US20020104872A1 - Method and apparatus for securing electronic circuits - Google Patents
Method and apparatus for securing electronic circuits Download PDFInfo
- Publication number
- US20020104872A1 US20020104872A1 US10/120,243 US12024302A US2002104872A1 US 20020104872 A1 US20020104872 A1 US 20020104872A1 US 12024302 A US12024302 A US 12024302A US 2002104872 A1 US2002104872 A1 US 2002104872A1
- Authority
- US
- United States
- Prior art keywords
- integrated circuit
- circuit
- integrated circuits
- memory cells
- chip
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Abandoned
Links
Images
Classifications
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L23/00—Details of semiconductor or other solid state devices
- H01L23/57—Protection from inspection, reverse engineering or tampering
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
- G06F21/86—Secure or tamper-resistant housings
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11C—STATIC STORES
- G11C7/00—Arrangements for writing information into, or reading information out from, a digital store
- G11C7/24—Memory cell safety or protection circuits, e.g. arrangements for preventing inadvertent reading or writing; Status cells; Test cells
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L2224/00—Indexing scheme for arrangements for connecting or disconnecting semiconductor or solid-state bodies and methods related thereto as covered by H01L24/00
- H01L2224/01—Means for bonding being attached to, or being formed on, the surface to be connected, e.g. chip-to-package, die-attach, "first-level" interconnects; Manufacturing methods related thereto
- H01L2224/02—Bonding areas; Manufacturing methods related thereto
- H01L2224/04—Structure, shape, material or disposition of the bonding areas prior to the connecting process
- H01L2224/05—Structure, shape, material or disposition of the bonding areas prior to the connecting process of an individual bonding area
- H01L2224/0554—External layer
- H01L2224/0555—Shape
- H01L2224/05552—Shape in top view
- H01L2224/05554—Shape in top view being square
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L2224/00—Indexing scheme for arrangements for connecting or disconnecting semiconductor or solid-state bodies and methods related thereto as covered by H01L24/00
- H01L2224/01—Means for bonding being attached to, or being formed on, the surface to be connected, e.g. chip-to-package, die-attach, "first-level" interconnects; Manufacturing methods related thereto
- H01L2224/10—Bump connectors; Manufacturing methods related thereto
- H01L2224/15—Structure, shape, material or disposition of the bump connectors after the connecting process
- H01L2224/16—Structure, shape, material or disposition of the bump connectors after the connecting process of an individual bump connector
- H01L2224/161—Disposition
- H01L2224/16135—Disposition the bump connector connecting between different semiconductor or solid-state bodies, i.e. chip-to-chip
- H01L2224/16145—Disposition the bump connector connecting between different semiconductor or solid-state bodies, i.e. chip-to-chip the bodies being stacked
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L2224/00—Indexing scheme for arrangements for connecting or disconnecting semiconductor or solid-state bodies and methods related thereto as covered by H01L24/00
- H01L2224/01—Means for bonding being attached to, or being formed on, the surface to be connected, e.g. chip-to-package, die-attach, "first-level" interconnects; Manufacturing methods related thereto
- H01L2224/42—Wire connectors; Manufacturing methods related thereto
- H01L2224/47—Structure, shape, material or disposition of the wire connectors after the connecting process
- H01L2224/48—Structure, shape, material or disposition of the wire connectors after the connecting process of an individual wire connector
- H01L2224/481—Disposition
- H01L2224/48151—Connecting between a semiconductor or solid-state body and an item not being a semiconductor or solid-state body, e.g. chip-to-substrate, chip-to-passive
- H01L2224/48221—Connecting between a semiconductor or solid-state body and an item not being a semiconductor or solid-state body, e.g. chip-to-substrate, chip-to-passive the body and the item being stacked
- H01L2224/48245—Connecting between a semiconductor or solid-state body and an item not being a semiconductor or solid-state body, e.g. chip-to-substrate, chip-to-passive the body and the item being stacked the item being metallic
- H01L2224/48247—Connecting between a semiconductor or solid-state body and an item not being a semiconductor or solid-state body, e.g. chip-to-substrate, chip-to-passive the body and the item being stacked the item being metallic connecting the wire to a bond pad of the item
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L2224/00—Indexing scheme for arrangements for connecting or disconnecting semiconductor or solid-state bodies and methods related thereto as covered by H01L24/00
- H01L2224/01—Means for bonding being attached to, or being formed on, the surface to be connected, e.g. chip-to-package, die-attach, "first-level" interconnects; Manufacturing methods related thereto
- H01L2224/42—Wire connectors; Manufacturing methods related thereto
- H01L2224/47—Structure, shape, material or disposition of the wire connectors after the connecting process
- H01L2224/48—Structure, shape, material or disposition of the wire connectors after the connecting process of an individual wire connector
- H01L2224/484—Connecting portions
- H01L2224/48463—Connecting portions the connecting portion on the bonding area of the semiconductor or solid-state body being a ball bond
- H01L2224/48465—Connecting portions the connecting portion on the bonding area of the semiconductor or solid-state body being a ball bond the other connecting portion not on the bonding area being a wedge bond, i.e. ball-to-wedge, regular stitch
