Methods of authenticating a user design in a programmable integrated circuit

• US 7,987,358 B1
• Filed: 06/09/2006
• Issued: 07/26/2011
• Est. Priority Date: 06/09/2006
• Status: Active Grant

• Current Assignee: Xilinx, Inc. (Advanced Micro Devices, Inc.)
• Original Assignee: Xilinx, Inc. (Advanced Micro Devices, Inc.)
• Inventors: Walstrum, James A. Jr., Sheth, Shalin Umesh, Knapp, Steven K.
• Primary Examiner(s): LaForgia; Christian
• Assistant Examiner(s): Schmidt; Kari L
• Application Number:
  US11/450,756
• Time in Patent Office: 1,873 Days
• Field of Search: 713/160, 713/168, 713189-193, 726/2, 380/44, 380/278
• US Class Current: 713/160
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices

Abstract

Methods of authenticating a user design in a programmable integrated circuit. The methods utilize an identifier unique to the programmable IC and a data word taken from the user design. The data word can be unique to the design and can include a string of data taken from the configuration data for the design, or the values of circuit nodes read from selected points throughout the design. A function is performed on the identifier and the data word, producing a key specific to the user design as implemented in that programmable IC. The key is compared to an expected value. When the key matches the expected value, the user design is enabled. When the key does not match the expected value, at least a portion of the user design is disabled. Circuitry for performing the steps of the method can be implemented in the programmable resources of the programmable IC.

Claims

1. A method of authenticating a user design in a programmable integrated circuit (IC), comprising:

programming the user design into the programmable IC, wherein a programmed IC is produced;

disabling a first portion of the user design in the programmed IC;

performing a function on a first value comprising an identifier unique to the programmable IC and on a second value comprising a data word from the user design, wherein the function provides a key specific to the programmed IC;

wherein the data word from the user design is data that configures a part of the user design on the programmable IC;

comparing the key with an expected value; and

enabling, when the key matches the expected value, the first portion of the user design in the programmed IC.

2. The method of claim 1, wherein the disabling, the performing, the comparing, and the enabling are all performed by a second portion of the user design in the programmed IC.

3. The method of claim 1, wherein programming the user design into the programmable IC comprises storing configuration data that implements the user design in configuration memory included in the programmable IC, and wherein the data word is included in the configuration data.

4. The method of claim 1, wherein the data word comprises states of a plurality of nodes in the user design.

5. The method of claim 1, wherein the identifier unique to the programmable IC comprises a plurality of bits from a plurality of electrically programmable fuses included in the programmable IC.

6. The method of claim 1, wherein the performing the function comprises performing a hash function on the first value and the second value.

7. The method of claim 1, wherein the performing the function comprises shifting bits of the first value and the second value through a shift register.

8. The method of claim 1, wherein the programmable IC comprises a device selected from a group consisting of:

a programmable logic device (PLD);

a microprocessor;

a digital signal processor, and a microcontroller.

9. A method of authenticating a user design in a programmable integrated circuit (IC), comprising:

programming the user design into the programmable IC, wherein a programmed IC is produced;

performing a function on a first value comprising an identifier unique to the programmable IC and on a second value comprising a data word from the user design, wherein the function provides a key specific to the programmed IC;

wherein the data word from the user design is data that configures a part of the user design on the programmable IC;

comparing the key with an expected value;

enabling, when the key matches the expected value, at least a first portion of the user design in the programmed IC; and

disabling, when the key does not match the expected value, at least the first portion of the user design in the programmed IC.

10. The method of claim 9, wherein the performing, the comparing, the enabling, and the disabling are all performed by a second portion of the user design in the programmed IC.

11. The method of claim 9, wherein programming the user design into the programmable IC comprises storing configuration data that implements the user design in configuration memory included in the programmable IC.

12. The method of claim 11, wherein the data word is included in the configuration data.

13. The method of claim 11, wherein the data word comprises states of a plurality of nodes in the user design.

14. The method of claim 11, wherein the expected value is included in the configuration data.

15. The method of claim 9, wherein the identifier unique to the programmable IC is stored in a plurality of electrically programmable fuses included in the programmable IC.

16. The method of claim 9, wherein the performing the function comprises performing a hash function on the first value and the second value.

17. The method of claim 9, wherein the performing the function comprises shifting bits of the first value and the second value through a shift register.

18. The method of claim 9, wherein the data word is unique to the user design.

19. The method of claim 9, wherein the programmable IC comprises a device selected from a group consisting of:

a programmable logic device (PLD);

a microprocessor;

a digital signal processor, and a microcontroller.

20. A method of authenticating a user design programmed into a programmable integrated circuit (IC), comprising:

performing, in a first portion of the user design, a function on a first value comprising an identifier unique to the programmable IC and on a second value comprising a data word from the user design, wherein the function provides a key specific to the user design as implemented in the programmable IC;

wherein the data word from the user design is data that configures a part of the user design on the programmable IC;

comparing the key with an expected value; and

ensuring that a second portion of the user design in the programmable IC functions differently when the key matches the expected value and when the key does not match the expected value.