Stable probing-resilient physically unclonable function (PUF) circuit

• US 9,762,400 B2
• Filed: 10/26/2016
• Issued: 09/12/2017
• Est. Priority Date: 03/24/2015
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Mathew, Sanu K., Satpathy, Sudhir K.
• Primary Examiner(s): LE, DON P
• Application Number:
  US15/335,158
• Publication Number:
  US 20170111180A1
• Time in Patent Office: 321 Days
• CPC Class Codes: G06Q 10/08 Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H03K 19/17768 for security
• CPC Class Codes: H04L 2209/04 Masking or blinding
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 9/3278 using physically unclonable functions [PUF]

Abstract

Embodiments include apparatuses, methods, and systems for a physically unclonable function (PUF) circuit. The PUF circuit may include an array of PUF cells to generate respective PUF bits of an encryption code. Individual PUF cells may include first and second inverters cross-coupled between a bit node and a bit bar node. The individual PUF cells may further include a first pre-charge transistor coupled to the bit node and configured to receive a clock signal via a first clock path, and a second pre-charge transistor coupled to the bit bar node and configured to receive the clock signal via a second clock path. Features and techniques of the PUF cells are disclosed to improve the stability and/or bias strength of the PUF cells, to generate a dark bit mask for the array of PUF cells, and to improve resilience to probing attacks. Other embodiments may be described and claimed.

Claims

1. A physically unclonable function (PUF) circuit comprising:

a clock terminal to receive a clock signal;

a PUF cell coupled to the clock terminal to receive the clock signal, the PUF cell to perform multiple instances of a bit generation process, responsive to the clock signal, to generate respective output bits at a bit node of the PUF cell; and

a counter coupled to the bit node to count a number of instances for which the output bit has a first logic value, wherein a value of a PUF bit associated with the PUF cell is based on the counted number.

2. The PUF circuit of claim 1, further comprising processing circuitry coupled to the counter to:

determine that the value of the PUF bit is the first logic value if the counted number is above a first threshold; and

determine that the value of the PUF bit is a second logic value if the counted number is below a second threshold that is less than the first threshold.

3. The PUF circuit of claim 2, wherein the processing circuitry is further to mark the PUF bit as a dark bit if the counted number is between the first and second thresholds.

4. The PUF circuit of claim 1, wherein the PUF bit corresponds to a most significant bit of the counter.

5. The PUF circuit of claim 1, wherein the counter is a 4-bit counter.

6. The PUF circuit of claim 1, wherein the PUF cell further includes:

a bit bar node;

a first inverter and a second inverter that are cross-coupled between the bit node and the bit bar node;

a first pre-charge transistor coupled to the bit node and to charge the bit node responsive to the clock signal; and

a second pre-charge transistor coupled to the bit bar node to charge the bit bar node responsive to the clock signal.

7. The PUF circuit of claim 6, wherein the PUF cell is switchable between a bit generation mode and a delay hardening mode, and wherein the PUF cell further comprises control circuitry to write a second logic value to the bit node during the delay hardening mode responsive to a determination that the value of the PUF bit is the first logic value.

8. The PUF circuit of claim 7, further comprising:

a first delay chain disposed on a first clock path between the clock terminal and the first pre-charge transistor; and

a second delay chain disposed on a second clock path between the clock terminal and the second pre-charge transistor.

9. The PUF circuit of claim 6, wherein the first pre-charge transistor is coupled to the clock terminal via a first clock path, wherein the second pre-charge transistor is coupled to the clock terminal via a second clock path, wherein the first and second clock paths are symmetrical and include a first metal layer, and wherein the bit node and the bit bar node are disposed in a second metal layer that is below the first metal layer.

10. The PUF circuit of claim 1, wherein the PUF cell is a first PUF cell, and wherein the PUF circuit includes an array of PUF cells including the first PUF cell.

11. A physically unclonable function (PUF) circuit comprising a PUF cell that includes:

a first inverter and a second inverter that are cross-coupled between a bit node and a bit bar node;

a first pre-charge transistor coupled to the bit node, the first pre-charge transistor to receive a clock signal via a first clock path; and

a second pre-charge transistor coupled to the bit bar node, the second pre-charge transistor to receive the clock signal via a second clock path;

wherein the first and second clock paths include a first metal layer that is coupled to a clock terminal to receive the clock signal, and wherein the bit node and the bit bar node are disposed in a second metal layer that is below the first metal layer.

12. The PUF circuit of claim 11, wherein the first and second clock paths are symmetrical.

13. The PUF circuit of claim 11, further comprising:

a first delay chain disposed on a first clock path between the clock terminal and the first pre-charge transistor; and

a second delay chain disposed on a second clock path between the clock terminal and the second pre-charge transistor.

