Anti-tamper module

• US 8,074,082 B2
• Filed: 10/11/2005
• Issued: 12/06/2011
• Est. Priority Date: 10/08/2004
• Status: Active Grant

• Current Assignee: Nytell Software LLC (Intellectual Ventures LLC)
• Original Assignee: Aprolase Development Co LLC (Intellectual Ventures LLC)
• Inventors: Ozguz, Volkan H., Leon, John
• Primary Examiner(s): Pearson, David
• Assistant Examiner(s): Rahman, Mohammad L
• Application Number:
  US11/248,659
• Publication Number:
  US 20060087883A1
• Time in Patent Office: 2,247 Days
• Field of Search: 726/35, 726/36, 713/194, 713/152, 713/153, 713/164, 713/166, 713/183, 713/184, 713/192, 380/29, 380/52, 380/43, 380/272, 380/264, 380/44, 455/558, 326/8
• US Class Current: 713/194
• CPC Class Codes: G06F 21/87 by means of encapsulation, e.g. for integrated circuits
• CPC Class Codes: H01L 2223/6677 for antenna, e.g. antenna included within housing of semiconductor device antennas per se H01Q
• CPC Class Codes: H01L 2224/0401 Bonding areas specifically adapted for bump connectors, e.g. under bump metallisation [UBM]
• CPC Class Codes: H01L 2224/16 of an individual bump connector
• CPC Class Codes: H01L 2225/06548 Conductive via connections through the substrate, container, or encapsulation
• CPC Class Codes: H01L 2225/06551 Conductive connections on the side of the device
• CPC Class Codes: H01L 2225/06565 the devices having the same size and there being no auxiliary carrier between the devices
• CPC Class Codes: H01L 23/48 Arrangements for conducting electric current to or from the solid state body in operation, e.g. leads, terminal arrangements ; Selection of materials therefor
• CPC Class Codes: H01L 23/49816 Spherical bumps on the substrate for external connection, e.g. ball grid arrays [BGA]
• CPC Class Codes: H01L 23/576 using active circuits
• CPC Class Codes: H01L 25/0657 Stacked arrangements of devices
• CPC Class Codes: H01L 27/02 including semiconductor components specially adapted for rectifying, oscillating, amplifying or switching and having potential barriers; including integrated passive circuit elements having potential barriers
• CPC Class Codes: H01L 2924/00011 Not relevant to the scope of the group, the symbol of which is combined with the symbol of this group
• CPC Class Codes: H01L 2924/00014 the subject-matter covered by the group, the symbol of which is combined with the symbol of this group, being disclosed without further technical details
• CPC Class Codes: H01L 2924/15311 being a ball array, e.g. BGA

Abstract

An anti-tamper module is provided for protecting the contents and functionality of an integrated circuit incorporated in the module. The anti-tamper module is arranged in a stacked configuration having multiple layers. A connection layer is provided for connecting the module to an external system. A configurable logic device is provided for routing connections between the integrated circuit and the connection layer. Specifically, the configurable logic device is programmable to create logical circuits connecting at least one of the input/output connectors of the integrated circuit to at least one of the input/output connectors of the connection layer. Configuration information for programming the reconfigurable logic device is stored in a memory within the module.

Claims

1. An anti-tamper module for protecting integrated circuit contents, the anti-tamper module comprising:

a connection layer having an input/output connector configured to connect the anti-tamper module to an external system;

an integrated circuit connected to the connection layer;

a memory connected to the connection layer and configured to store code for controlling access to contents of the integrated circuit;

an active protective layer encasing the anti-tamper module and configured to;

impede inspection of the anti-tamper module; and

detect physical intrusion into the active protective layer, wherein the active protective layer includes electrical circuits disposed within the active protective layer that are configured to be broken in response to the physical intrusion; and

a processor configured to execute a reset code in response to detection of the physical intrusion, wherein the reset code is configured to erase at least a portion of the code stored in the memory.

2. The anti-tamper module of claim 1, wherein the memory is non-volatile memory.

3. The anti-tamper module of claim 1, further comprising a power source configured to provide power to the anti-tamper module.

4. The anti-tamper module of claim 3, wherein the memory is volatile memory, and wherein the power source is further configured to provide power to maintain storage of the code in the memory.

5. The anti-tamper module of claim 3, further comprising:

an antenna; and

a wireless interface configured to receive the code via the antenna and to store the code in the memory.

6. The anti-tamper module of claim 5, wherein the antenna and the wireless interface are configured to generate power through inductance during reception of a radio frequency signal by the antenna.

7. The anti-tamper module of claim 1, wherein the code stored in the memory comprises a software key required to access the contents of the integrated circuit.

8. The anti-tamper module of claim 7, wherein the software key is a password.

9. The anti-tamper module of claim 8, wherein the software key is an executable algorithm.

10. The anti-tamper module of claim 1, further comprising a firmware key configured to control access to the contents of the integrated circuit.