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L2225/00—Details relating to assemblies covered by the group H01L25/00 but not provided for in its subgroups
- H01L2225/03—All the devices being of a type provided for in the same subgroup of groups H01L27/00 - H01L33/648 and H10K99/00
- H01L2225/04—All the devices being of a type provided for in the same subgroup of groups H01L27/00 - H01L33/648 and H10K99/00 the devices not having separate containers
- H01L2225/065—All the devices being of a type provided for in the same subgroup of groups H01L27/00 - H01L33/648 and H10K99/00 the devices not having separate containers the devices being of a type provided for in group H01L27/00
- H01L2225/06503—Stacked arrangements of devices
- H01L2225/06513—Bump or bump-like direct electrical connections between devices, e.g. flip-chip connection, solder bumps
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L2924/00—Indexing scheme for arrangements or methods for connecting or disconnecting semiconductor or solid-state bodies as covered by H01L24/00
- H01L2924/01—Chemical elements
- H01L2924/01067—Holmium [Ho]
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L2924/00—Indexing scheme for arrangements or methods for connecting or disconnecting semiconductor or solid-state bodies as covered by H01L24/00
- H01L2924/10—Details of semiconductor or other solid state devices to be connected
- H01L2924/102—Material of the semiconductor or solid state bodies
- H01L2924/1025—Semiconducting materials
- H01L2924/10251—Elemental semiconductors, i.e. Group IV
- H01L2924/10253—Silicon [Si]
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L2924/00—Indexing scheme for arrangements or methods for connecting or disconnecting semiconductor or solid-state bodies as covered by H01L24/00
- H01L2924/15—Details of package parts other than the semiconductor or other solid state devices to be connected
- H01L2924/151—Die mounting substrate
- H01L2924/1517—Multilayer substrate
- H01L2924/15192—Resurf arrangement of the internal vias
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L2924/00—Indexing scheme for arrangements or methods for connecting or disconnecting semiconductor or solid-state bodies as covered by H01L24/00
- H01L2924/15—Details of package parts other than the semiconductor or other solid state devices to be connected
- H01L2924/181—Encapsulation
-
- H—ELECTRICITY
- H01—ELECTRIC ELEMENTS
- H01L—SEMICONDUCTOR DEVICES NOT COVERED BY CLASS H10
- H01L2924/00—Indexing scheme for arrangements or methods for connecting or disconnecting semiconductor or solid-state bodies as covered by H01L24/00
- H01L2924/30—Technical effects
- H01L2924/301—Electrical effects
- H01L2924/3025—Electromagnetic shielding
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
- Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y10S257/00—Active solid-state devices, e.g. transistors, solid-state diodes
- Y10S257/922—Active solid-state devices, e.g. transistors, solid-state diodes with means to prevent inspection of or tampering with an integrated circuit, e.g. "smart card", anti-tamper
Definitions
- the present invention relates generally to methods and apparatuses for protecting electronic systems from theft of sensitive information, and more particularly to a method and apparatus for protecting an electronic system from theft of sensitive information by preventing reverse engineering of the circuits employed in the electronic system.
- Storage methods include magnetic storage, e.g., disk drives, optical storage, compact disks and electronic media (such as memory integrated circuits).
- Disk storage both magnetic and optical, is not secure because data can be read off the disks and reverse engineered by various methods to determine the encryption or security keys.
- the keys can be stored in an electronic memory circuit on an integrated circuit. Specialized equipment is required to remove the packaging materials of these devices and reverse engineer the key. However, integrated circuits are vulnerable to reverse engineering —even data stored in FLASH or EEPROM or other non-volatile memory or battery backed memories.
- FIG. 3 depicts an implementation of the third method above in a cross-sectional view.
- the chip including the transistors is covered with several thick metallization layers.
- the transistor tubs generate heat that can be scanned to determine which transistor is charged, thereby decoding the stored information.
- circuit reverse engineering can be performed to determine the encryption keys.
- thick layers of metallization are used to spread the thermal signature. This security protection can be defeated by partial and complete removal of portions of the metallization layer.
- FIG. 4 depicts a detailed view of the implementation shown in FIG. 3. As evident, the thermal signature exists on the surface of the chip. Scanning equipment can also be used to detect the charge levels on the chip surface.
- Other security methods include electronic circuitry, e.g., circuits that detect removal of power to the system/device, sensors that detect tampering, and continuity circuits in the packaging or on the integrated circuits that scramble stored data if tampering is detected.
- electronic circuitry e.g., circuits that detect removal of power to the system/device, sensors that detect tampering, and continuity circuits in the packaging or on the integrated circuits that scramble stored data if tampering is detected.
- sensing equipment such as a low voltage scanning electron microscope (SEM) or a thermal scanner can be used to determine the stored charges of transistors on the chip and decode the keys.
- probes can be used to directly or indirectly sense charges on the chip.
- the present invention is therefore directed to the problem of developing a method and apparatus for protecting an integrated circuit from being reverse engineered so that the stored information on the circuit cannot be determined.
