Encrypted Silicon IP Block Validation via Decryption and Re-encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The integrated circuit design industry faces challenges in verifying designs built with encrypted silicon IP blocks, as existing verification tools cannot effectively find design errors within encrypted blocks while protecting confidential information, and there is a need for a low-cost IP usage and verification platform to support both small and large companies.
Innovation Solution
A method and system that performs design rule checks, layout versus schematic checks, parasitic RC extraction, circuit simulation, and other validation checks on integrated circuit designs with encrypted silicon IP blocks by decrypting the blocks using authorized keys, extracting relevant data, and encrypting results to maintain confidentiality, while creating a partially encrypted database for validation reports.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encrypted silicon IP blocks are used to protect intellectual property, then IP security is improved, but verification capability deteriorates because existing verification tools cannot effectively find design errors within encrypted blocks
Solution Approach 1:
The verification process is segmented into two distinct phases: a pre-encryption verification phase where design rules are checked on the encrypted IP block without decrypting it, and a post-encryption verification phase where the IP is decrypted and verified again. This segmentation allows verification to occur at different security levels, resolving the contradiction between maintaining encryption security and enabling effective verification.
Solution Approach 2:
The patent introduces an intermediary verification system that can operate on encrypted data without requiring decryption. This intermediary layer enables design rule checking and validation on the encrypted IP blocks themselves, allowing verification capability to coexist with IP security protection during the design phase.
2Adaptability or versatility
If abstract type IP layouts are provided initially, then market access is improved for small companies, but verification quality deteriorates because the IP may behave differently when integrated into customer designs
Solution Approach 1:
The system performs preliminary verification actions on the encrypted IP blocks before final integration. By checking design rules and validating the IP structure in the encrypted state, the system ensures quality control is performed early in the process, allowing small companies to access verified IP without compromising verification quality.
Solution Approach 2:
The patent creates a verified copy of the IP block in encrypted form that maintains the same functional characteristics as the original unencrypted IP. This encrypted copy can be provided to customers while preserving verification quality, as the verification process confirms the IP behaves correctly even in its encrypted state.
3Reliability
If full chip verification is performed before fabrication, then design reliability is improved, but cost and time consumption increase due to expensive photo masks and fabrication processes
Solution Approach 1:
The verification process is performed as a preliminary action during the design phase using computational methods, before the expensive fabrication process. By completing verification in the digital domain with encrypted IP blocks, the system achieves design reliability without requiring time-consuming and costly physical fabrication for verification purposes.
Solution Approach 2:
The patent replaces the mechanical fabrication and physical testing process with a computational verification system that operates on encrypted data. This substitution eliminates the need for expensive photo masks and fabrication processes while maintaining verification effectiveness, significantly reducing time and cost.
4Reliability
If encrypted IP blocks are used to protect silicon IP, then IP protection is improved, but ease of operation deteriorates because customers cannot easily verify or test the IP using their own verification flows
Solution Approach 1:
The system provides feedback mechanisms that allow customers to verify encrypted IP blocks using their own verification flows. The verification process generates results that can be fed back to both the customer and the IP provider, enabling operational ease while maintaining IP protection through encrypted data structures.
Solution Approach 2:
The verification system is designed with universal functionality that can handle both encrypted and unencrypted IP blocks. This multi-functionality allows customers to use the same verification tools and flows for both protected and unprotected IP, maintaining ease of operation while preserving IP protection capabilities.
Data Source
AI summary
A method and system for validating integrated circuit designs that are built with encrypted silicon IP blocks decrypts the encrypted silicon IP blocks in the integrated circuit designs with the keys from IP providers. After decryption, various validation checks on the integrated circuit designs are done, such as design rule check (DRC), layout versus schematic (LVS) check, parasitic resistor capacitor (RC) extraction, circuit simulation, signal electro migration (EM) and voltage drop check, signal integrity (SI) check and static timing check, etc. After validation, any confidential data from the checking results related to the encrypted silicon IP blocks are themselves encrypted to protect the proprietary silicon IP blocks. The method and system work with silicon IP encryption technology to establish a low cost silicon IP usage and verification platform, and to enable a more cost efficient silicon IP business model.