Integrated circuit that uses a dynamic characteristic of the circuit

• US 7,757,083 B2
• Filed: 06/01/2006
• Issued: 07/13/2010
• Est. Priority Date: 04/16/2002
• Status: Active Grant

• Current Assignee: Massachusetts Institute of Technology
• Original Assignee: Massachusetts Institute of Technology
• Inventors: Gassend, Blaise, Devadas, Srinivas
• Primary Examiner(s): Zia; Syed
• Assistant Examiner(s): AVERY, JEREMIAH L
• Application Number:
  US11/421,577
• Publication Number:
  US 20060221686A1
• Time in Patent Office: 1,503 Days
• Field of Search: 380/232
• US Class Current: 713/168
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G06F 21/73 by creating or determining hardware identification, e.g. serial numbers
• CPC Class Codes: G06F 21/77 in smart cards
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2121 Chip on media, e.g. a disk or tape with a chip embedded in its case
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: G09C 1/00 Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system cryptographic typewriters G09C3/00
• CPC Class Codes: H01L 2223/54433 containing identification or tracking information
• CPC Class Codes: H01L 2223/5444 for electrical read out
• CPC Class Codes: H01L 2223/54473 for use after dicing
• CPC Class Codes: H01L 23/544 Marks applied to semiconductor devices or parts, e.g. registration marks, alignment structures, wafer maps test patterns for characterising or monitoring manufacturing processes H01L22/00
• CPC Class Codes: H01L 23/576 using active circuits
• CPC Class Codes: H01L 2924/00 Indexing scheme for arrangements or methods for connecting or disconnecting semiconductor or solid-state bodies as covered by H01L24/00
• CPC Class Codes: H01L 2924/0002 Not covered by any one of groups H01L24/00, H01L24/00 and H01L2224/00
• CPC Class Codes: H04L 2209/34 Encoding or coding, e.g. Huffman coding or error correction
• CPC Class Codes: H04L 2209/42 : Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 9/0897 : involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/3278 : using physically unclonable functions [PUF]

Abstract

An integrated circuit has a first component that has a dynamic characteristic that varies among like integrated circuits, for example, among integrated circuits fabricated using the same lithography mask. Operating the first component produces an output that is dependent on the dynamic characteristic of the first component. A digital value associated with the integrated circuit is generated using the output of the first component, and then the generated digital value is used in operation of the integrated circuit.

Claims

1. A method comprising generating authentication information for a first device from a group of devices that exhibit variation between devices due to fabrication variations, the method comprising:

selecting one or more configurations of a plurality of circuit components of the device according to selection information provided to the device, the one or more configurations being selected from among a plurality of selectable configurations of the components, wherein each selected configuration of circuit components is associated with one or more signal paths through said components;

for each selected configuration,

forming the one or more signal paths associated with said configuration through components configured according to the selected configuration, and

propagating a signal through each of the formed signal paths, each of said signal paths having a dynamic characteristic associated with the propagation of the signal that is unique in the group to that device;

determining authentication information that is specific to the device based on the dynamic characteristics of the formed signal paths, wherein matching authentication information can be regenerated by repeating the forming of the signal paths through the component, and propagating of the signals through the formed signal paths;

wherein the dynamic characteristic of a signal path includes a delay characteristic of the signal path and wherein determining the authentication information includes determining said information based on the delay characteristics of the formed signal paths.

2. The method of claim 1 wherein the plurality of selectable configurations of the components are associated with multiple paths through each of a set of the circuit components.

3. The method of claim 1 wherein the circuit components include components from a group consisting of conducting wires or traces, semiconductor components, and logic gates.

4. The method of claim 1 wherein each of the delay characteristics of the signal paths of a selected configuration of components depends on separate delay characteristics of individual components in the paths, and wherein the delay characteristics of the signal paths include non-linear combinations of the separate delay characteristics.

5. The method of claim 1 wherein the forming of signal paths, propagating of signals, and determining authentication information are performed during an enrolling of the first device, the enrolling further including

transmitting selection information for selecting the one or more configurations to the first device,

receiving from the first device authentication information determined based on dynamic characteristics of the signal paths formed according to the selection information, and

storing the received authentication information in association with the first device and the selection information.

6. The method of claim 5 wherein storing the received authentication information includes keeping the selection and authentication information secret.

7. The method of claim 5 wherein the forming of signal paths, propagating of signals, and determining authentication information are repeated during an authenticating of the first device, the authenticating further including

transmitting selection information to the first device, and receiving authentication information determined based on the dynamic characteristics of the signal paths formed according said transmitted selection information, and

comparing the received authentication information received during the authenticating with the stored authentication information received during the enrolling of the first device.

8. The method of claim 7 wherein each of enrolling the first device and authenticating the first device includes configuring the circuit components to form a same signal path through said components.

9. The method of claim 1 further comprising enrolling each of the group of devices, including for each of the devices:

transmitting selection information to the device that identifies a subset of the selectable configurations;

receiving from the device authentication information determined based on dynamic characteristics according to the selection information transmitted to the device; and

storing the received authentication information in association with said device and the selection information transmitted to said device.

