IC Security Circuitry for Finite Provisioning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Circuit developers face manufacturing-related vulnerabilities due to lack of direct control over integrated circuit chip production, including unauthorized production and distribution, which existing methods fail to adequately address.
Innovation Solution
Incorporating security circuitry into integrated circuits that can be configured through an enrollment process to enable and disable active circuitry a limited number of times, using messages embedded in test patterns during manufacturing, allowing for secure rationed enablement and preventing unauthorized use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If third-party fabricators or foundries are used to manufacture integrated circuit chips, then manufacturing cost and accessibility are improved, but manufacturing control and security are worsened
Solution Approach 1:
The patent applies preliminary action by implementing security circuitry and enrollment processes during the manufacturing phase itself, rather than attempting to control usage afterward. The security features are built into the chip before distribution, allowing manufacturers to maintain control over how the chips are used even when using third-party fabricators.
Solution Approach 2:
The security circuitry acts as an intermediary between the manufacturer's control requirements and the third-party fabricator's manufacturing capabilities. This intermediate security layer enables communication and control mechanisms that bridge the gap between manufacturer intent and fabricator execution.
2Productivity
If unlocking codes or keys are provided to third-party fabricators for testing, then in-circuit testing and burn-in testing can be performed, but security vulnerabilities are increased
Solution Approach 1:
The patent applies local quality by providing different access levels to different entities. The security circuitry distinguishes between fabricator access (for testing only) and consumer access (for full functionality). This localized differentiation of access rights allows testing while maintaining security by ensuring fabricators cannot extract or misuse unlocking codes.
Solution Approach 2:
The security system is segmented into multiple components: security circuitry, enrollment process, testing mode, and operational mode. This segmentation allows the system to perform different functions under different conditions, enabling fabricators to test chips without obtaining full unlocking capabilities that would create security vulnerabilities.
3Reliability
If integrated circuit chips are locked or disabled initially, then unauthorized production and distribution are prevented, but testing during manufacturing becomes impossible
Solution Approach 1:
The patent applies dynamics by making the chip's operational state changeable based on conditions. The security circuitry dynamically transitions the chip between locked and unlocked states based on enrollment completion and testing requirements. This dynamic behavior allows the chip to be locked for security during distribution, yet temporarily unlocked for manufacturing testing when appropriate credentials are presented.
Data Source
AI summary
This application discloses an electronic system including active circuitry configured to be selectively enabled for authorized number of times. The electronic system also includes security circuitry to detect an enablement event associated with the electronic system. The enablement event can correspond to reception of a reset signal associated with the electronic system, a lapse of a predetermined time period, or the like. In response to the detection of the enablement event, the security circuitry can determine a number of times the security circuitry has previously enabled the active circuitry. The security circuitry can generate the enablement signals capable of enabling the active circuitry when the determined number of times the security circuitry has previously enabled the active circuitry is fewer than the authorized number of times.