On-Die ASIC Initialization Engine for Secure Reusable Boot
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The manufacturing of ASICs requires external hardware and firmware for initialization, increasing costs and engineering effort, and lacks security, as existing solutions do not allow for flexible reuse of ASICs across various applications without requiring new hardware.
Innovation Solution
Incorporating an on-die electrically programmable non-volatile memory (EP-NVM) during manufacturing to store a bootstrap image, which is used by an initialization engine to control the ASIC's behavior, enabling secure and flexible initialization through a hardware root of trust, allowing the same ASIC hardware to be used in multiple applications with different software configurations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If external hardware and firmware are used for ASIC initialization, then initialization functionality is achieved, but costs and engineering effort increase
Solution Approach 1:
The patent merges the initialization engine and EP-NVM directly into the ASIC die, eliminating the need for external initialization hardware. The initialization engine is implemented as an integrated circuit block within the ASIC, and the EP-NVM is fabricated on the same die, creating a unified initialization system that reduces external connections and hardware complexity.
Solution Approach 2:
The initialization engine is designed with universal functionality to support multiple applications and reconfiguration scenarios. It can load different bootstrap images from the EP-NVM to initialize the ASIC for various applications, making the same hardware initialization engine serve multiple purposes without requiring application-specific external hardware.
2Adaptability or versatility
If traditional ASIC manufacturing is used, then specialized function is achieved, but flexibility for reuse across applications is lost
Solution Approach 1:
The EP-NVM is pre-programmed during the semiconductor manufacturing process with bootstrap images and initialization code. This preliminary action embeds the reconfiguration capability directly into the hardware at fabrication time, allowing the ASIC to be later reconfigured for different applications without requiring changes to the physical hardware or complex manufacturing processes.
Solution Approach 2:
The patent replaces traditional mechanical/reconfigurable hardware approaches with an electrically programmable memory system. Instead of using physical switches or external configuration hardware, the initialization engine uses electrical signals to program the EP-NVM, enabling software-defined reconfiguration of the ASIC functionality.
3Adaptability or versatility
If initialization mechanisms are made flexible and programmable, then adaptability improves, but security may be compromised
Solution Approach 1:
The initialization engine acts as a secure intermediary between the EP-NVM and the reconfigurable logic. It authenticates and verifies the bootstrap images before loading them into the reconfigurable logic, preventing unauthorized or malicious code from being executed. This intermediary layer maintains security while enabling flexible reconfiguration.
Solution Approach 2:
The EP-NVM uses electrical programming to change its state from unprogrammed to programmed, creating an immutable initialization image. This parameter change (from volatile to non-volatile state) ensures that once the bootstrap image is written, it cannot be altered, providing security through immutability while still allowing flexible initialization of different applications.
Data Source
AI summary
A method of initializing an application-specific integrated circuit (ASIC), the method including reading, by a boot microcode engine integrated with the ASIC, microcode from an electrically programmable non-volatile memory (EP-NVM) integrated on a same die as the ASIC. The method further includes writing the microcode onto internal memories of a micro-controller of the ASIC and initializing the micro-controller by the boot microcode engine. The method also includes loading, by the micro-controller, a full boot image from an additional storage device distinct from the EP-NVM onto the internal memories of the micro-controller and initializing the ASIC by the micro-controller based on the full boot image.