- the present invention solves this problem by splitting the functionality of an integrated circuit into two separate chips, which are then connected in an interlocking manner.
- the present invention provides a detection circuit that monitors the interconnection of the two chips, and which destroys the stored data upon detection of a break in the interconnection of the two chips.
- the two chips are connected in a flip-chip fashion, thereby preventing access to the underlying conduction paths and charge storage sites which are used in reverse engineering an integrated circuit.
- the flip-chip is only provided over a portion of the active chip that includes the sensitive information. This reduces the size and complexity of the total device.
- FIG. 1 depicts an exemplary embodiment of an apparatus according to one aspect of the present invention in a cross-sectional view.
- FIG. 2 depicts a top view of the exemplary embodiment shown in FIG. 1.
- FIG. 3 depicts a prior art implementation in a cross-sectional view.
- FIG. 4 depicts a detailed view of the prior art implementation shown in FIG. 3.
- FIG. 5 depicts a cross-sectional view of an exemplary embodiment of one aspect of the present invention.
- FIG. 6 depicts the exemplary embodiment shown in FIG. 5 in a circuit block diagram.
- FIG. 7 depicts an exemplary embodiment in a flow chart form of a continuity detection algorithm according to one aspect of the present invention.
- FIG. 8 depicts an exemplary embodiment of an apparatus for use in an SRAM configuration according to one aspect of the present invention.
- FIG. 9 depicts an exemplary embodiment of an apparatus according to one aspect of the present invention.
- FIG. 10 depicts an exemplary embodiment of an apparatus according to one aspect of the present invention.
- the present invention employs a chip-on-chip structure to provide security for the two chips involved. Attaching a second chip directly on top of a first chip (i.e., the sensitive chip), which second chip is electrically connected to the sensitive chip, protects the sensitive chip (or area of the sensitive chip) from external aggression or attack.
- This structure physically shields the integrated circuit at the point where the sensitive data is stored, thereby preventing surface scanning.
- the internal pins in this chip sandwich are also inaccessible to probes.
- circuitry provided on the flip-chip or memory chip detects when the flip-chip is removed or when attempts are made to etch away portions of the flip-chip. Upon detection of such tampering, the sensitive data is then scrambled or deleted.
- the sensitive data includes any information that one might wish to protect from theft, such as encryption keys, trade secret data, financial information, etc.
- Another aspect of the present invention provides that sensitive information, such as encryption keys, are stored in memory elements of the same integrated circuits that process the data using the keys. This configuration minimizes the transfer of the sensitive data through device pins and along circuit board conductive paths that could otherwise be monitored by sensing equipment.
- Flip-chip manufacturing techniques described in the art are used to enable attachment and connection of integrated circuit chips to each other and to substrates.
- the present invention employs those techniques to create a “chip sandwich” that protects the sensitive information, e.g., encryption keys (or data), from reverse engineering.
- the integrated circuit containing encryption keys is attached with its active side down to a substrate using solder bump flip-chip methods described by U.S. Pat. Nos. 4,670,770 issued to Tai, King L. and 5,534,465 to Frye, R.C. et al of Bell Laboratories, or other techniques such as those described by C. W. Ho et al., “The Thin-Film Module as a High Performance Semiconductor Package,” IBM Journal of Research and Development, Vol. 26, No. 3, May 1982, pp. 287-296, which discusses a multi-chip module of silicon chips attached to thin-film transmission lines; or by P.
- circuitry may be added to the integrated circuit that detects when the “chip sandwich” is pried apart. This detection circuitry may detect an interruption of power and/or ground to the chip or a break in the continuity of one or more connections between the flip-chip and the substrate. When tampering is detected, the circuitry deletes or corrupts the information in the memory elements using power from the system. Alternatively, one or more batteries or other charge storage devices, such as a capacitors, can be used to provide power for the tampering detection circuitry and the scrambling or deletion circuitry. This configuration thereby provides the electrical protection and isolation from probes describe above.
- a flip, chip is placed on top of a second integrated circuit chip that stores the keys, and the chip sandwich is packaged for assembly using conventional techniques.
- the flip-chip contains a grid or pattern of electrically conductive lines that maintain continuity with the integrated circuit below.
- the integrated circuit employs a circuit to determine whether continuity between the chips or along one or more of the conductive lines is interrupted or broken (as might happen if the flip-chip were etched away to expose the memory elements below.) When an interruption or break in continuity is detected, the stored key data is erased or scrambled.
- the continuity detection circuitry and one or more charge storage elements are placed on the flip-chip so that a standard off the shelf memory device may be used. This reduces the cost and complexity of the manufacturing process, thereby enabling use of this configuration in more inexpensive applications.
- a fourth exemplary embodiment of one aspect of the present invention employs a flip-chip mounted memory device, which is mounted directly onto an information processing device so that all interconnections between the two devices (along which sensitive or key data is transferred) lie within the “chip sandwich.”
- the charge storage device described in the above embodiments may include capacitors that are charged in parallel to a given voltage.
- transistors switch the configuration from a parallel configuration to a series configuration, thereby producing a voltage sufficiently high to destroy or scramble the information stored in the memory elements.
