ID b' issued by a third party can be assigned to bit 5 of CIS_AUT_MODE, a product ID'' issued by a CIS manufacturer or a third party can be assigned to bit 6 of CIS_AUT_MODE, and a classification ID x issued by a CIS manufacturer or a third party can be assigned to bit 7 of CIS_AUT_MODE.

[0060] The information output selection unit 46 outputs the ID information assigned to each bit of CIS_AUT_MODE when that bit is 1, and does not output the ID information assigned to that bit when that bit is 0. Specifically, when the 0th bit of CIS_AUT_MODE is 1, the product ID is output, and when the 3rd bit of CIS_AUT_MODE is 0, the product ID' is not output.

[0061] The third selection method by which the information output selection unit 46 selects ID information is a method in which a table is selected as in the first selection method, and then information to be output is selected from the information in that table. For example, after a table is selected as in the first selection method, it is possible to select which information in the table to output using a separate register or fuse. For example, it is possible to select to output only the product ID without outputting the classification ID.

[0062] Of course, the information output selection unit 46 may select the ID information to be output from the CMOS image sensor 32A using a selection method other than the first to third selection methods described above.

[0063] Furthermore, when outputting ID information, the CMOS image sensor 32A can output class information that specifies the range of disclosure together with the ID information. For example, the class information can be used to set the disclosure level of the ID information output from the CMOS image sensor 32A, and can limit the information that can be disclosed by signing the class information including the disclosure level when the user inquires with a third party organization.

[0064] The user can then output the class information indicating the scope of disclosure together with the ID information to a third party organization that holds certification information such as a certificate. At this time, by applying a signature to the class information using the signature processing unit 44, the class information can be output in a form that cannot be forged, making it possible to restrict the information submitted via the third party organization.

[0065] An example of communication processing performed in the communication system 11A will be described with reference to the sequence diagram shown in FIG.

[0066] For example, after the activation of the CMOS image sensor 32A is confirmed, in step S11, communication is performed according to the interface between the user terminal 12 and the host 31, and the authenticity confirmation unit 22 transmits a sensor authenticity certification request requesting certification of the authenticity of the CMOS image sensor 32A. The sensor authenticity certification request includes request data (data [R B When the host 31 has completed receiving the sensor authenticity certification request, the process proceeds to step S12.

[0067] In step S12, the host 31 communicates with the communication IF 41 and stores the request data (data [R BWrite data by writing [Text1].

[0068] In step S13, the host 31 communicates with the communication IF 41, writes CIS_AUT_MODE to the request receiving area 62 of the rewritable storage unit 42, and sets a disclosure area to be disclosed to the user terminal 12.

[0069] In step S14, the host 31 communicates with the communication IF 41, writes an authenticity certification request to the request receiving area 62 (CIS_AUT_REQ) of the rewritable memory unit 42, and makes a signature data generation request to generate signature data in which a signature is applied to the ID information.

[0070] When the processes of steps S12 to S14 are completed, the process proceeds to step S15.

[0071] In step S15, the signature processing unit 44 outputs a processing state indicating the start of the sensor authenticity certification processing to the host 31 via the processing state output terminal 45, and the processing proceeds to step S16.

[0072] In step S16, the CMOS image sensor 32A executes a sensor authenticity certification process. In the sensor authenticity certification process, the information output selection unit 46 references the CIS_AUT_MODE written in the request receiving area 62 by the host 31 in step S13, selects ID information to be output from the CMOS image sensor 32A, reads the ID information from the ID information area 64, and supplies it to the signature processing unit 44. The signature processing unit 44 signs the ID information supplied from the information output selection unit 46, and writes the signature data with the ID information signed to the security information area 63 of the rewritable storage unit 42. When the sensor authenticity certification process is completed, the process proceeds to step S17.

[0073] In step S17, the signature processing unit 44 outputs a processing state indicating the end of the sensor authenticity certification processing to the host 31 via the processing state output terminal 45, and the processing proceeds to step S18.

