Method and apparatus for secure configuration of a field programmable gate array

• US 7,203,842 B2
• Filed: 12/21/2000
• Issued: 04/10/2007
• Est. Priority Date: 12/22/1999
• Status: Expired due to Fees

• Current Assignee: Algotronix Ltd.
• Original Assignee: Algotronix Ltd.
• Inventors: Kean, Thomas A.
• Primary Examiner(s): JUNG, DAVID YIUK
• Application Number:
  US09/747,759
• Publication Number:
  US 20010015919A1
• Time in Patent Office: 2,301 Days
• Field of Search: 713/189, 713/200, 713/201, 713/165, 713/164, 713/150, 713/193, 713/190, 380/255
• US Class Current: 713/189
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/76 in application-specific integrated circuits [ASIC] or field-programmable devices, e.g. field-programmable gate arrays [FPGA] or programmable logic devices [PLD]
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A field programmable gate array (70) has security configuration features to prevent monitoring of the configuration data for the field programmable gate array. The configuration data is encrypted by a security circuit (64) of the field programmable gate array using a security key (62). This encrypted configuration data is stored in an external nonvolatile memory (32). To configure the field programmable gate array, the encrypted configuration data is decrypted by the security circuit (64) of the field programmable gate array using the security key stored in the field programmable gate array.

Claims

1. A method of operating an integrated circuit containing on-chip volatile program memory comprising:

inputting a stream of data comprising unencrypted configuration data to the integrated circuit;

encrypting the unencrypted configuration data using a security circuit contained within the integrated circuit and a security key stored in the integrated circuit; and

outputting a stream of encrypted configuration data from the integrated circuit;

wherein the configuration data is for configuring the intergrated circuit.

2. The method of claim 1 comprising:

storing the security key in a device ID register of the integrated circuit.

3. The method of claim 2 wherein the power supply to the ID register is backed up using an external battery.

4. The method of claim 3 wherein the external battery is coupled to a first power supply terminal to the ID register, and a second power supply terminal for non-backed up circuits is not coupled to the external battery.

5. The method of claim 2 wherein the ID register is nonvolatile.

6. The method of claim 5 wherein the ID register comprises floating-gate transistors.

7. The method of claim 5 wherein the ID register comprises fuses.

8. The method of claim 5 wherein the ID register comprises antifuses.

9. The method of claim 5 wherein the device ID register is implemented using an error correcting code scheme.

10. The method of claim 5 wherein the ID register is programmed during manufacture of the integrated circuit.

11. The method of claim 10 wherein the ID register is programmed using a laser.

12. The method of claim 10 wherein the ID register is programmed using a high voltage high enough to substantially permanently configure a value into the ID register.

13. The method of claim 1 comprising:

storing the stream of encrypted configuration data in a nonvolatile storage device.

14. The method of claim 13 wherein the nonvolatile storage device is a serial EPROM or serial EEPROM.

15. The method of claim 13 wherein the nonvolatile storage device is a Flash memory.

16. The method of claim 1 comprising:

generating the security key using a random number generator circuit of the integrated circuit.

17. The method of claim 16 further comprising:

storing the security key in a device ID register of the integrated circuit.

18. The method of claim 1 comprising:

receiving the stream of encrypted configuration data using a microprocessor.

19. The method of claim 18 comprising:

using the microprocessor, writing the encrypted configuration data into a nonvolatile storage device.

20. The method of claim 1 wherein the security key has a fixed value and further comprising:

generating an initial value for the security circuit; and

outputting the initial value from of the integrated circuit.

21. The method of claim 20 wherein the unencrypted configuration data is encrypted using the initial value.

22. The method of claim 20 wherein the initial value is generated using a random number generator.

23. The method of claim 1 wherein the security circuit encrypts the unencrypted configuration data using a triple data encryption standard in a cipher block chaining mode algorithm.

24. The method of claim 1 wherein the stream of data is input serially.

25. The method of claim 1 comprising:

configuring the integrated circuit using the unencrypted configuration data.

26. The method of claim 13 comprising:

inputting the stream of encrypted configuration data from the nonvolatile storage device to the integrated circuit;

decrypting the encrypted configuration data using the security circuit of the integrated circuit and the security key; and

configuring the integrated circuit with a decrypted version of the encrypted configuration data.