- FIG. 1 depicts an exemplary embodiment 10 of an apparatus according to one aspect of the present invention in a cross-sectional view
- a flip-chip 1 is mounted on an active chip 2 .
- Grounds 3 and power supply leads 4 are shown coupled to the active device 2 .
- Conventional packaging 6 surrounds the flip-chip 1 and active device 2 configuration.
- the active chip 2 and the flip chip 1 are coupled by solder bonds 5 .
- the continuity of the connection between the flip-chip 1 and the active chip 2 is monitored. If continuity is broken, the memory is overwritten with random data or otherwise made unusable.
- Various techniques are possible, some of which include writing random data, writing all ones or zeros, and applying an unsuitable voltage to the memory thereby destroying it.
- FIG. 2 an alternative embodiment 20 of one aspect of the present invention is shown therein.
- the flip-chip 21 is placed over an area on the active chip 22 in which sensitive information, such as an encryption key, is stored.
- the flip-chip protects only the portion of the active chip 22 that contains the sensitive information. It is not necessary for the flip chip 21 to cover the entire active chip 22 .
- This exemplary embodiment reduces the overall size of the device, for those applications in which size is important, such as laptops, palm-based devices, etc.
- FIG. 5 shown therein is a cross-sectional view of an exemplary embodiment 50 of one aspect of the present invention.
- a passive flip chip 52 makes continuity between flip-chip bond pads 53 and the base chip 51 .
- a sense circuit 54 disposed on the active chip 51 senses when continuity is broken or otherwise interrupted and sends a signal to a read/write circuit 55 (see FIG. 6) to write random data to memory 56 . If the read/write circuit 55 is not enabled, the sense circuit 54 can be triggered to trash the memory 56 .
- an apparatus for storing information includes two integrated circuits and a detection monitoring circuit.
- One integrated circuit has several charge storage sites in which charges are stored representing the information to be stored.
- Another integrated circuit is coupled to the other integrated circuit in a flip-chip configuration and prevents access to the charge storage sites disposed therein.
- the detection circuit is disposed in one of the integrated circuits and monitors a connection between the two integrated circuits, and then alters the information stored therein upon detecting a break in the connection.
- the detection circuit may also or alternatively detect a proximity of the two integrated circuits.
- the other integrated circuit may be disposed over only the portion of the integrated circuit storing the sensitive information.
- Configuring the two integrated circuits so that the one of the integrated circuits covers the conduction paths on the other storing the sensitive information (thereby making the conduction paths inaccessible without separation of the two chips) is also desirable to prevent reverse engineering of the sensitive information.
- the detection circuit monitors multiple conduction paths between the two integrated circuits, the overall security of the configuration is enhanced.
- a read-write circuit is coupled to the detection circuit and the charge storage sites.
- the detection circuit then enables the read-write circuit to write false data to the charge storage sites upon detection of a break in continuity.
- False data can include any data that makes the stored information unusable, such as all ones, all zeros, random data, replacement but inaccurate data, etc.
- an alternate power source is coupled to the detection circuit, which provides power to the detection circuit upon removal of normal supply power.
- the alternate power source also provides power to the read-write circuit upon removal of normal supply power.
- the alternate power source provides an unsuitable voltage to the charge storage sites upon detection of a break in the continuity by the detection circuit.
- An unsuitable voltage can include any voltage that destroys the stored charges or otherwise corrupts the data stored therein.
- the alternate power source can include one or more of the following: a battery, a capacitor, and an energy storage device. Multiple capacitors in a parallel/series combination may be employed as well. Configuring the capacitors in parallel for charging and in series for discharging enables creating a high voltage, which may be necessary in certain circumstances.
- FIG. 6 depicts the exemplary embodiment shown in FIG. 5 in a circuit block diagram.
- the sense circuit 55 senses interruption in the connection 58 between the flip chip 52 and the base chip 51 . Upon sensing the interruption, the sense circuit 55 enables the read/write circuit to write random data (or any other pattern, such as all ones) into the memory 56 . If the read/write circuit is disabled or lacks power, the alternate power source 57 can re-enable the read/write circuit 55 .
- the alternate power source may consist of a capacitor, a battery, or other energy storage device. Alternatively, the sense circuit may be included in the flip chip 52 .
- FIG. 7 depicts an exemplary embodiment in a flow chart form of a continuity detection algorithm 70 according to one aspect of the present invention.
- the process 70 begins in a continuous loop checking the continuity of the flip-chip to the base chip (steps 71 and 72 ). Alternatively, the process can determine whether the proximity of the flip-chip to the base chip has been interrupted.
- One such implementation applies a constant current through the interconnections between the flip-chip and the base-chip with a current detection circuit on the return side. If the flip-chip is pried apart from the base chip breaking continuity, the current stops flowing, triggering the current detection circuit.
- the process 70 determines the status of the base chip. For example, the process 70 determines whether the base chip is operating in the normal operating mode, or whether power is on (step 73 ). If the base chip is in the normal state, and power is on, the process 70 causes the read/write circuit to write random data to the memory (step 76 ).