11. The anti-tamper module of claim 1, wherein the input/output connector of the connection layer is not covered by the protective layer.

12. The anti-tamper module of claim 1, wherein the integrated circuit comprises a plurality of input/output connectors connected to respective input/output connectors of the connection layer, and wherein the plurality of input/output connectors of the integrated circuit and the respective input/output connectors of the connection layer differ.

13. The anti-tamper module of claim 1, wherein the connection layer, the integrated circuit, and the memory are arranged in a stacked configuration.

14. The anti-tamper module of claim 13, wherein:

a first of the connection layer, the integrated circuit, and the memory is on a first level of a stack;

a second of the connection layer, the integrated circuit, and the memory is on a second level of the stack positioned above the first level; and

a third of the connection layer, the integrated circuit, and the memory is on a third level of the stack positioned above the second level.

15. The anti-tamper module of claim 1, further comprising a plurality of vias, wherein each via of the plurality of vias connects at least two of the connection layer, the integrated circuit, and the memory.

16. The anti-tamper module of claim 1, further comprising a plurality of conductive traces or wires, wherein each of the plurality of conductive traces or wires extends along the edges of and connects at least two of the connection layer, the integrated circuit, and the memory.

60. The anti-tamper module of claim 1, further comprising a processor configured to execute reset code to set the memory to a default state in response to the active protective layer detecting the physical intrusion.

17. An anti-tamper module for an integrated circuit, the anti-tamper module comprising:

a connection layer having a first plurality of input/output connectors configured to connect the anti-tamper module to an external system;

an integrated circuit having a second plurality of input/output connectors; and

a configurable logic device connected to the connection layer and to the integrated circuit, wherein the configurable logic device is configured to;

create logical circuits connecting at least one of the first plurality of input/output connectors of the connection layer to at least one of the second plurality of input/output connectors; and

execute reset code in response to a trigger event to set the configurable logic device to a default state and remove the created logical circuits, wherein the trigger event is indicative of an intrusion into the anti-tamper module.

18. The anti-tamper module of claim 17, wherein the configurable logic device comprises a field programmable gate array.

19. The anti-tamper module according to claim 17, wherein the configurable logic device comprises a field-programmable interconnect device.

20. The anti-tamper module of claim 17, wherein the configurable logic device is hardwired to create the logical circuits.

21. The anti-tamper module of claim 17, further comprising a power source configured to provide power to the anti-tamper module.

22. The anti-tamper module of claim 17, further comprising:

an antenna; and

a wireless interface configured to receive a trigger code via the antenna to trigger the configurable logic device to execute the reset code.

23. The anti-tamper module of claim 22, wherein the antenna and the wireless interface are configured to generate power through inductance during reception of a radio frequency signal by the antenna.

24. The anti-tamper module according to claim 17, further comprising a memory configured to store a software key required to access the integrated circuit.

25. The anti-tamper module of claim 24, wherein the configurable logic device comprises the memory configured to store the software key.

26. The anti-tamper module of claim 24, wherein the software key is a password.

27. The anti-tamper module of claim 24, wherein the software key is an executable algorithm.

28. The anti-tamper module of claim 17, further comprising a firmware key configured to control access to contents of the integrated circuit.

29. The anti-tamper module of claim 17, further comprising a protective layer encasing the anti-tamper module to impede inspection of the anti-tamper module, wherein the first plurality of input/output connectors of the connection layer are not covered by the protective layer.

30. The anti-tamper module of claim 29, further comprising a power source configured to provide power to the anti-tamper module;

wherein the configurable logic device is further configured to execute the reset code to set the configurable logic device to a default state, thereby removing the logical circuits; and

wherein the protective layer is an active layer configured to detect the intrusion into the protective layer, and wherein the configurable logic device is further configured to execute the reset code in response to the protective layer detecting intrusion.

31. The anti-tamper module of claim 17, wherein the second plurality of input/output connectors and the first plurality of input/output connectors differ.

32. The anti-tamper module of claim 17, wherein configuration data for configuring the configurable logic device is configured to be received from the external system.

33. The anti-tamper module of claim 17, wherein:

the connection layer, the integrated circuit, and the configurable logic device are arranged in a stacked configuration;

a first of the connection layer, the integrated circuit, and the configurable logic device is on a first level of a stack;

a second of the connection layer, the integrated circuit, and the configurable logic device is on a second level of the stack positioned above the first level; and

a third of the connection layer, the integrated circuit, and the configurable logic device is on a third level of the stack positioned above the second level.

34. The anti-tamper module of claim 17, further comprising a plurality of vias, wherein each of the plurality of vias connects at least two of the connection layer, the integrated circuit, and configurable logic device.

35. The anti-tamper module of claim 17, further comprising a plurality of conductive traces or wires, wherein each of the plurality of conductive traces or wires extends along the sides of and connects at least two of the connection layer, the integrated circuit, and the configurable logic device.

61. The anti-tamper module of claim 17, wherein a non-active portion of the configurable logic device is configured to store a reset code.

