IP Core Wrapper Locking Mechanism for Foundry Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing IC designs lack effective mechanisms to prevent unauthorized access and theft of intellectual property (IP) cores, particularly in untrusted foundries, leading to security risks such as IP theft, reverse engineering, and counterfeiting.
Innovation Solution
Incorporating a locking mechanism with a core wrapper and a root of trust (RoT) lock interface that controls access to the IP core based on an authentication key, ensuring only authorized entities can access the IP core by transitioning locking elements to an unlocked state upon verification of the key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a locking mechanism with authentication key is implemented, then security against IP theft and unauthorized access is improved, but device complexity increases
Solution Approach 1:
The locking mechanism is nested within the core wrapper structure, with locking elements integrated into the wrapper's control logic. The authentication key verification is embedded within the existing design flow, allowing security functionality to be contained within the IP core's existing architectural boundaries rather than requiring external security infrastructure.
Solution Approach 2:
The core wrapper acts as an intermediary layer between the IP core and external access points. It includes locking elements that mediate control signal flow, verifying authentication keys before allowing access to the IP core's control mechanisms. This intermediary structure provides security without directly modifying the IP core itself.
2Reliability
If access to IP core is restricted through locking elements, then protection against reverse engineering is improved, but ease of operation for authorized access deteriorates
Solution Approach 1:
Authentication key verification is performed in advance before access to the IP core is granted. The locking elements are pre-configured to check for the presence and validity of authentication keys, allowing authorized users to access the IP core without delays during operation. The security check happens once during initialization or access request, not continuously during normal operation.
Solution Approach 2:
The core wrapper's locking mechanism automatically verifies authentication keys and controls access without requiring external intervention. The system self-manages the security checks, comparing provided authentication keys against stored credentials and automatically transitioning locking elements between locked and unlocked states based on verification results.
Data Source
AI summary
An integrated circuit (IC) chip includes an intellectual property (IP) core that executes logical operations to perform a function. The IC chip also includes a core wrapper logically encapsulating the IP core such that inputs and outputs to the IP core are funneled through ports of the core wrapper. The IC chip further includes a locking mechanism for controlling communications with the core wrapper. The locking mechanism includes a set of locking elements that gate access to the ports of the wrapper and a lock interface that controls a state of the set of locking elements based on a presence or absence of an authentication key.