Authentication for information provided to an integrated circuit

• US 7,768,293 B1
• Filed: 04/10/2009
• Issued: 08/03/2010
• Est. Priority Date: 09/09/2005
• Status: Expired due to Fees

• Current Assignee: Xilinx, Inc. (Advanced Micro Devices, Inc.)
• Original Assignee: Xilinx, Inc. (Advanced Micro Devices, Inc.)
• Inventors: Knapp, Steven K.
• Primary Examiner(s): Tan; Vibol
• Assistant Examiner(s): Tran; Thienvu V
• Application Number:
  US12/421,837
• Time in Patent Office: 480 Days
• Field of Search: 326/8
• US Class Current: 326/8
• CPC Class Codes: G06F 21/572 Secure firmware programming, e.g. of basic input output system [BIOS]
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A system for authentication of information provided to an integrated circuit, a method for rights management of an integrated circuit, and a method for configuring a programmable logic device are described. A memory is coupled to a programmable logic device. The memory includes an array of memory cells and storage devices. The storage devices provide a first storage space and a second storage space. The first storage space is for storing a first identifier. The second storage space is for storing a second identifier, which is a transformation of the first identifier. The array of memory cells is for storing configuration information to configure programmable logic of the programmable logic device. The configuration information includes authentication logic information.

Claims

1. A method for rights management of an integrated circuit, comprising:

obtaining a first identifier stored in first storage devices, the first identifier being associated with a system implementing the integrated circuit;

selecting a transformation operation for transforming the first identifier;

providing, in a configuration bitstream, configuration information for configuring programmable resources of the integrated circuit to enable the selected transformation operation;

configuring the programmable resources with the configuration information to implement the selected transformation operation;

transforming the first identifier using the selected transformation operation to provide a second identifier;

and

authenticating a use of the configuration bitstream in the integrated circuit by comparing the second identifier with a stored second identifier.

2. The method according to claim 1, wherein the first storage devices are located in the integrated circuit.

3. The method according to claim 1, wherein the first storage devices are located externally to the integrated circuit.

4. The method according to claim 1, wherein the stored second identifier is stored in second storage devices located in the integrated circuit.

5. The method according to claim 1, wherein the stored second identifier is stored in second storage devices located externally to the integrated circuit.

6. A method for rights management of an integrated circuit, comprising:

selecting a transformation operation for transforming an identification;

providing, in a configuration bitstream, configuration information for configuring programmable resources of the integrated circuit to enable the selected transformation operation;

configuring the programmable resources with the configuration information to implement the selected transformation operation;

transforming the identification using the selected transformation operation; and

authenticating a use of the configuration bitstream in the integrated circuit based upon a result of the transforming the identification.

7. The method of claim 6, further comprising storing a unique identification in a memory associated with the integrated circuit, wherein transforming the identification comprises transforming the unique identification.

8. The method of claim 7, wherein authenticating a use of the configuration bitstream comprises comparing the transformed unique identification with a user identification.

9. The method of claim 8, further comprises storing the user identification in a register and preventing altering the user identification in the register.

10. The method of claim 6, further comprising storing a user identification in a memory associated with the integrated circuit, wherein transforming an identification comprises transforming the user identification.

11. The method of claim 10, wherein authenticating a use of the configuration bitstream comprises comparing the transformed user identification with a unique identification associated with a system implementing the integrated circuit.

12. The method of claim 6, wherein the configuration bitstream is encrypted, the method further comprising decrypting the encrypted configuration bitstream.

13. A method for rights management of an integrated circuit, comprising:

selecting a transformation operation for transforming an identification;

storing a unique identification for a system implementing the integrated circuit;

storing a user identification comprising a transform of the unique identification by the transformation operation;

providing, in a configuration bitstream, configuration information for configuring programmable resources of the integrated circuit to enable the selected transformation operation or an inverse of the selected transformation operation;

configuring the programmable resources to implement the selected transformation operation or the inverse of the selected transformation operation;

transforming one of the stored unique identification and the stored user identification; and

authenticating a use of the configuration bitstream in the integrated circuit by comparing the result of the transforming with the other of the stored unique identification and the stored user identification.

14. The method of claim 13, wherein storing a unique identification comprises writing a unique identification to a memory associated with the integrated circuit during manufacturing of the memory.

15. The method of claim 13, wherein storing a user identification comprises storing the user identification in a memory associated with the integrated circuit by a user of the integrated circuit.

16. The method of claim 15, further comprising preventing changing the user identification after storing the user identification.

17. The method of claim 13, wherein providing, in a configuration bitstream, configuration information comprises providing an encrypted configuration bitstream.

18. The method of claim 17, further comprising decrypting the encrypted configuration bitstream.

19. The method of claim 13, further comprising providing full functionality if the configuration bitstream is authenticated.

20. The method of claim 13, further comprising providing partial functionality if the configuration bitstream is not authenticated.