ASIC Identity Auto-Provisioning via Electronic Fuse Hash
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
ASICs typically lack sufficient memory for identity storage, making it challenging to verify the authenticity of ASICs within a system, thereby exposing products to counterfeiting and gray market modifications.
Innovation Solution
The system employs an electronic fuse within the hardware component to store a hash of a data package, which includes a serial number associated with the hardware component and a system number. This hash is used to authenticate the hardware component during the verification process, without requiring extensive cryptographic capabilities from the ASIC.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ASICs store identity information in memory, then identity verification capability is improved, but memory capacity requirements increase beyond what ASICs can provide
Solution Approach 1:
The patent extracts the identity storage function from the ASIC's internal memory and relocates it to an external secure element or trusted platform module. The ASIC only retains a cryptographic hash or identifier, while the full identity information is stored externally, thus resolving the memory capacity constraint while maintaining verification capability.
Solution Approach 2:
The patent introduces an intermediary component (such as a secure element, TPM, or external authentication server) that mediates between the ASIC and the identity verification system. This intermediary stores the actual identity information and performs cryptographic operations, allowing the ASIC to verify identity without needing sufficient internal memory.
2Reliability
If ASICs implement advanced cryptographic features for security, then security against counterfeiting is improved, but device complexity and resource requirements increase
Solution Approach 1:
The patent extracts advanced cryptographic functions from the ASIC and relocates them to an external secure element or trusted platform module. The ASIC only performs simple cryptographic operations (such as hashing or signature verification), while complex cryptographic processing is handled externally, thus maintaining security without increasing ASIC complexity.
Solution Approach 2:
The patent introduces an intermediary component that handles complex cryptographic operations. This intermediary acts as a co-processor for security functions, performing advanced cryptography while the ASIC maintains its original simple architecture, thus achieving high security without increasing device complexity.
3Reliability
If ASICs are bound to specific systems for authentication, then product authenticity is improved, but adaptability to different systems decreases
Solution Approach 1:
The patent uses parameter changes to achieve system-specific binding. The authentication mechanism changes parameters such as system identifiers, cryptographic keys, or binding tokens based on the target system. This allows the same ASIC to be authentically bound to different systems by changing authentication parameters rather than hardware configuration, thus maintaining both authenticity and adaptability.
Data Source
AI summary
In one embodiment, a method to authenticate a hardware component, by a system, includes performing a verification process to determine whether the hardware component is authorized to run on the system. The hardware component comprises an electronic fuse storing a hash of a data package and a memory storing the data package, wherein the electronic fuse is configured to provide the hash to the memory. The verification process comprises transmitting a random value (K) to the hardware component to prompt the hardware component to sign a response. The verification process further comprises receiving a signed response containing the random value (K) and the data package, wherein the data package comprises a first serial number associated with the hardware component and a first system number associated with the system. The verification process further comprises decrypting the signed response to verify a value of the random value (K).