27. The method of claim 1 wherein the unencrypted configuration data has approximately the same number of bits as the encrypted configuration data.

28. The method of claim 1 wherein the stream of data is loaded using a JTAG interface of the integrated circuit.

29. The method of claim 1 wherein the stream of data is provided using a microprocessor.

30. A method of operating a integrated circuit comprising:

receiving first encrypted configuration data and a first security key from a network;

decrypting the first encrypted configuration data to obtain unencrypted configuration data using the first security key using user programmed circuitry contained within the integrated circuit; and

encrypting the unencrypted configuration data using a second security key and a fixed security circuit contained within the integrated circuit to obtain second encrypted configuration data;

wherein the configuration data is for configuring the integrated circuit.

31. The method of claim 30 further comprising:

outputting the second encrypted configuration data from the integrated circuit.

32. The method of claim 31 further comprising:

storing the second encrypted configuration data in a nonvolatile storage device.

33. The method of claim 32 wherein the nonvolatile storage device is a serial EPROM.

34. The method of claim 30 wherein the second security key is stored in an ID register of the integrated circuit.

35. The method of claim 30 wherein user programmed circuitry outputs the unencrypted configuration data to the security circuit using an on-chip interconnection.

36. The method of claim 30 further comprising:

configuring the integrated circuit using the unencrypted configuration data.

37. The method of claim 30 wherein the first encrypted configuration data is serially transferred to an I/O pin of the integrated circuit.

38. The method of claim 30 wherein the security circuit encrypts the unencrypted configuration data using a triple data encryption standard (DES) in a cipher block chain (CBC) mode algorithm.

39. An integrated circuit field programmable gate array comprising:

a serial interface for loading initial configuration and key information;

a battery-backed on-chip memory for storing the cryptographic key;

a triple-DES encryption circuit; and

an interface to an external nonvolatile memory for storing encrypted configuration data.

40. A method for securely configuring an FPGA comprising:

loading key information into an on-chip battery-backed register;

loading an initial configuration through a JTAG interface; and

storing an encrypted version of the configuration in an external nonvolatile memory.

41. The method of claim 40, wherein the on-chip register is connectable to an external backup battery.

42. The method of claim 41, further comprising encrypting the initial configuration using the key information.

43. An integrated circuit field programmable gate array comprising:

a plurality of static random access memory cells to store a configuration of user-configurable logic of the field programmable gate array;

an ID register to store a security key; and

a decryption circuit to receive and decrypt a stream of encrypted configuration data using the security key, and generate decrypted configuration data for configuring the static random access memory cells.

44. The field programmable gate array of claim 43 further comprising:

a first positive supply input pin coupled to the static random access memory cells, user-configurable logic, and decryption circuit; and

a second positive supply input pin coupled to the ID register, wherein the second positive supply input is to be coupled to an external backup battery.

45. The field programmable gate array of claim 44 further comprising:

a random number generator circuit to generate the security key.

46. The field programmable gate array of claim 44 wherein when power is removed from the first positive supply input pin, the configuration of the static random access memory cells is erased, and the security key stored in the ID register is maintained by the external backup battery.

47. The field programmable gate array of claim 46 wherein the external backup battery only supplies power to the ID register.

48. The field programmable gate array of claim 47 wherein a current draw on the external backup battery is about a microamp or less.

49. The field programmable gate array of claim 47 wherein current draw on the external backup battery is about 10 microamps or less.

50. The field programmable gate array of claim 43 wherein the decryption circuit decrypts the stream of encrypted configuration data using a triple-DES algorithm.

51. The field programmable gate array of claim 43 further comprising:

an interface for loading configuration data; and

an interface to an external nonvolatile memory, the memory for storing the configuration data;

and wherein the ID register comprises an on-chip memory connectable to an external backup battery.

52. The field programmable gate array of claim 43, further comprising an encryption circuit.

53. The field programmable gate array of claim 52, wherein the decrypted configuration data is encrypted by the encryption circuit before the configuration data is passed off of the field programmable gate array.