[0074] In step S18, the host 31 communicates with the communication IF 41 and performs data reading to read the signature data (data [TokenAB ∥ CertA]) written in the security information area 63 (CIS_AUT_ACKDATA) of the rewritable storage unit 42.

[0075] In step S19, communication is performed between the user terminal 12 and the host 31 according to the interface, and the host 31 transmits, as a sensor authenticity certification response, the signature data (data [TokenAB ∥ CertA]) read from the security information area 63 (CIS_AUT_ACKDATA) of the rewritable storage unit 42. Then, when the authenticity confirmation unit 22 of the user terminal 12 receives the sensor authenticity certification response, the processing ends.

[0076] As described above, the communication system 11A has a communication area into which data sent from the user terminal 12 can be written, and the host 31 can exchange signature data with a signature applied to the ID information between the user terminal 12 and the CMOS image sensor 32A simply by sending and receiving data through the conventional register communication function.

[0077] Furthermore, in the communication system 11A, the host 31 has a register or fuse that limits the ID information disclosed by the CMOS image sensor 32A, so that it can output only the ID information in the CMOS image sensor 32A that the host 31 is allowed to disclose. For example, in the case of a register, a disclosure area is set in step S13 before a signature data generation request is made in step S14. In the case of a fuse, the disclosure area is set when the module 13 is incorporated into an electronic device such as a camera, so the process of step S13 for setting the disclosure area can be skipped.

[0078] <Third Configuration Example of Communication System> Fig. 8 is a block diagram showing a configuration example of a third embodiment of a communication system to which the present technology is applied. Note that in the communication system 11B shown in Fig. 8, blocks common to the communication system 11 in Fig. 1 are assigned the same reference numerals, and detailed description thereof will be omitted.

[0079] That is, in the communication system 11B, the user terminal 12 and the host 31 are configured in the same manner as in the communication system 11 of Fig. 1. On the other hand, the communication system 11B is configured differently from the communication system 11 of Fig. 1 in that the CMOS image sensor 32B includes a signature processing unit 44B and an output IF 53B.

[0080] The signature processing unit 44B performs a signature process to sign the ID information read from the ID information area 64 of the non-rewritable storage unit 43, and supplies the signed data resulting from the signed ID information to the output IF 53B.

[0081] The output IF 53B inserts the signature data supplied from the signature processing unit 44B into a predetermined location in the format used when outputting image data from the CMOS image sensor 32B, and outputs the image data and the signature data together.

[0082] For example, as shown in A of Fig. 9, SLVS-EC (Scalable Low Voltage Signaling with Embedded Clock) and MIPI (Mobile Industry Processor Interface) employ a format that provides embedded data (EBD) for adding information from the CMOS image sensor 32B to image data (RAW data). The output IF 53B can insert signature data into this embedded data area.

[0083] Alternatively, if the CMOS image sensor 32B is compatible with the SLVS-EC security format between the host 31, the output IF 53B can insert signature data into the area that outputs the SLVS-EC security-related information, as shown in B of Figure 9.

[0084] For example, in order to execute the sensor authenticity certification process even when the CMOS image sensor 32B has stopped outputting image data, it is necessary to configure the system so that the signature data is output via the communication IF 41. On the other hand, when the CMOS image sensor 32B is outputting image data, the signature data can be added to the image data and output via the output IF 53B. The signature data added to the image data can then be output to the user terminal 12 via the host 31.

[0085] <Example of Use of ID Information> An example of use of ID information will be described with reference to FIG.

[0086] For example, a CIS manufacturer manufactures a CMOS image sensor 32 in which a classification IDa issued by a foundry, a classification IDb issued by a materials manufacturer, and a classification IDc issued by an equipment manufacturer are written in the ID information area 64, and ships the sensor to a manufacturing factory that produces the final product. At this time, the CIS manufacturer confirms in advance that the requirements are met based on information from the foundry, materials manufacturer, and equipment manufacturer, as well as their databases, and then procures the design, materials, and equipment.

[0087] The foundry, material manufacturer, and device manufacturer each request a third-party organization to issue a classification IDa, a classification IDb, and a classification IDc, respectively. The third-party organization manages the certificates in association with the classification IDa, the classification IDb, and the classification IDc.

