FPGA Bitstream Authentication with Signatures and Watermarks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing integrated circuits, such as FPGAs, are vulnerable to hardware cloning and counterfeiting due to the potential theft of encryption keys, which allows unauthorized loading of bitstreams, compromising security.
Innovation Solution
Implement a digital signature verification process using a public-private key pair, where the integrated circuit generates a random nonce, signs it with the private key, and verifies the signature with the corresponding public key, along with watermark detection to ensure the bitstream is authentic before loading, thereby preventing unauthorized configuration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption is used to protect the bitstream, then security is improved, but the risk of key theft and hardware cloning remains
Solution Approach 1:
The patent applies preliminary action by performing digital signature verification and watermark detection before loading the bitstream onto the FPGA. The system verifies the bitstream's authenticity and integrity in advance using cryptographic signatures and embedded watermarks, ensuring that only authorized and unmodified bitstreams are loaded, thereby preventing hardware cloning and counterfeiting before they can occur
Solution Approach 2:
The patent uses an intermediary approach by introducing a verification system that acts as a mediator between the bitstream and the FPGA configuration process. This verification system includes digital signature validation and watermark detection mechanisms that intervene to authenticate the bitstream's origin and integrity, preventing unauthorized configurations without blocking legitimate ones
2Reliability
If digital signature verification and watermark detection are implemented, then authentication security is improved, but device complexity increases
Solution Approach 1:
The patent applies self-service by embedding verification capabilities directly within the FPGA device itself. The FPGA includes integrated verification logic that automatically performs digital signature verification and watermark detection during the configuration process, eliminating the need for external verification systems and reducing overall system complexity while maintaining high authentication security
Data Source
AI summary
A method includes receiving a bitstream including a signature associated with a private key, and detecting a first watermark of the bitstream, wherein the first watermark is associated with a first public key. The method also includes loading the bitstream based on determining that the first public key corresponds to a second public key and the private key and that the first public key is validated based on a validation value.