54. A field programmable gate array comprising:

an interface for loading configuration information for the field programmable gate array;

an on-chip memory for storing a cryptographic key, wherein the on-chip memory is connectable to an external backup battery;

a security circuit to receive the configuration information and determine using header information within the configuration information whether the configuration information is encrypted or unencrypted; and

an interface to an external nonvolatile memory, the memory for storing configuration data.

55. The field programmable gate array of claim 54, wherein the security circuit comprises an encryption circuit for encrypting the configuration information using the cryptographic key.

56. The field programmable gate array of claim 54, wherein the security circuit comprises a description circuit for decrypting the configuration information using the cryptographic key, if the configuration is determined to be encrypted.

57. A method for securely configuration an FPGA comprising:

loading key information into an on-chip register, wherein the on-chip register is connectable to an external backup battery;

loading a configuration for the FPGA through an interface;

determining using header information within the configuration whether the configuration is encrypted or unencrypted;

processing the configuration using the key information; and

using th configuration information to configure the FPGA.

58. The method of claim 57, wherein processing the configuration comprises decrypting the configuration if the configuration is determined to be encrypted.

59. The method of claim 57, wherein processing the configuration comprises encrypting the configuration if the configuration is determined to be unencrypted.

60. A field programmable gate array comprising:

a plurality of volatile memory cells to store a configuration of user-configurable logic of the field programmable gate array;

an ID register to store a security key;

a security circuit to receive a stream of configuration data for the field programmable gate array and determine using header information within the stream whether the stream is encrypted or unencrypted, and if the stream is encrypted to decrypt the stream using the security key, to generate decrypted configuration data for configuring the volatile memory cells;

a first positive supply input pin connected to the volatile memory cells, user-configurable logic, and security circuit; and

a second positive supply input pin connected to the ID register, wherein the second positive supply input is connectable to an external backup battery.

61. The field programmable logic array of claim 60, wherein when power is removed from the first positive supply input pin, the configuration of the volatile memory cells is erased, and the security key stored in the ID register is maintained by the external backup battery.

62. The field programmable gate array of claim 61, wherein the external backup battery only supplies power to the ID register.

63. The field programmable gate array of claim 62, wherein a current draw on the external backup battery is about a microamp or less.

64. The field programmable gate array of claim 62, wherein a current draw on the external backup battery is about 10 microamps or less.

65. The field programmable gate array of claim 60, wherein the security circuit decrypts the stream of encrypted configuration data using a triple-DES algorithm.

66. The field programmable gate array of claim 60 further comprising;

a random number generator circuit to generate the security key.

67. A circuit comprising:

a field programmable gate array, comprising;

a plurality of volatile memory cells to store a configuration of user-configurable logic of the field programmable gate array;

an ID register to store a security key;

a security circuit to receive a stream of configuration data for the field programmable gate array and determine using header information within the stream whether the stream is encrypted or unencrypted, and if the stream is encrypted to decrypt the stream using the security key, to generate decrypted configuration data for configuring the volatile memory cells;

a first positive supply input pin connected to the volatile memory cells, user-configurable logic, security circuit; and

a second positive supply input pin connected to the ID register;

a power supply connected to the second positive supply input pin, to provide operating power to the volatile memory cells, user-configuration logic, and security circuit; and

a battery connected to the second positive supply input pin, to power to the ID register.

68. The circuit of claim 67, wherein the battery provides backup power to the ID register, to maintain the security key stored in the ID register when the power supply is not active.

69. The circuit of claim 67, wherein when the power supply is not active, the configuration of the volatile memory cells is erased, and the security key is maintained by the battery.

70. The circuit of claim 69, wherein the battery supplies power only to the ID register.

71. A method for securely configuring an FPGA using a bitstream, comprising:

loading header information contained in the bitstream into the FPGA;

determining, based on the header information, a security processing operation to apply to the bitstream;

loading configuration information contained in the bitstream into the FPGA;

applying the security processing operation to the configuration information being loaded into the FPGA; and

using the configuration information to configure the FPGA.

72. The method of claim 71, wherein the header information indicates that the configuration data is unencrypted.

73. The method of claim 72, wherein the header information indicates that no security processing operation is to be applied.

74. The method of claim 72, wherein the header information indicates that the security processing operation is to encrypt the unencrypted configuration information using a randomly-generated key and load the encrypted configuration information into an external non-volatile memory.

