Encryption device, encryption system including the encryption device, decryption device and a semiconductor system including the decryption device

• US 20050172140A1
• Filed: 01/21/2005
• Published: 08/04/2005
• Est. Priority Date: 01/30/2004
• Status: Abandoned Application

• Current Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Ide, Takashi
• Application Number:
  US11/038,045
• Publication Number:
  US 20050172140A1
• Time in Patent Office: Days
• US Class Current: 713/190
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices

Abstract

A data/code conversion device receives confidential information, converts the confidential information into instruction codes for making a CPU provided in a semiconductor device perform its operation, and stores the instruction codes as dummy instruction codes in an external memory. One of the confidential information of which corresponding instruction code does not exist is converted into another instruction code as a dummy instruction code and stored, and correction data for reconstructing the confidential information from the instruction code is also stored in the external memory. In the semiconductor device, a decryption circuit for receiving the dummy instruction codes and the correction data stored in the external memory and performing decryption to obtain the confidential information is provided. Therefore, leakage of confidential information stored in the external memory can be reliably prevented with a relatively simple structure, so that the security level is increased.

Claims

1. An encryption device for encrypting confidential information in an external memory for storing instruction codes and data for controlling a semiconductor device and the confidential information to be a subject of protection against information leakage,

the semiconductor device and the external memory together composing a semiconductor system,

the encryption device comprising:

a code conversion device for converting the confidential information into the instruction codes and storing in the external memory the confidential information as dummy instruction codes.

2. The encryption device of claim 1, wherein the code conversion device includes a conversion circuit for converting, when an instruction code corresponding to the confidential information does not exist, the confidential information into another instruction code to generate a dummy instruction code, and generating correction data for reconstructing the confidential information from the dummy instruction code.

3. The encryption device of claim 2, wherein the code conversion device includes a final data/code generation device for receiving the dummy instruction code, the correction data, the instruction codes and the data and having the dummy instruction codes embedded in the instruction codes and the correction data embedded in the data to generate final instruction codes and final data to be stored in the external memory.

4. The encryption device of claim 3, wherein the final data/code generation device includes:

a plurality of conversion tables for converting the correction data into the final correction data; and

a correction data conversion circuit for converting the correction data into final correction data using one of the plurality of conversion tables.

5. The encryption device of claim 4, wherein the final data/code generation device includes a final data generation circuit for receiving final correction data from the correction data conversion circuit and the data, allocating the final correction data in the data to output the data including the final correction data as the final data, and outputting a correction data allocation address allocating the final correction data in the data.

6. The encryption device of claim 5, wherein the final data/code generation device includes:

a correction data read instruction generation circuit for receiving the correction data allocation address from the final data generation circuit to generate a correction data read instruction for reading the final correction data allocated in the data; and

a final instruction code generation circuit for receiving the dummy instruction codes, the instruction codes and the correction data read instruction from the correction data read instruction generation circuit to generate the final instruction codes in which the three instruction codes are allocated.

7. The encryption device of claim 6, wherein the final instruction code generation circuit allocates the correction data read instruction and the dummy instruction codes in a part address range of the whole address range for storing the final instruction codes in the external memory.

8. The encryption device of claim 6, wherein the final instruction code generation circuit stores the correction data read instruction and the dummy instruction codes in the external memory so that the correction data read instruction and the dummy instruction codes are interposed between two specific instruction codes.

9. The encryption device of claim 6, wherein the final instruction code generation circuit stores the correction data read instruction and the dummy instruction codes in the external memory so that the correction data read instruction and the dummy instruction codes are interposed between predetermined nth (where n is an integer) one of a plurality of the same specific instruction code and (n+1)th one of the specific instruction code.

10. An encryption system comprising:

the encryption device of claim 1;

a development jig for performing an evaluation analysis of the semiconductor device; and

an information processing terminal for checking a result of the evaluation analysis of the semiconductor device by the development jig,

wherein the information processing terminal performs predetermined authentication and, if the authentication is rejected, makes the semiconductor device to execute instructions based on the dummy instruction codes.

11. A decryption device in a semiconductor system,

the semiconductor system including a semiconductor device and an external memory,

the external memory storing instruction codes and data for controlling the semiconductor device and dummy instruction codes obtained by encrypting confidential information to be a subject of protection against information leakage,

wherein the decryption device reads out the dummy instruction codes from the external memory and decrypts the dummy instruction codes into the confidential information.