63. The anti-tamper module of claim 17, wherein the configurable logic device is configured such that, when the configurable logic device is disconnected from power, there are no electrical connections between the first and second pluralities of input/output connectors.

36. An anti-tamper module for protecting contents of an integrated circuit, the anti-tamper module comprising:

a connection layer having a first plurality of input/output connectors configured to connect the anti-tamper module to an external system;

an integrated circuit having a second plurality of input/output connectors;

a configurable logic device connected to the connection layer and to the integrated circuit, wherein the configurable logic device is configured to;

create logical circuits connecting at least one of the first plurality of input/output connectors to at least one of the second plurality of input/output connectors; and

execute reset code in response to a trigger event to set the configurable logic device to a default state and remove the created logical circuits, wherein the trigger event is indicative of an intrusion into the anti-tamper module; and

a memory configured to store code for controlling access to contents of the integrated circuit.

37. The anti-tamper module of claim 36, wherein the configurable logic device comprises a field-programmable gate array.

38. The anti-tamper module of claim 36, wherein the configurable logic device comprises a field-programmable interconnect device.

39. The anti-tamper module of claim 36, wherein the configurable logic device is hardwired to create the logical circuits.

40. The anti-tamper module of claim 36, wherein the memory is non-volatile memory.

41. The anti-tamper module of claim 36, further comprising a power source configured to provide power to the anti-tamper module.

42. The anti-tamper module of claim 41, wherein the memory is volatile memory, and wherein the power source is further configured to provide power to maintain storage of the code in the memory.

43. The anti-tamper module according to claim 36, further comprising:

an antenna; and

a wireless interface configured to receive the code via the antenna and to store the code in the memory.

44. The anti-tamper module of claim 43, wherein the antenna and the wireless interface are configured to generate power through inductance during reception of a radio frequency signal by the antenna.

45. The anti-tamper module of claim 36, further comprising a processor configured to execute the reset code to set the memory to a default state, thereby erasing the memory, wherein the processor is further configured to execute the reset code in response to the trigger event.

46. The anti-tamper module of claim 36, further comprising a software key required to access the contents of the integrated circuit.

47. The anti-tamper module of claim 46, wherein the software key is stored in the memory.

48. The anti-tamper module of claim 46, wherein the configurable logic comprises the memory configured to store the software key.

49. The anti-tamper module of claim 46, wherein the software key is a password.

50. The anti-tamper module of claim 46, wherein the software key is an executable algorithm.

51. The anti-tamper module of claim 36, further comprising a firmware key configured to control access to the contents of the integrated circuit.

52. The anti-tamper module of claim 36, further comprising a protective layer encasing the anti-tamper module and configured to impede inspection of the anti-tamper module, wherein the first plurality of input/output connectors of the connection layer are not covered by the protective layer.

53. The anti-tamper module of claim 52, further comprising:

a power source configured to provide power to the anti-tamper module; and

a processor configured to execute reset code to set the memory to a default state, thereby erasing the memory;

wherein the protective layer is an active layer configured to detect intrusion into the protective layer, and wherein the processor is further configured to execute the reset code in response to the protective layer detecting intrusion.

54. The anti-tamper module of claim 52, further comprising a power source configured to provide power to the anti-tamper module;

wherein the configurable logic device is configured to execute reset code to set the configurable logic device to a default state, thereby removing the logical circuits; and

wherein the protective layer is an active layer configured to detect intrusion into the protective layer, and wherein the configurable logic device is further configured to execute the reset code in response to the protective layer detecting intrusion.

55. The anti-tamper module according to claim 36, wherein the second plurality of input/output connectors and the first plurality of input/output connectors differ.

56. The anti-tamper module of claim 36, wherein configuration data for configuring the configurable logic device is configured to be received from the external system.

57. The anti-tamper module of claim 36, wherein:

the connection layer, the integrated circuit, the configurable logic device, and the memory are arranged in a stacked configuration;

a first of the connection layer, the integrated circuit, and the memory is on a first level of a stack;

a second of the connection layer, the integrated circuit, the configurable logic device, and the memory is on a second level of the stack positioned above the first level;

a third of the connection layer, the integrated circuit, the configurable logic device, and the memory is on a third level of the stack positioned above the second level; and

a fourth of the connection layer, the integrated circuit, the configurable logic device, and the memory is on a fourth level of the stack positioned above the third level.

58. The anti-tamper module of claim 36, further comprising a plurality of vias, wherein each of the plurality of vias connects at least two of the connection layer, the integrated circuit, the configurable logic device, and the memory.

59. The anti-tamper module of claim 36, further comprising a plurality of conductive traces or wires, wherein each of the plurality of conductive traces or wires extends along the sides of and connects at least two of the connection layer, the integrated circuit, the configurable logic device, and the memory.

62. The anti-tamper module of claim 36, wherein the reset code is stored in a non-active portion of the configurable logic device.