75. The method of claim 72, wherein the header information indicates that the security processing operation is to encrypt the unencrypted configuration information using a key installed in the FPGA and load the encrypted configuration information into an external non-volatile memory.

76. The method of claim 72, wherein the header information indicates that the security processing operation is to encrypt the unencrypted configuration information using a key included in the header information and load the encrypted configuration information into an external non-volatile memory.

77. The method of claim 71, wherein the header information indicates that the configuration information is encrypted, and the security processing operation is to unencrypt the encrypted configuration data and load the unencrypted configuration information into configuration memory.

78. The method of claim 71, wherein the bitstream comprises a preamble portion.

79. The method of claim 78, wherein information in the preamble indicates whether the configuration information in the bistream is encrypted or unencrypted.

80. The method of claim 78, wherein based on the preamble, the integrated circuit determines whether the bitstream is for a previous version of the FPGA, without a security scheme, or the bistream is for a version of the FPGA with the security scheme.

81. The method of claim 78, wherein when using the preamble, an FPGA with a security scheme will be backwards compatible with versions of the FPGA without the security scheme.

82. The method of claim 78, further comprising:

when the preamble is a first value, processing the bitstream as a stream of data for a version of the FPGA without a security scheme; and

when the preamble is a second value, different from the first value, processing the bitstream as a stream of configuration information for a version of the FPGA with the security scheme.

83. The method of claim 71, wherein the bitstream further comprises header, initial value, configuration data, and message authentication code portions.

84. A field programmable gate array, comprising:

a plurality of volatile memory cells to store a configuration of user configurable logic of the field programmable gate array;

a desryption circuit to receive and decrypt a stream of encrypted a stream of configuration data using a security key, and generate decrypted configuration data for configuring the user configurable logic;

a non-volatile register to store the security key, wherein a length of the security key comprises n bits and the register comprises m bits, wherein m equals n plus k additional bits, said non-volatile register being built from unreliable memory cells;

an error-correcting code circuit which uses one or more of the k additional bits in the non-volatile register to calculate a correct value of the security key even if one or more of the m bits do not operate correctly;

wherein the u reliable memory cells are fabricated using memory cell technology compatible with standard CMOS processing, said memory cells being unreliable due to the use of standard CMOS processing.

85. The field programmable gate array of claim 84, wherein the unreliable memory cells comprise memory cells constructed using a conventional CMOS processing flow.

86. The field programmable gate array of claim 85, wherein the unreliable memory cells comprise floating gate transistors.

87. The field programmable gate array of claim 84, wherein the register is connectable to a backup battery.

88. The field programmable gate array of claim 84, wherein the register is a non-volatile memory.

89. A field programmable gate array comprising:

user configuration logic;

a plurality of volatile memory cells to store a configuration of user configurable logic of the field programmable gate array;

a register to store a security key;

a decryption circuit to receive and decrypt a plurality of streams of encrypted configuration data using the security key, and generate decrypted configuration data for configuring the user configurable logic;

wherein each of the plurality of streams of configuration data cause an area of the field programmable gate array to be configured.

90. The field programmable gate array of claim 89, wherein a subsequent one of the plurality of streams of configuration data may re-configure an area of the field programmable gate array which was previously configured by an earlier one of the plurality of streams of configuration data.

91. The field programmable gate array of claim 89, wherein a single security key is used with a different initial value for each of the plurality of streams of configuration data.

92. The field programmable gate array of claim 89, wherein each of the plurality of streams of configuration data can be loaded independently and verified independently of the plurality of streams of configuration data.

93. The field programmable gate array of claim 89, wherein the register comprises a non-volatile memory connectable to an external backup battery.

94. A field programmable gate array, comprising:

a plurality of volatile memory cells to store a configuration of user configurable logic of the field programmable array;

a decryption circuit to receive and decrypt a stream of encrypted configuration data using a security key, and generate decrypted configuration data for configuring the user configurable logic;

a non-volatile register to store the security key;

a lock down control bit programmable to prevent the security key from being changed once the stream of configuration data is loaded.

95. The field programmable gate array of claim 94, wherein the lock down control bit allows the security key to be changed if the FPGA is supplied with a key change request that includes the security key.