- the process 70 determines whether the alternate power source can provide the necessary power to the read/write circuit (step 75 ). If so, the process performs the random write (step 76 ). If not, the process uses alternate power to damage the memory ( 77 ).
- alternate power must be used to destroy or erase memory data.
- a device to provide this power is fabricated on the flip-chip. Examples of alternate power sources include one or more of the following in combination or by themselves: one or more capacitors, batteries, such as small integrated circuit mounted batteries or tiny single use lithium batteries, etc.
- a method for protecting information contained within an integrated circuit includes splitting the functionality of an integrated circuit into two separate integrated circuits, and interconnecting the two separate integrated circuits in an interlocking manner.
- the two circuits cannot operate without being connected together.
- the interconnection can be monitored to further ensure the protection of the sensitive information stored therein.
- the information contained within the two separate integrated circuits can be destroyed upon detecting a break in the interconnection.
- the two separate integrated circuits can be interconnected so that all conduction paths and charge storage sites are not accessible from the exterior, such as in a flip-chip configuration.
- the information can be overwritten with random data upon detecting a break in the interconnection.
- FIG. 8 depicts an exemplary embodiment 80 of an apparatus for use in an SRAM configuration according to one aspect of the present invention.
- Another potential solution to the problem being solved by the present invention involves separating the transistors 86 , 87 of memory cells so that part of the transistors 86 , 87 of the memory cell are fabricated on one chip 81 and the remainder are connected through solder bonds 89 , 90 from the flip-chip 82 .
- Such a device is depicted in FIG. 8.
- the input 85 and the output 86 are included on the same chip 81 .
- Power Vdd 83 is received on the chip 81 and the supply voltage Vss 88 is provided on the flip chip 82 .
- the functionality of a single chip is split into two separate chips so that each chip includes a portion of the total functionality. Without the chips connected, the total functionality will be lost. Consequently, one cannot determine the state of the memory cells when the chips are pried apart. Splitting the transistors 86 , 87 at the bonds 89 , 90 will result in dissipation of the stored charge, thereby defeating any attempts at reverse engineering.
- ROM Read-Only-Memory
- N-type cells can be placed on one chip and P-type cells can be placed on another chip (i.e., the flip chip) or vice versa.
- the N-type and P-type transistors can be implemented on the same chip and the gates that ground the transistors can be placed on the flip-chip with connections going through the bond pads.
- an apparatus for storing information in electronic form includes multiple memory cells and two integrated circuits.
- Each of the memory cells includes at least a first transistor pair and a second transistor pair.
- the memory cells stores the information in electronic form.
- the first integrated circuit has disposed therein each of the first transistor pairs of each of the memory cells.
- the second integrated circuit has disposed therein each of the second transistor pairs of each of the memory cells.
- the first and second integrated circuits are coupled together in a flip-chip configuration.
- an apparatus for storing information in electronic form includes several memory cells and two integrated circuits.
- Each of the memory cells includes at least two transistors.
- the memory cells store the information in electronic form.
- One integrated circuit has disposed therein both of the transistors forming the memory cells.
- the other integrated circuit has disposed therein a ground coupled to each of the two transistors in the one integrated circuit.
- the two integrated circuits are coupled together in a flip-chip configuration. Multiple solder bonds are provided via which the two transistors in each memory cell are coupled to the ground in the other integrated circuit.
- a continuity detection circuit monitors a continuity of connection between the two integrated circuits, and writes false data to the memory cells upon detecting a break in the continuity.
- two voltage supplies are provided both on the same chip, e.g., the chip without the ground.
- FIG. 9 depicts such an exemplary embodiment 91 of an apparatus according to one aspect of the present invention.
- the transistors 94 , 95 are coupled to ground 100 via the connections between the chips 92 , 93 .
- the memory cells will not function without connection to the flip chip 92 .
- the supply voltages Vdd and Vss are provided on the same chip 93 .
- Input 96 and output 97 are also provided on the same chip 93 . Without the flip-chip, one would not know which cells are programmed.
- the transistors and gates can be arranged under the pads to further inhibit reverse engineering.
- FIG. 10 depicts an exemplary embodiment of an apparatus according to one aspect of the present invention.
- the transistors 102 - 105 are split so that the memory cell is split across two chips 106 , 107 .
- the transistors 102 , 103 are disposed in chip 106 and the other transistors 104 , 105 are disposed in chip 107 .
- Adjacent transistors are interconnected in a similar manner.
- the present invention provides several techniques and devices for protecting sensitive information stored on an integrated circuit. These techniques and devices prevent one from reverse engineering the circuit to decode the stored sensitive information by preventing physical access to the stored sensitive information and by altering the stored sensitive information upon detection of an attempt to defeat the physical security.
- the present invention provides a split integrated circuit whose functionality requires two separate chips to remain coupled together in a flip-chip manner.
Abstract
A method and apparatus for protecting the stored information on an integrated circuit from being compromised through reverse engineering. To do so, the method and apparatus splits the functionality of an integrated circuit into two separate integrated circuits, which are then connected in an interlocking manner. A detection circuit monitors the interconnection of the two separate integrated circuits. Upon detection of a break in the interconnection of the two circuits, the detection circuit destroys the data stored in the two separate integrated circuits. The two integrated circuits are connected in a flip-chip fashion, thereby preventing access to the underlying conduction paths and charge storage sites which are normally used in reverse engineering an integrated circuit.
