Secure Boot Heterogeneous Integration Circuitry

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Heterogeneous integration circuitry is vulnerable to deconstruction attacks, which allow attackers to access sensitive information and components, posing a security risk by physically or chemically separating components to extract intellectual property or execute devices in non-secure environments.

Innovation Solution

The implementation of a secure boot mechanism using a key generation circuit and key security circuit within the heterogeneous integration circuitry, which generates a key encrypted key based on entropy sources from multiple components and decrypts an encrypted public key to perform a secure boot operation, ensuring the device only boots correctly if not deconstructed.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If heterogeneous integration circuitry integrates multiple different materials, components, and technologies into a single compact package to provide high functionality and reduce size, then functional density and performance are improved, but vulnerability to deconstruction attacks increases

Engineering Contradiction:

Improvefunctional densityVSAvoidvulnerability to deconstruction attacks

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent divides the heterogeneous integration circuitry into multiple separate components (first component, second component, third component) that are physically distinct but functionally integrated. Each component contains specific circuitry (entropy sources, key generation circuits, key security circuits) and can be individually identified. This segmentation allows the system to detect when components are physically separated through deconstruction attacks, as the communication between separated components fails, triggering security responses.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary detection mechanism that monitors the physical integrity of the heterogeneous integration circuitry. The detection circuitry acts as an intermediary between the multiple components, detecting whether they are properly connected and integrated. This intermediary layer enables the system to sense deconstruction attempts and prevent unauthorized access to sensitive information.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Difficulty of detecting and measuring

If deconstruction techniques (mechanical separation, chemical etching, laser ablation) are used to physically separate and remove individual components, then access to internal structures and sensitive information is gained, but security integrity is compromised

Engineering Contradiction:

Improveaccess to internal structuresVSAvoidsecurity integrity

Core Design Contradiction:

Difficulty of detecting and measuringVSReliability

Solution Approach 1:

The patent implements preliminary security measures by embedding detection circuitry and secure boot mechanisms into the heterogeneous integration circuitry before deployment. The system pre-configures entropy sources, key generation circuits, and key security circuits that are designed to detect deconstruction attempts and prevent unauthorized access. This preliminary action ensures that security is built-in from the design stage rather than added as an afterthought.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent applies preliminary anti-action by implementing security mechanisms that proactively prevent deconstruction attacks before they can succeed. The detection circuitry continuously monitors for signs of deconstruction, and the secure boot mechanism prevents the system from operating if deconstruction is detected. This preliminary anti-action counteracts potential attacks before they can compromise security integrity.

Inventive Principle:

Principle #9Preliminary anti-action

3Reliability

If a secure boot mechanism uses entropy sources from multiple components to generate keys, then detection of deconstruction becomes possible, but device complexity increases

Engineering Contradiction:

Improvedeconstruction detection capabilityVSAvoidcircuitry structure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple security functions into a unified secure boot mechanism. The entropy sources from different components, key generation circuits, and key security circuits are combined into an integrated security subsystem. This merging approach allows the system to achieve robust deconstruction detection capabilities while managing complexity through functional integration rather than separate independent systems.

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS12093394B2System and method for secure deconstruction sensor in a heterogeneous integration circuitry

Publication Date: 2024.09.17 XILINX INC

AI summary

Some examples described herein provide for securely booting a heterogeneous integration circuitry apparatus. In an example, an apparatus (e.g., heterogeneous integration circuitry) includes a first portion and a second portion of one or more entropy sources on a first component and a second component, respectively. The apparatus also includes a key generation circuit communicatively coupled with the first portion and the second portion to generate a key encrypted key based on a first set of bits output by the first portion and a second set of bits output by the second portion. The apparatus also includes a key security circuit to generate, based on the key encrypted key and an encrypted public key stored at the apparatus, a plaintext public key to be used by a boot loader during a secure booting operation for the apparatus.