[0088] A final product such as an electronic device incorporating the CMOS image sensor 32 is manufactured at a manufacturing factory, and the final product is available to a user. The user then uses the user terminal 12 to perform the communication process described with reference to FIG. 7 to read the ID information (category IDa, category IDb, and category IDc) from the CMOS image sensor 32 and obtain the necessary certificate from a third-party organization. In other words, the user can align the product-related information of the CMOS image sensor 32 based on the ID information read from the CMOS image sensor 32.

[0089] In this case, by using a third-party organization, it is possible to obtain the certificate while keeping the identity of the outsourced company confidential from the user or customer. Based on the ID information (classification IDa, classification IDb, and classification IDc) read from the CMOS image sensor 32, the user can confirm that the certificates for design, materials, equipment, etc. are linked to the actual final product. This allows the user to confirm, for example, whether or not parts in accordance with the policy are being used.

[0090] Instead of a third-party organization, the certificates may be managed in the databases of the foundry, material manufacturer, and device manufacturer.

[0091] In the communication system 11, the shipping status and customer information described below can be written to the non-rewritable storage unit 43 and output together with the ID information. For example, the output of the shipping status and customer information described below can also be switched on / off using an option mode register (CIS_OPT_MODE) or the like.

[0092] The shipping status can be a status that indicates whether the product is a sample product, a discarded product (for example, a product that does not meet the quality standard), a sales product, etc. For example, the shipping status can be used to manage genuine sales products, sample products, discarded products (products that do not meet the conditions for reliability, etc. and are to be discarded), etc.

[0093] The customer information can be used to manage the customer for internal identification. For example, the customer information can be used to manage the distribution route when the CMOS image sensor 32 is used in a market other than the contract market.

[0094] In the communication system 11, an area that can be updated by the customer may be provided in the non-rewritable storage unit 43.

[0095] For example, by providing an area accessible to customers in the non-rewritable storage unit 43, the customer can update the disposal status by blowing a fuse in the non-rewritable storage unit 43 when disposing of the CMOS image sensor 32. In this way, once the disposal status is updated in the non-rewritable storage unit 43, it becomes impossible to update the information thereafter. This makes it possible, for example, to perform fraudulent management of waste disposal companies.

[0096] Furthermore, the communication system 11 can output information, such as data for linking generation conditions input from a user or the like via the communication IF 41, with a signature attached together with ID information. For example, information for identifying the data recipient, such as a user ID or timestamp, can be received from an external register and a signature can be attached including this information. For example, the timestamp can be confirmed when making an inquiry to a third-party institution.

[0097] In this case, the user terminal 12 receives these pieces of information from the register IF as a random number (R B ) or included in the information in Text1 and sent to the CMOS image sensor 32. The CMOS image sensor 32 then merges the information sent from the user terminal 12 with information such as the ID, applies a signature to the entire data, and outputs it.

[0098] In this embodiment, an example of a configuration has been described in which signature data in which a signature has been applied to ID information in the signature processing unit 44 is output from the CMOS image sensor 32. However, for example, a configuration in which unsigned ID information is output from the CMOS image sensor 32 may also be used.

[0099] <Example of Computer Configuration> Next, the above-described series of processes (communication method) can be performed by hardware or software. When the series of processes is performed by software, a program constituting the software is installed in a general-purpose computer or the like.

[0100] FIG. 11 is a block diagram showing an example of the hardware configuration of a computer that executes the above-described series of processes by a program.

[0101] In the computer, a CPU (Central Processing Unit) 101, a ROM (Read Only Memory) 102, a RAM (Random Access Memory) 103, and an EEPROM (Electronically Erasable and Programmable Read Only Memory) 104 are interconnected by a bus 105. An input / output interface 106 is further connected to the bus 105, and the input / output interface 106 is connected to the outside.

[0102] In a computer configured as described above, the CPU 101 performs the above-described series of processes by loading programs stored in, for example, the ROM 102 and EEPROM 104 into the RAM 103 via the bus 105 and executing the programs. In addition, the programs executed by the computer (CPU 101) can be written in advance in the ROM 102, or can be installed or updated in the EEPROM 104 from outside via the input / output interface 106.