Description
- The present invention relates generally to methods and apparatuses for protecting electronic systems from theft of sensitive information, and more particularly to a method and apparatus for protecting an electronic system from theft of sensitive information by preventing reverse engineering of the circuits employed in the electronic system.
- Many electronic systems and devices use data encryption security schemes to protect sensitive information, e.g., personal data, financial transaction authorization codes, security passwords, etc. These schemes rely on a stored encryption key or security key that must be physically and electrically inaccessible to unauthorized access.
- Storage methods include magnetic storage, e.g., disk drives, optical storage, compact disks and electronic media (such as memory integrated circuits). Disk storage, both magnetic and optical, is not secure because data can be read off the disks and reverse engineered by various methods to determine the encryption or security keys.
- For added security, the keys can be stored in an electronic memory circuit on an integrated circuit. Specialized equipment is required to remove the packaging materials of these devices and reverse engineer the key. However, integrated circuits are vulnerable to reverse engineering —even data stored in FLASH or EEPROM or other non-volatile memory or battery backed memories.
- Some methods used to enhance the security of these integrated circuits include physical approaches, e.g., 1) locking or sealing cases to enclose the circuit boards on which memory devices are mounted, 2) using special packaging that destroys the integrated circuit if there is tampering, or 3) using metal layers to mask the storage elements from sensing equipment. For example, FIG. 3 depicts an implementation of the third method above in a cross-sectional view. The chip including the transistors is covered with several thick metallization layers. As recognized by the prior art, the transistor tubs generate heat that can be scanned to determine which transistor is charged, thereby decoding the stored information. Alternatively, circuit reverse engineering can be performed to determine the encryption keys. To prevent either of these possibilities, thick layers of metallization are used to spread the thermal signature. This security protection can be defeated by partial and complete removal of portions of the metallization layer.
- FIG. 4 depicts a detailed view of the implementation shown in FIG. 3. As evident, the thermal signature exists on the surface of the chip. Scanning equipment can also be used to detect the charge levels on the chip surface.
- Other security methods include electronic circuitry, e.g., circuits that detect removal of power to the system/device, sensors that detect tampering, and continuity circuits in the packaging or on the integrated circuits that scramble stored data if tampering is detected.
- All of the above methods are vulnerable to one sophisticated in the art of reverse engineering. For example, continuity circuitry can be defeated by ensuring that power is constantly applied, metal lids can be shorted with jumpers, ceramic packages that shatter if opened and metal layers deposited over portions of the integrated circuit can be etched away by physical and mechanical means.
- Once the circuitry of the chip is exposed, sensing equipment, such as a low voltage scanning electron microscope (SEM) or a thermal scanner can be used to determine the stored charges of transistors on the chip and decode the keys. Alternatively, probes can be used to directly or indirectly sense charges on the chip.
- The present invention is therefore directed to the problem of developing a method and apparatus for protecting an integrated circuit from being reverse engineered so that the stored information on the circuit cannot be determined.
- The present invention solves this problem by splitting the functionality of an integrated circuit into two separate chips, which are then connected in an interlocking manner. In addition, the present invention provides a detection circuit that monitors the interconnection of the two chips, and which destroys the stored data upon detection of a break in the interconnection of the two chips.
- In one embodiment of the present invention, the two chips are connected in a flip-chip fashion, thereby preventing access to the underlying conduction paths and charge storage sites which are used in reverse engineering an integrated circuit.
- In an alternative embodiment of the above embodiment, the flip-chip is only provided over a portion of the active chip that includes the sensitive information. This reduces the size and complexity of the total device.
- FIG. 1 depicts an exemplary embodiment of an apparatus according to one aspect of the present invention in a cross-sectional view.
- FIG. 2 depicts a top view of the exemplary embodiment shown in FIG. 1.
- FIG. 3 depicts a prior art implementation in a cross-sectional view.
- FIG. 4 depicts a detailed view of the prior art implementation shown in FIG. 3.
- FIG. 5 depicts a cross-sectional view of an exemplary embodiment of one aspect of the present invention.
- FIG. 6 depicts the exemplary embodiment shown in FIG. 5 in a circuit block diagram.
- FIG. 7 depicts an exemplary embodiment in a flow chart form of a continuity detection algorithm according to one aspect of the present invention.
- FIG. 8 depicts an exemplary embodiment of an apparatus for use in an SRAM configuration according to one aspect of the present invention.
- FIG. 9 depicts an exemplary embodiment of an apparatus according to one aspect of the present invention.
- FIG. 10 depicts an exemplary embodiment of an apparatus according to one aspect of the present invention.
