CIRCUIT PERSONALIZATION

• US 20130145176A1
• Filed: 01/25/2013
• Published: 06/06/2013
• Est. Priority Date: 07/29/2005
• Status: Active Grant

• Current Assignee: Stmicroelectronics Pte Limited (STMicroelectronics NV)
• Original Assignee: Stmicroelectronics Pte Limited (STMicroelectronics NV)
• Inventors: Dellow, Andrew
• Granted Patent: US 8,838,998 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/70 Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers

Abstract

A method distributes personalized circuits to one or more parties. The method distributes a generic circuit to each party, encrypts a unique personalization value using a secret encryption key, and transmits each encrypted personalization value to the corresponding party. Each party then stores the encrypted personalization value in their circuit. The stored encrypted personalization value allows a piece of software to be properly executed by the circuit. A semiconductor integrated circuit is arranged to execute a piece of software that inputs a personalization value as an input parameter. The circuit comprises a personalization memory arranged to store an encrypted personalization value; a key memory for storing a decryption key; a control unit comprising a cryptographic circuit arranged to decrypt the encrypted personalization value using the decryption key; and a processor arranged to receive the decrypted personalization value and execute the software using the decrypted personalization value.

Claims

1. A method, comprising:

associating a first personalization value with a first plurality of generic circuits;

associating a second personalization value with a second plurality of generic circuits;

encrypting, using one or more configured processing devices, the first personalization value;

encrypting, using the one or more configured processing devices, the second personalization value;

initiating storage of the encrypted first personalization value in the first plurality of generic circuits; and

initiating storage of the encrypted second personalization value in the second plurality of generic circuits, wherein each of the first plurality of generic circuits and each of the second plurality of generic circuits is configured to;

retrieve an encrypted personalization value stored in the respective generic circuit;

decrypt the retrieved encrypted personalization value; and

use the decrypted personalization value to control execution of software.

2. The method of claim 1 wherein the associating the first personalization value with the first plurality of generic circuits comprises receiving the first personalization value.

3. The method of claim 2 wherein the initiating storage of the encrypted first personalization value in the first plurality of generic circuits comprises transmitting the encrypted first personalization value.

4. The method of claim 3 wherein the transmitting the first personalization value comprises further encrypting the encrypted first personalization value.

5. The method of claim 3 wherein the decrypting the retrieved personalization value comprises using a first decryption key, the first decryption key being stored in the first plurality of generic circuits and stored in the second plurality of generic circuits.

6. The method of claim 1 wherein the encrypting the first personalization value comprises using a first encryption key.

7. The method of claim 6 wherein the encrypting the second personalization value comprises using the first encryption key.

8. A method, comprising:

receiving a first plurality of generic circuits;

transmitting a first personalization value associated with the first plurality of generic circuits;

receiving the first personalization value in an encrypted form; and

storing the received encrypted first personalization value in the first plurality of generic circuits, wherein each of the first plurality of generic circuits is configured to control execution of a piece of software by retrieving and decrypting the stored encrypted first personalization value.

9. The method of claim 8, further comprising:

receiving a second plurality of generic circuits;

transmitting a second personalization value associated with the second plurality of generic circuits;

receiving the second personalization value in an encrypted form; and

storing the received encrypted second personalization value in the second plurality of generic circuits, wherein each of the second plurality of generic circuits is configured to control execution of a second piece of software by retrieving and decrypting the stored encrypted second personalization value.

10. The method of claim 9 wherein the first plurality of generic circuits and the second plurality of generic circuits store a secret common decryption key used to decrypt stored encrypted personalization values.

11. The method of claim 9 wherein the first personalization value comprises a first number and the second personalization value comprises a second number.

12. The method of claim 8 wherein the encrypted first personalization value is received in a further encrypted form.

13. The method of claim 8, further comprising incorporating each of the first plurality of generic circuits into a respective electronic device.

14. An integrated circuit, comprising:

a personalization memory;

a key memory configured to store a decryption key;

a personalization controller configured to;

control storage of a received encrypted version of a software personalization value in the personalization memory; and

decrypt the stored encrypted version of the personalization value using the decryption key stored in the key memory; and

a processor configured to control execution of software based on the decrypted software personalization value received from the personalization controller.

15. The integrated circuit of claim 14 wherein the personalization memory is a one-time-programmable memory.

16. The integrated circuit of claim 14 wherein the key memory is a one-time-programmable memory.

17. The integrated circuit of claim 14 wherein the decryption key is permanently recorded into the key memory at a circuit manufacturing stage.

18. The integrated circuit of claim 14 wherein the personalization controller is configured to restrict access to the personalization memory.

19. The integrated circuit of claim 18 wherein the personalization controller is configured to restrict access to the key memory.

20. The integrated circuit of claim 14 wherein the personalization value comprises a number.

21. The integrated circuit of claim 14 wherein the processor is configured to perform a circuit reset if the decrypted personalization value is different from the personalization value.

22. A system, comprising:

a system memory;

a processor configured to execute software;

a personalization memory;

a key memory; and

a personalization controller configured to;

control storage of a received encrypted version of a software personalization value in the personalization memory; and

decrypt the stored encrypted version of the personalization value using a decryption key stored in the key memory, wherein the processor is configured to control execution of software stored in the system memory based on the decrypted software personalization value.

23. The system of claim 22 wherein the personalization memory is a one-time-programmable memory and the key memory is a one-time-programmable memory.

24. The system of claim 23 wherein the decryption key is permanently recorded into the key memory at a circuit manufacturing stage.

25. The system of claim 22 wherein the personalization controller is configured to restrict access to the personalization memory and to restrict access to the key memory.

26. The system of claim 22 wherein the processor is configured to perform a circuit reset if the decrypted personalization value is different from a software personalization value associated with the software stored in the software memory.

27. The system of claim 22, further comprising a number memory coupled to the processor and configured to store decrypted personalization values decrypted by the personalization controller.

28. The system of claim 22, further comprising an integrated circuit, the integrated circuit including the personalization memory, the key memory and the personalization controller.

29. The system of claim 28 wherein the integrated circuit includes the processor and a number memory.

30. The system of claim 22 wherein the personalization controller comprises a cryptographic circuit configured to decrypt the stored encrypted version of the personalization value.