[0103] In this specification, the processing performed by a computer according to a program does not necessarily have to be performed in chronological order according to the order described in the flowchart. In other words, the processing performed by a computer according to a program also includes processing that is executed in parallel or individually (for example, parallel processing or object-based processing).

[0104] The program may be processed by a single computer (processor), or may be distributed among multiple computers. Furthermore, the program may be transferred to and executed on a remote computer.

[0105] Furthermore, in this specification, a system refers to a collection of multiple components (devices, modules (components), etc.), regardless of whether all of the components are contained in the same housing. Therefore, multiple devices housed in separate housings and connected via a network, and a single device housed in a single housing with multiple modules, are both systems.

[0106] Also, for example, a configuration described as one device (or processing unit) may be divided and configured as multiple devices (or processing units). Conversely, configurations described above as multiple devices (or processing units) may be combined and configured as one device (or processing unit). Of course, configurations other than those described above may be added to the configuration of each device (or each processing unit). Furthermore, as long as the configuration and operation of the entire system are substantially the same, part of the configuration of one device (or processing unit) may be included in the configuration of another device (or other processing unit).

[0107] Furthermore, for example, the present technology can be configured as a cloud computing system in which a single function is shared and processed collaboratively by a plurality of devices via a network.

[0108] Furthermore, for example, the above-described program can be executed in any device, as long as the device has the necessary functions (functional blocks, etc.) and can obtain the necessary information.

[0109] Also, for example, each step described in the above flowchart can be executed by one device or can be shared and executed by multiple devices. Furthermore, if one step includes multiple processes, the multiple processes included in that one step can be executed by one device or can be shared and executed by multiple devices. In other words, multiple processes included in one step can be executed as multiple step processes. Conversely, processes described as multiple steps can be executed collectively as a single step.

[0110] In addition, the processing of the steps of a program executed by a computer may be executed in chronological order according to the order described in this specification, or may be executed in parallel or individually at the required timing, such as when a call is made. In other words, as long as no contradiction occurs, the processing of each step may be executed in an order different from the order described above. Furthermore, the processing of the steps of this program may be executed in parallel with the processing of another program, or may be executed in combination with the processing of another program.

[0111] It should be noted that the present technologies described in this specification can be implemented independently and singly, unless a contradiction arises. Of course, any two or more of the present technologies can also be implemented in combination. For example, part or all of the present technologies described in any embodiment can be implemented in combination with part or all of the present technologies described in other embodiments. Furthermore, part or all of any of the present technologies described above can also be implemented in combination with other technologies not described above.

[0112] <Examples of Combinations of Configurations> The present technology can also be configured as follows. (1) A semiconductor chip comprising: a communication interface for communicating with a host in accordance with a predetermined communication standard; and a non-rewritable storage unit for storing ID (Identification) information in a state that cannot be rewritten at the time of shipment; wherein the ID information stored in the non-rewritable storage unit is output from the communication interface in response to a request from an external terminal via the host. (2) The semiconductor chip described in (1) above, in which the ID information includes at least a product ID for identifying the semiconductor chip as a product and a classification ID linked to information related to the manufacturing environment and materials of the semiconductor chip. (3) The semiconductor chip described in (1) or (2) above, which outputs shipping status and shipping destination data of the semiconductor chip in addition to the ID information. (4) The semiconductor chip described in any of (1) to (3) above, further comprising: an information output selection unit for selecting the ID information to be output from the communication interface from among the plurality of pieces of ID information stored in the non-rewritable storage unit. (5) The semiconductor chip according to any one of (1) to (4) above, further comprising: a signature processing unit that performs signature processing for encrypting the ID information using a key to affix a signature, and outputs signature data with the ID information signed from the communication interface. (6) The semiconductor chip according to (5) above, wherein the request transmitted from the external terminal is encrypted with a first key, and the signature processing unit decrypts the request using a second key corresponding to the first key. (7) The semiconductor chip according to (5) or (6) above, wherein the signature processing unit inserts the signature data into a predetermined position in a format for outputting image data, and outputs the image data with the signature data added thereto. (8) The semiconductor chip according to any one of (5) to (7) above, wherein power or a clock is supplied to a block including the signature processing unit required for the signature processing only when the signature processing is performed.(9) A communication method comprising: a semiconductor chip having a communication interface that communicates with a host in accordance with a predetermined communication standard and a non-rewritable storage unit that stores ID (Identification) information in a state that is non-rewritable at the time of shipment, and outputting the ID information stored in the non-rewritable storage unit from the communication interface in response to a request from an external terminal via the host. (10) A communication system comprising: a semiconductor chip having a communication interface that communicates with a host in accordance with a predetermined communication standard and a non-rewritable storage unit that stores ID (Identification) information in a state that is non-rewritable at the time of shipment, and an external terminal that transmits a request via the host, and outputting the ID information stored in the non-rewritable storage unit from the communication interface in response to the request.