- The present invention employs a chip-on-chip structure to provide security for the two chips involved. Attaching a second chip directly on top of a first chip (i.e., the sensitive chip), which second chip is electrically connected to the sensitive chip, protects the sensitive chip (or area of the sensitive chip) from external aggression or attack. This structure physically shields the integrated circuit at the point where the sensitive data is stored, thereby preventing surface scanning. As a result of this configuration, the internal pins in this chip sandwich are also inaccessible to probes. Moreover, circuitry provided on the flip-chip or memory chip detects when the flip-chip is removed or when attempts are made to etch away portions of the flip-chip. Upon detection of such tampering, the sensitive data is then scrambled or deleted. The sensitive data includes any information that one might wish to protect from theft, such as encryption keys, trade secret data, financial information, etc.
- Another aspect of the present invention provides that sensitive information, such as encryption keys, are stored in memory elements of the same integrated circuits that process the data using the keys. This configuration minimizes the transfer of the sensitive data through device pins and along circuit board conductive paths that could otherwise be monitored by sensing equipment.
- Flip-chip manufacturing techniques described in the art are used to enable attachment and connection of integrated circuit chips to each other and to substrates. The present invention employs those techniques to create a “chip sandwich” that protects the sensitive information, e.g., encryption keys (or data), from reverse engineering.
- In one exemplary embodiment of the present invention, the integrated circuit containing encryption keys is attached with its active side down to a substrate using solder bump flip-chip methods described by U.S. Pat. Nos. 4,670,770 issued to Tai, King L. and 5,534,465 to Frye, R.C. et al of Bell Laboratories, or other techniques such as those described by C. W. Ho et al., “The Thin-Film Module as a High Performance Semiconductor Package,” IBM Journal of Research and Development, Vol. 26, No. 3, May 1982, pp. 287-296, which discusses a multi-chip module of silicon chips attached to thin-film transmission lines; or by P. Kraynak et al., “Wafer-Chip Assembly for Large Scale Integration,” IEEE Transactions on Electron Devices, Vol. ED-15, No. 9, Sep. 1968, pp. 660-663, where silicon chips are bonded “face down” on a silicon wafer. The above patents are hereby incorporated by reference, as if repeated herein in their entirety, including the drawings. By flipping the chip over so that its active side is not exposed, the desired physical protection described above is achieved.
- If more protection is desired, circuitry may be added to the integrated circuit that detects when the “chip sandwich” is pried apart. This detection circuitry may detect an interruption of power and/or ground to the chip or a break in the continuity of one or more connections between the flip-chip and the substrate. When tampering is detected, the circuitry deletes or corrupts the information in the memory elements using power from the system. Alternatively, one or more batteries or other charge storage devices, such as a capacitors, can be used to provide power for the tampering detection circuitry and the scrambling or deletion circuitry. This configuration thereby provides the electrical protection and isolation from probes describe above.
- In another exemplary embodiment of one aspect of the present invention, a flip, chip is placed on top of a second integrated circuit chip that stores the keys, and the chip sandwich is packaged for assembly using conventional techniques. In addition, the flip-chip contains a grid or pattern of electrically conductive lines that maintain continuity with the integrated circuit below. The integrated circuit employs a circuit to determine whether continuity between the chips or along one or more of the conductive lines is interrupted or broken (as might happen if the flip-chip were etched away to expose the memory elements below.) When an interruption or break in continuity is detected, the stored key data is erased or scrambled.
- In a third exemplary embodiment of one aspect of the present invention, the continuity detection circuitry and one or more charge storage elements are placed on the flip-chip so that a standard off the shelf memory device may be used. This reduces the cost and complexity of the manufacturing process, thereby enabling use of this configuration in more inexpensive applications.
- A fourth exemplary embodiment of one aspect of the present invention employs a flip-chip mounted memory device, which is mounted directly onto an information processing device so that all interconnections between the two devices (along which sensitive or key data is transferred) lie within the “chip sandwich.”
- For some memory devices, a high voltage is required to corrupt or erase the information contained therein. In these cases, the charge storage device described in the above embodiments may include capacitors that are charged in parallel to a given voltage. When a continuity fault is detected, transistors switch the configuration from a parallel configuration to a series configuration, thereby producing a voltage sufficiently high to destroy or scramble the information stored in the memory elements.