14. The PUF circuit of claim 13, wherein the PUF cell is switchable between a bit generation mode and a delay hardening mode, wherein the PUF cell is to generate a PUF bit during the bit generation mode that has a first logic value, and wherein the PUF cell further comprises control circuitry to write a second logic value to the bit node during the delay hardening mode, wherein the second logic value is an inverse of the first logic value.

15. The PUF circuit of claim 11, wherein the PUF cell further includes a first programmable delay chain on the first clock path and a second programmable delay chain on the second clock path, and wherein the PUF circuit further includes mask generation circuitry coupled to the first and second programmable delay chains to:

control the first and second programmable delay chains to provide a series of different values of a differential delay between the first and second delay chains, wherein the PUF cell is to perform a bit generation process for each value of the differential delay to generate respective output bits;

determine a bias strength of the PUF cell based on the output bits; and

generate a dark bit mask based on the determined bias strength.

16. The PUF circuit of claim 11, wherein the PUF cell is to perform multiple instances of a bit generation process, responsive to the clock signal, to generate respective output bits at the bit node of the PUF cell, and wherein the PUF circuit further comprises:

a counter coupled to the bit node to count a number of the instances of the bit generation process for which the output bit has a first logic value, wherein a value of a PUF bit associated with the PUF cell is based on the counted number.

17. A computer system comprising:

a processor;

a memory;

a physically unclonable function (PUF) circuit coupled to the processor or the memory, the PUF circuit comprising;

a first inverter and a second inverter that are cross-coupled between a bit node and a bit bar node;

a first pre-charge transistor coupled to the bit node, the first pre-charge transistor to receive a clock signal via a first clock path;

a second pre-charge transistor coupled to the bit bar node, the second pre-charge transistor to receive the clock signal via a second clock path; and

control circuitry to;

pass the clock signal to the first and second pre-charge transistors during a bit generation mode to generate a PUF bit at the bit node with a first value; and

write a second value to the bit node during a delay hardening mode, the second value being a logical inverse of the first value.

18. The computer system of claim 17, wherein the PUF circuit further comprises:

a first delay chain on the first clock path; and

a second delay chain on the second clock path.

19. The computer system of claim 17, wherein the PUF circuit further comprises a clock terminal to receive the clock signal and an enable terminal to receive an enable signal to switch the PUF circuit between the bit generation mode and the delay hardening mode, and wherein the control circuitry includes:

a first negative-AND (NAND) gate having a first input terminal coupled to the clock terminal to receive the clock signal, a second input terminal coupled to the enable terminal to receive the enable signal, and an output terminal;

a second NAND gate having a first input terminal coupled to receive an inverse of the enable signal, a second input terminal coupled to an output terminal of a flip-flop to receive an output signal, and an output terminal; and

a third NAND gate having a first input terminal coupled to the output terminal of the first NAND gate, a second input terminal coupled to the output terminal of the second NAND gate, and an output terminal coupled to the first clock path.

20. The computer system of claim 19, wherein the control circuitry further includes:

a fourth NAND gate having a first input terminal coupled to receive an inverse of the enable signal, a second input terminal coupled to an output bar terminal of the flip-flop to receive an output bar signal, and an output terminal; and

a fifth NAND gate having a first input terminal coupled to the output terminal of the first NAND gate, a second input terminal coupled to the output terminal of the fourth NAND gate, and an output terminal coupled to a second delay chain.

21. The computer system of claim 17, wherein, to write the second value to the bit node during the delay hardening mode, the control circuitry is to pass a voltage corresponding to the second value to the first pre-charge transistor via the first clock path and is to pass a voltage corresponding to the first value to the second pre-charge transistor via the second clock path.

22. The computer system of claim 17, wherein the PUF circuit further comprises:

a first programmable delay chain on the first clock path;

a second programmable delay chain on the second clock path; and

mask generation circuitry coupled to the first and second programmable delay chains to;

control the first and second programmable delay chains to provide a series of different values of a differential delay between the first and second programmable delay chains, wherein the PUF circuit is to perform a bit generation process for each value of the differential delay to generate respective output bits;

determine a bias strength of the PUF circuit based on the output bits; and

generate a dark bit mask based on the determined bias strength.

23. The computer system of claim 17, wherein, during a bit generation process of the PUF circuit, the first and second pre-charge transistors are turned on and then off, responsive to the clock signal, to generate an output bit, wherein the PUF circuit is to perform multiple instances of the bit generation process to generate respective output bits, and wherein the PUF circuit further comprises:

a counter coupled to the bit node to count a number of the instances of the bit generation process for which the PUF circuit generates an output bit with a first logic value, wherein a value of the PUF bit associated with the PUF circuit is based on the counted number.

24. The computer system of claim 17, further comprising a display and one or more antennas coupled to the processor.