[0113] It should be noted that the present embodiment is not limited to the above-described embodiment, and various modifications are possible within the scope of the gist of the present disclosure. Furthermore, the effects described in this specification are merely examples and are not intended to be limiting, and other effects may also be obtained.

[0114] REFERENCE SIGNS LIST 11 Communication system, 12 User terminal, 13 Module, 21 Startup confirmation unit, 22 Authentication confirmation unit, 31 Host, 32 CMOS image sensor, 41 Communication IF, 42 Rewritable storage unit, 43 Non-rewritable storage unit, 44 Signature processing unit, 45 Processing state output terminal, 46 Information output selection unit, 51 Pixel, 52 Data processing unit, 53 Output IF, 61 Register, 62 Request reception area, 63 Security information area, 64 ID information area, 65 Information area

Claims

1. A semiconductor chip comprising: a communications interface for communicating with a host in accordance with a specified communications standard; and a non-rewritable memory unit for storing ID (Identification) information in a state that cannot be rewritten at the time of shipment; and wherein the ID information stored in the non-rewritable memory unit is output from the communications interface in response to a request from an external terminal via the host.

2. The semiconductor chip according to claim 1, wherein the ID information includes at least a product ID for identifying the product as the semiconductor chip, and a classification ID linked to information relating to the manufacturing environment and materials of the semiconductor chip.

3. The semiconductor chip according to claim 1, wherein shipping status and shipping destination data of said semiconductor chip are output in addition to said ID information.

4. The semiconductor chip according to claim 1, further comprising: an information output selection section that selects the ID information to be output from the communication interface from among the plurality of pieces of ID information stored in the non-rewritable storage section.

5. The semiconductor chip according to claim 1, further comprising a signature processing unit which performs a signature process for applying a signature to the ID information by encrypting the ID information with a key, and outputs the signature data with the ID information being signed from the communication interface.

6. The semiconductor chip according to claim 5, wherein the request sent from the external terminal is encrypted with a first key, and the signature processing unit decrypts the request using a second key corresponding to the first key.

7. The semiconductor chip according to claim 5, wherein said signature processing section inserts said signature data into a predetermined location in a format when outputting image data, and outputs said image data with said signature data added thereto.

8. The semiconductor chip according to claim 5, wherein power or a clock is supplied to a block including the signature processing unit required for the signature processing only when the signature processing is being performed.

9. A communication method comprising: a semiconductor chip comprising: a communication interface for communicating with a host in accordance with a specified communication standard; and a non-rewritable memory unit for storing ID (Identification) information in a state that cannot be rewritten at the time of shipment; and outputting the ID information stored in the non-rewritable memory unit from the communication interface in response to a request from an external terminal via the host.

10. A communications system comprising: a semiconductor chip having a communications interface for communicating with a host in accordance with a specified communications standard; and a non-rewritable memory unit for storing ID (Identification) information in a state that cannot be rewritten at the time of shipment; and an external terminal for transmitting a request via the host, wherein the ID information stored in the non-rewritable memory unit is output from the communications interface in response to the request.