13. The decryption device or the semiconductor system of claim 11 or claim 12, wherein in the external memory, confidential information of which corresponding instruction code does not exist is converted into another instruction code and stored as a dummy instruction code, and correction data for reconstructing the confidential information from the dummy instruction code, and correction data read instruction for reading out the correction data are also stored.

14. The decryption device or the semiconductor system of claim 13, wherein the decryption device includes:

a decryption circuit for receiving the dummy instruction code and the correction data stored in the external memory and decrypting the dummy instruction code and the correction data into the confidential information; and

an instruction control device for controlling decryption by the decryption circuit.

15. The decryption device or the semiconductor system of claim 14, wherein in the external memory, the dummy instruction codes and the correction data read instruction are stored in a predetermined address range.

16. The decryption device or the semiconductor system of claim 14, wherein in the external memory, the dummy instruction codes and the correction data read instruction are stored so that the dummy instruction codes and the correction data read instruction are interposed between first and second specific codes.

17. The decryption device or the semiconductor system of claim 14, wherein in the external memory, the dummy instruction codes and the correction data read instruction are stored so that the dummy instruction codes and the correction data read instruction are interposed between predetermined nth (where n is an integer) one of a plurality of the same specific instruction code and (n+1)th one of the specific instruction code.

18. The decryption device or the semiconductor system of claim 15, wherein the instruction control device includes:

upper and lower address resisters for designating the predetermined address range in which the dummy instruction codes and the correction data read instruction are stored in the external memory;

an address comparison circuit for comparing an address input to the external memory to the upper and lower addresses of the upper and lower address resisters, and generating, when the input address is in the predetermined address range, the correction data write-in signal to output the correction data write-in signal to the decryption device and after a predetermined time, generating and outputting a decryption signal; and

an instruction code output circuit for receiving the decryption signal of the address comparison circuit and outputting the dummy instruction codes read out from the external memory and a dummy instruction write-in signal to the decryption circuit and a no-operation instruction code to the semiconductor device.

19. The decryption device or the semiconductor system of claim 16, wherein the instruction control device includes:

an instruction code judgment circuit for receiving an instruction code read out from the external memory, if it is judged that the received instruction code is the first specific instruction code, generating the correction data write-in signal to output the correction data write-in signal to the decryption device and, after a predetermined time, generating a decryption signal, and if it is judged that the received instruction code is the second specific instruction code, stopping output of the decryption signal; and

an instruction code output circuit for receiving the decryption signal output from the instruction code judgment circuit, during receiving the decryption signal, outputting the dummy instruction codes read out from the external memory and a dummy instruction write-in signal to the decryption circuit and a no-operation instruction code to the semiconductor device.

20. The decryption device or the semiconductor system of claim 17, wherein the instruction control device includes:

an instruction code judgment circuit for receiving an instruction code read out from the external memory, comparing the number of times of receipt of the instruction code to a predetermined number, generating the correction data write-in signal to output the correction data write-in signal to the decryption circuit and generating the decryption signal after a predetermined time when the receipt number matches the predetermined number, and outputting an instruction to stop output of the decryption signal when the receipt number no longer matches the predetermined number; and

an instruction code output circuit for receiving the decryption signal output from the instruction code judgment circuit, during receiving the decryption signal, outputting the dummy instruction codes read out from the external memory and a dummy instruction write-in signal to the decryption circuit, and outputting a no-operation instruction code to the semiconductor device.

21. The decryption device or the semiconductor system of claim 19 or claim 20, wherein the decryption device includes an interrupt control device for generating an interrupt signal and outputting the interrupt signal, and

wherein the instruction code output circuit of the instruction control device receives the interrupt signal of the interrupt control device, and during receiving the interrupt signal, stopping output of the dummy instruction codes and the dummy instruction write-in signal to the decryption circuit and outputting the instruction codes read out from the external memory to the semiconductor device.

12. A semiconductor system comprising:

a semiconductor device;

an external memory which stores instruction codes and data for controlling the semiconductor device and dummy instruction codes obtained by encrypting confidential information to be a subject of protection against information leakage; and

a decryption device, provided in the semiconductor device, for reading out the dummy instruction codes from the external memory and decrypting the dummy instruction codes into the confidential information.