10. The method of claim 9 further comprising determining a different subset of the selectable configurations for each of the devices.

11. The method of claim 10 wherein determining the different subset for each device includes randomly choosing the members of each of the subsets.

12. The method of claim 10 wherein determining a different subset for each of the devices includes determining a subset of greater than 2³² selectable configurations for each device.

13. The method of claim 10 wherein storing the received authentication information includes keeping the selection and authentication information secret.

14. The method of claim 9 further comprising authenticating the first device, including:

transmitting selection information to the first device that identifies one of the subset of selectable configurations for the first device;

receiving from the first device authentication information determined based on the dynamic characteristics of the signal paths formed according said transmitted selection information; and

comparing the received authentication information with the stored authentication information received during enrollment of the first device.

15. The method of claim 1 further comprising fabricating the devices in the group of devices according to the common design.

16. The method of claim 15 wherein fabricating the devices comprises fabricating the group of devices according to a common set of lithography masks.

17. The method of claim 1 wherein the dynamic characteristics include characteristics determined during fabrication of the devices.

18. The method of claim 17 wherein the characteristics determined during fabrication of the devices include uncontrolled characteristics of a fabrication process.

19. The method of claim 1 in which the number of selectable configurations is greater than 256.

20. The method of claim 1 in which the number of selectable configurations is greater than 2⁶⁴.

21. The method of claim 1 further comprising:

receiving a selection signal at the first device encoding selection information that includes an identifier; and

wherein selecting the one or more configurations includes using the identifier.

22. The method of claim 1 wherein determining the authentication information based on the dynamic characteristic includes generating an oscillating signal using one of the formed signal paths.

23. The method of claim 22 wherein determining the authentication information based on the dynamic characteristic further includes determining a quantity related to an oscillation frequency of the oscillating signal

24. The method of claim 22, including one of counting a number of oscillations during a timed interval or applying a phase-locked loop to the oscillating signal.

25. The method of claim 1 wherein determining the authentication information includes comparing delays of a plurality of formed signal paths.

26. The method of claim 1 determining the authentication information includes compensating for variations in the measurement of the selected characteristic due to changes in an environment of the device.

27. The method of claim 26 wherein compensating for variations in the measurement includes measuring a reference characteristic, and computing a ratio of a measurement of the dynamic characteristics to a measurement of the reference characteristic.

28. The method of claim 21 further comprising correcting or reducing errors in a measurement of the dynamic characteristics.

29. The method of claim 21 further comprising:

transmitting a response signal from the first device encoding the authentication information.

30. The method of claim 1 further comprising:

receiving a selection signal at the first device encoding selection information that includes an identifier;

selecting a first one of the plurality of selectable configurations using the identifier; and

selecting a second one of the plurality of selectable configurations also using the identifier.

31. The method of claim 30, further comprising:

measuring a first dynamic characteristic in the first configuration;

measuring a second dynamic characteristic in the first configuration; and

comparing the first dynamic characteristic to the second dynamic characteristic.

32. The method of claim 31, further comprising generating a one-bit response according to the comparison of the first and second dynamic characteristics.

33. The method of claim 32, further comprising:

generating an n-bit response by repeating n−

1 times the steps of receiving a selection signal encoding selection information that includes an identifier, selecting a first one and a second one of the plurality of measurable characteristics using the identifier, measuring the first one and second one of the measurable characteristics to generate a first measurement and a second measurement, and comparing the first and second measurements to generate one bit of the n-bit response.

69. The method of claim 1 wherein selecting the one or more configurations includes selecting a first configuration, and selecting one or more subsequent configurations, at least some of the selected subsequent configurations being selected based on a dynamic characteristic of another of the selected configurations, and wherein determining the authentication information includes determining said information based on dynamic characteristics of one or more of the formed signal paths associated with the subsequent configurations.

34. A method comprising:

providing a first device from a group of devices fabricated based on a common design, each device having a corresponding plurality of measurable characteristics, including a plurality of dynamic characteristics, that is specific to the device in the group, each device having a measurement model for measuring the measurable characteristics; and

enabling authentication of the first device by selective measurement of one chosen subset of one or more of the plurality of measurable characteristics of the device and comparing the measured results of the one chosen subset with pre-stored measurements previously selectively measured for the one chosen subset on the first device;

wherein the plurality of measurable characteristics includes delay characteristics of a plurality of signal paths in the device.

35. The method of claim 34 wherein the plurality of signal paths include multiple paths through each of a set of circuit components, wherein the circuit components include one of passive transmission lines, active semiconductor elements, and logic gates.

36. The method of claim 34, wherein each of the plurality of measurable characteristics depends on a set of separate physical characteristics, and wherein measurement of the selection of one or more of the measureable characteristics includes forming a non-linear combination of a plurality of the separate physical characteristics according to selection information.

37. The method of claim 36 wherein the separate physical characteristics include characteristics of circuit components, and combining the plurality of separate physical characteristics includes forming a signal path through the circuit components selected according to the selection information.

