SoC Feature Provisioning via Secure License Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for provisioning features in system-on-chip (SoC) devices require custom manufacturing for each customer, placing the responsibility of enforcing intellectual property licensing agreements on the device manufacturer and lacking reliable verification and enforcement mechanisms.
Innovation Solution
A provisioning system that allows IP owners to manage and verify licenses through a cloud-based license management system, separating production and compliance monitoring, enabling secure feature authorization and tracking across a network, with a trusted application in the SoC's Trusted Execution Environment (TEE) for secure feature enablement and logging.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If all possible features are included in the chip design and fabrication, then the chip can meet IP owner specifications and provide feature versatility, but the manufacturing complexity and cost increase for each customer
Solution Approach 1:
The patent segments the feature set into authorized and unauthorized features, with only authorized features being activated. The chip design includes all possible features in a locked state, but a provisioning system divides them into customer-specific subsets that are enabled through secure authorization mechanisms, thereby reducing effective manufacturing complexity while maintaining versatility.
Solution Approach 2:
The patent applies preliminary action by pre-configuring the chip with all possible features in a locked state during fabrication, then using a provisioning system to selectively activate only the authorized features for each customer. This preliminary setup eliminates the need for custom manufacturing for each customer while ensuring feature versatility.
2Reliability
If a read-only memory is programmed during manufacturing to unlock authorized features, then feature authorization is implemented, but reliable verification and enforcement of licensing agreements is lacking
Solution Approach 1:
The patent introduces an intermediary provisioning system that acts as a mediator between the chip manufacturer and the customer. This system includes a provisioning server that securely manages feature authorization, verifies licensing agreements, and enforces feature activation. The intermediary layer provides reliable verification and enforcement mechanisms that were previously lacking, while distributing provisioning complexity across the system rather than concentrating it in the device.
Solution Approach 2:
The provisioning system enables self-service through automated feature activation and verification processes. The system automatically verifies licensing agreements and activates authorized features without requiring manual intervention, thereby improving reliability of enforcement while managing complexity through automation.
3Reliability
If custom manufacturing is required for each customer to enforce licensing agreements, then IP protection is improved, but the productivity and manufacturing efficiency decreases
Solution Approach 1:
The patent applies universality by creating a standardized chip design that can serve multiple customers with different feature authorization requirements. The universal chip design includes all possible features in a locked state, and a provisioning system selectively activates authorized features for each customer. This approach maintains strong IP protection through secure authorization mechanisms while enabling mass production and high manufacturing efficiency.
Data Source
AI summary
A system and method are disclosed for provisioning IP features in a system-on-chip. A plurality of identical chips are fabricated, each of which is capable of have a number of features enabled or disabled. As a default, all features are disabled. A production process is later carried out, in which the chip is installed in a greater device. During this process, the manufacturer requests a license the IP owner for enablement of various features. Using secure communications, a license is granted identifying the features to be enabled, and a volume of units permitted to be manufactured. The license information is encrypted using a key already known to the chip, and sent to the manufacturer. The chip receives the license information during provisioning, extracts relevant provisioning information using the key, and a secure processing system provisions the relevant features. Log information is generated to allow the IP owner to verify license compliance.