Wafer/Package Detection Circuit for Low-Overhead IC Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The semiconductor industry faces significant challenges in preventing and detecting integrated circuit theft and counterfeiting, particularly for smaller, cheaper integrated circuits, where cryptographic challenge-response methods are not suitable due to high overhead and vulnerability to side-channel attacks and eavesdropping.

Innovation Solution

A mechanism that determines whether an integrated circuit die is on a wafer or in a package, using substrate thickness detection and a challenge-response query, with a unique die identifier and random number pair generated during wafer testing, stored in a database, and authenticated during final production testing to prevent counterfeiting and theft.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic challenge-response exchanges are used for authentication, then security against counterfeiting is improved, but device complexity and cost increase significantly

Engineering Contradiction:
ImprovesecurityVSAvoidhardware overhead
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the cryptographic authentication functionality from the integrated circuit device itself and places it in an external authentication system. The IC only retains a simple unique identifier, while the complex challenge-response cryptographic operations are performed externally by authentication servers or systems, thereby reducing the hardware overhead and complexity within the IC while maintaining strong security.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces an intermediary authentication system that mediates between the IC and the verification process. This intermediary handles the complex cryptographic challenge-response exchanges, acting as a mediator that offloads the computational burden from the IC while ensuring secure authentication. The IC simply provides its unique identifier to this intermediary system.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If IC-specific passwords are used for authentication, then ease of operation is improved, but vulnerability to eavesdropping and replay attacks increases

Engineering Contradiction:
Improveauthentication simplicityVSAvoideavesdropping and replay attacks
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent replaces static IC-specific passwords with dynamic cryptographic challenges. Instead of using fixed authentication credentials that are vulnerable to eavesdropping and replay attacks, the system employs dynamic challenge-response pairs that change with each authentication attempt. This dynamic approach maintains ease of operation while eliminating the security vulnerabilities of static passwords.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent changes the authentication parameter from static passwords to dynamic cryptographic values. By transforming the authentication mechanism from using fixed secret values to using dynamically generated challenge-response pairs, the system maintains operational simplicity while fundamentally improving security against eavesdropping and replay attacks through parameter transformation.

Inventive Principle:
Principle #35Parameter changes

3Productivity

If wafer overproduction occurs, then productivity is improved, but risk of theft and counterfeiting increases

Engineering Contradiction:
Improvewafer production efficiencyVSAvoidtheft and counterfeiting risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by embedding unique identifiers and authentication capabilities into each IC during the wafer fabrication process itself, before the wafers are cut into individual devices. This preliminary authentication infrastructure is established during overproduction, enabling later detection and verification of each IC's authenticity without impeding the high-speed manufacturing process.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements feedback mechanisms where each IC's unique identifier is registered and tracked in a database during wafer testing and production. This creates a feedback loop that allows the system to verify the authenticity of each IC later by checking its identifier against the registered database, thereby providing a deterrent against theft and counterfeiting while maintaining productivity during overproduction.

Inventive Principle:
Principle #23Feedback

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This solution provides a secure, low-overhead mechanism for authenticating integrated circuits, making counterfeiting and theft detectable and costly for potential counterfeiters, thereby protecting the semiconductor industry from financial loss and reputational damage.

Implementation Method 1

A mechanism is provided to determine whether a device die is still on a wafer or if the device die is incorporated into a package

Methodology Applied
Scientific EffectSubstrate thickness detection:

Data Source

PatentUS11842934B2Integrated circuit device die with wafer/package detection circuit
Publication Date: 2023.12.12 NXP BV
  • US11842934B2 patent drawing
  • US11842934B2 patent drawing
  • US11842934B2 patent drawing

AI summary

A mechanism is provided to secure integrated circuit devices that combines a high degree of security with a low overhead, both in area and cost, thereby making it appropriate for smaller, cheaper integrated circuits. A determination is made whether a device die is on a wafer or if the device die is incorporated into a package. Only if the device die is incorporated in a package can the functional logic of device die be activated, and then only if a challenge-response query is satisfied. In some embodiments, a random number generator is used during wafer testing to form a pair of numbers, along with a die identifier, that is unique for each device die. A final test is then performed in which the device die can be activated if the device die is incorporated in a package, and the die identifier—random number pair is authenticated.