Encrypted SoC Feature Enablement Without Fuse Programming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing SoC configuration methods using programmable fuses are costly, time-consuming, and prone to errors, with limited flexibility in enabling and disabling features.
Innovation Solution
Implementing an encryption-based system for SoC feature enablement using control and feature enablement circuitry to read and decrypt encrypted information during booting, utilizing a hard-wired key and a linear feedback shift register to securely enable or disable features based on a configuration identifier and user identifier.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If programmable fuses are used to configure SoC features, then security against configuration alteration is improved, but production cost and manufacturing time increase
Solution Approach 1:
The patent replaces the mechanical fuse-blowing process with an electronic encryption/decryption system. Instead of physically altering fuse elements to store configuration data, the system uses encrypted configuration identifiers stored in memory that are decrypted at runtime to enable or disable features. This substitution eliminates the need for physical fuse programming while maintaining security through cryptographic protection.
Solution Approach 2:
The patent uses encrypted copies of configuration identifiers stored in memory instead of physical fuse configurations. The configuration data is replicated in encrypted form and can be accessed multiple times without degradation, eliminating the one-time programming limitation of fuses while maintaining security through encryption.
2Stability of the object's composition
If programmable fuses are used to configure SoC features, then configuration permanence is improved, but flexibility in reconfiguration is worsened
Solution Approach 1:
The patent transforms the static, irreversible fuse configuration into a dynamic system where configuration identifiers can be changed and re-encrypted. The feature enablement circuitry can respond to different encrypted configuration identifiers at different times, allowing the system to adapt its feature set while maintaining secure configuration through encryption. This enables reconfiguration flexibility without sacrificing configuration stability during operation.
Solution Approach 2:
The patent changes the configuration parameter from physical fuse states to encrypted digital identifiers. This allows the configuration to be modified by changing the encrypted identifier values rather than physically altering fuses, providing both permanence (through encryption) and flexibility (through programmable identifier changes).
3Reliability
If fuse arrays are used for feature configuration, then security against subsequent alteration is improved, but manufacturing complexity and cost increase
Solution Approach 1:
The patent replaces the complex physical fuse array infrastructure with a simpler electronic encryption system. Instead of manufacturing and testing physical fuse configurations, the system uses software-based encryption of configuration identifiers, significantly reducing manufacturing complexity while maintaining security through cryptographic protection.
Solution Approach 2:
The patent replaces expensive, permanent fuse elements with cheaper, reusable encrypted data structures in memory. The encrypted configuration identifiers can be changed and re-encrypted without physical replacement, eliminating the cost and complexity of fuse array manufacturing and testing infrastructure.
Data Source
AI summary
Encrypted configuration information may be used to enable features of a system-on-chip (SoC). Encrypted information may be read from SoC firmware during SoC booting. The encrypted information may be decrypted by feature enablement circuitry in the SoC, and feature enablement signals resulting from the decryption may be provided to core logic circuitry of the SoC.