38. The method of claim 34, wherein enabling authentication includes enrolling the first device, including

transmitting selection information to the first device,

receiving from the first device response information generated by selective measurement of one of the plurality of characteristics based on the selection information, and

storing the received response information in association with the first device and the selection information.

39. The method of claim 38, wherein storing the received response includes keeping the selection and response information secret.

40. The method of claim 38 further comprising authenticating the first device, including

transmitting the selection information to the first device, and receiving response information generated by the selective measurement of the one of the characteristics, and

comparing the received response information with the stored response information.

41. The method of claim 40 wherein each of enrolling the first device and authenticating the first device includes selectively measuring the one of the plurality of characteristics based on the selection information and generating the measurement information.

42. The method of claim 34, further comprising enrolling each of the group of devices, including for each of the devices:

transmitting selection information to the device that identifies a subset of the measurable characteristics;

receiving from the device response information generated by selective measurement of each of the subset of measurable characteristics identified in the selection information; and

storing the received response information in association with the first device and the selection information.

43. The method of claim 42 further comprising determining a different subset of the measurable characteristics for each of the devices, said determining the different subset for each device preferably including randomly choosing the members of each of the subsets.

44. The method of claim 43 wherein determining a different subset for each of the devices includes determining a subset of greater than 2³² selectable configurations for each device.

45. The method of claim 43, wherein storing the received response information includes keeping the selection and response information secret.

46. The method of claim 42 further comprising authenticating the first device, including:

transmitting selection information to the first device that identifies one of the subset of measurable characteristics for the first device;

receiving from the first device response information generated by selective measurement of the identified one of the subset of measurable characteristics; and

comparing the received response information with the stored response information received during enrollment of the first device.

47. The method of claim 34, further comprising fabricating the devices in the group of devices according to a common design, said fabricating the devices comprising fabricating the group of devices according to a common set of lithography masks.

48. The method of claim 34, wherein the corresponding plurality of measurable characteristics of the devices include characteristics determined during fabrication of the devices, said characteristics determined during fabrication of the devices including uncontrolled characteristics of a fabrication process.

49. The method of claim 34, wherein providing the first device from the group of devices includes providing a first integrated circuit.

50. The method of claim 34, in which the corresponding plurality of measurable characteristics comprise optical characteristics, wherein the optical characteristics preferably include reflection characteristics, said reflection characteristics preferably including speckle patterns.

51. The method of claim 34, in which the number of measurable characteristics of each device is greater than 256.

52. The method of claim 34, in which the number of measurable characteristics of each device is greater than 2¹²⁸.

53. The method of claim 34, in which each device comprises a functional component and a measurable component that have the plurality of measurable characteristics.

54. The method of claim 53, further comprising packaging the device in a package, wherein the functional component and the measurable component are disposed in the package in a way such that the functional component cannot be physically accessed without altering the plurality of measurable characteristics.

55. The method of claim 34, further comprising:

receiving a selection signal at the first device encoding selection information that includes an identifier; and

selecting one of the plurality of measurable characteristics using the identifier.

56. The method of claim 55 further comprising measuring the selected characteristic.

57. The method of claim 56 wherein the selected characteristic includes a delay characteristic of a selected signal path.

58. The method of claim 57 wherein measuring the delay characteristic includes generating an oscillating signal using the selected delay path.

59. The method of claim 58 wherein measuring the delay characteristic further includes determining a quantity related to an oscillation frequency of the oscillating signal, said determining the quantity related to the oscillation frequency preferably including one of counting a number of oscillations during a timed interval or applying a phase-locked loop to the oscillating signal.

60. The method of claim 57, wherein measuring the delay characteristics includes comparing delays of a plurality of selected signal paths.

61. The method of claim 56 wherein measuring the selected characteristic includes compensating for variations in the measurement of the selected characteristic due to changes in an environment of the device.

62. The method of claim 56 further comprising measuring a reference characteristic, and computing a ratio of a measurement of the selected characteristic to a measurement of the reference characteristic.

63. The method of claim 56 further comprising correcting or reducing errors in a measurement of the selected characteristic.

64. The method of claim 56 further comprising:

determining response information using the measured characteristic; and

transmitting a response signal from the first device encoding the response information.

65. The method of claim 34, further comprising:

receiving a selection signal at the first device encoding selection information that includes an identifier;

selecting a first one of the plurality of measurable characteristics using the identifier; and

selecting a second one of the plurality of measurable characteristics also using the identifier.

66. The method of claim 65, further comprising:

measuring the first selected characteristic to generate a first measurement;

measuring the second selected characteristic to generate a second measurement; and

comparing the first measurement to the second measurement.

67. The method of claim 66, further comprising generate a one-bit response according to the comparison of the first and second measurements.

68. The method of claim 67, further comprising:

generating an n-bit response by repeating n-i times the steps of receiving a selection signal encoding selection information that includes an identifier;

selecting a first one and a second one of the plurality of measurable characteristics using the identifier, measuring the first one and second one of the measurable characteristics to generate a first measurement and a second measurement; and

comparing the first and second measurements to generate one bit of the n-bit response.