- Referring now to FIG. 1, which depicts an
exemplary embodiment 10 of an apparatus according to one aspect of the present invention in a cross-sectional view, a flip-chip 1 is mounted on anactive chip 2.Grounds 3 and power supply leads 4 are shown coupled to theactive device 2.Conventional packaging 6 surrounds the flip-chip 1 andactive device 2 configuration. Theactive chip 2 and theflip chip 1 are coupled bysolder bonds 5. As discussed above, the continuity of the connection between the flip-chip 1 and theactive chip 2 is monitored. If continuity is broken, the memory is overwritten with random data or otherwise made unusable. Various techniques are possible, some of which include writing random data, writing all ones or zeros, and applying an unsuitable voltage to the memory thereby destroying it. - Referring to FIG. 2, an
alternative embodiment 20 of one aspect of the present invention is shown therein. In thisembodiment 20, the flip-chip 21 is placed over an area on theactive chip 22 in which sensitive information, such as an encryption key, is stored. In thisembodiment 20, the flip-chip protects only the portion of theactive chip 22 that contains the sensitive information. It is not necessary for theflip chip 21 to cover the entireactive chip 22. This exemplary embodiment reduces the overall size of the device, for those applications in which size is important, such as laptops, palm-based devices, etc. - Referring to FIG. 5, shown therein is a cross-sectional view of an
exemplary embodiment 50 of one aspect of the present invention. According to one aspect of the present invention, when encryption key memory on theprocessing chip 51 or a dedicated memory chip (base chip) is used, apassive flip chip 52 makes continuity between flip-chip bond pads 53 and thebase chip 51. As shown in FIG. 5, asense circuit 54 disposed on theactive chip 51 senses when continuity is broken or otherwise interrupted and sends a signal to a read/write circuit 55 (see FIG. 6) to write random data tomemory 56. If the read/write circuit 55 is not enabled, thesense circuit 54 can be triggered to trash thememory 56. - According to yet another aspect of the present invention, an apparatus for storing information includes two integrated circuits and a detection monitoring circuit. One integrated circuit has several charge storage sites in which charges are stored representing the information to be stored. Another integrated circuit is coupled to the other integrated circuit in a flip-chip configuration and prevents access to the charge storage sites disposed therein. The detection circuit is disposed in one of the integrated circuits and monitors a connection between the two integrated circuits, and then alters the information stored therein upon detecting a break in the connection. The detection circuit may also or alternatively detect a proximity of the two integrated circuits. Depending upon the circuit layout of the circuit storing the sensitive information, the other integrated circuit may be disposed over only the portion of the integrated circuit storing the sensitive information. Configuring the two integrated circuits so that the one of the integrated circuits covers the conduction paths on the other storing the sensitive information (thereby making the conduction paths inaccessible without separation of the two chips) is also desirable to prevent reverse engineering of the sensitive information. In addition, if the detection circuit monitors multiple conduction paths between the two integrated circuits, the overall security of the configuration is enhanced.
- Moreover, to further increase the security of the configuration, a read-write circuit is coupled to the detection circuit and the charge storage sites. The detection circuit then enables the read-write circuit to write false data to the charge storage sites upon detection of a break in continuity. False data can include any data that makes the stored information unusable, such as all ones, all zeros, random data, replacement but inaccurate data, etc.
- In addition, an alternate power source is coupled to the detection circuit, which provides power to the detection circuit upon removal of normal supply power. The alternate power source also provides power to the read-write circuit upon removal of normal supply power. Furthermore, the alternate power source provides an unsuitable voltage to the charge storage sites upon detection of a break in the continuity by the detection circuit. An unsuitable voltage can include any voltage that destroys the stored charges or otherwise corrupts the data stored therein. The alternate power source can include one or more of the following: a battery, a capacitor, and an energy storage device. Multiple capacitors in a parallel/series combination may be employed as well. Configuring the capacitors in parallel for charging and in series for discharging enables creating a high voltage, which may be necessary in certain circumstances.
- FIG. 6 depicts the exemplary embodiment shown in FIG. 5 in a circuit block diagram. The
sense circuit 55 senses interruption in theconnection 58 between theflip chip 52 and thebase chip 51. Upon sensing the interruption, thesense circuit 55 enables the read/write circuit to write random data (or any other pattern, such as all ones) into thememory 56. If the read/write circuit is disabled or lacks power, thealternate power source 57 can re-enable the read/write circuit 55. The alternate power source may consist of a capacitor, a battery, or other energy storage device. Alternatively, the sense circuit may be included in theflip chip 52. - FIG. 7 depicts an exemplary embodiment in a flow chart form of a
continuity detection algorithm 70 according to one aspect of the present invention. Theprocess 70 begins in a continuous loop checking the continuity of the flip-chip to the base chip (steps 71 and 72). Alternatively, the process can determine whether the proximity of the flip-chip to the base chip has been interrupted. There are numerous circuits that may be used to detect continuity or proximity, which are well known to one skilled in the art of circuit design. One such implementation applies a constant current through the interconnections between the flip-chip and the base-chip with a current detection circuit on the return side. If the flip-chip is pried apart from the base chip breaking continuity, the current stops flowing, triggering the current detection circuit. - If continuity is broken (from step72), the
process 70 determines the status of the base chip. For example, theprocess 70 determines whether the base chip is operating in the normal operating mode, or whether power is on (step 73). If the base chip is in the normal state, and power is on, theprocess 70 causes the read/write circuit to write random data to the memory (step 76). - If the base chip is not in the normal state, e.g., normal power is not being applied, then the
process 70 determines whether the alternate power source can provide the necessary power to the read/write circuit (step 75). If so, the process performs the random write (step 76). If not, the process uses alternate power to damage the memory (77). - When the encryption key memory is on the flip-chip, prying off the flip chip removes power from the flip-chip. Therefore, alternate power must be used to destroy or erase memory data. A device to provide this power is fabricated on the flip-chip. Examples of alternate power sources include one or more of the following in combination or by themselves: one or more capacitors, batteries, such as small integrated circuit mounted batteries or tiny single use lithium batteries, etc.
- According to one aspect of the present invention, a method for protecting information contained within an integrated circuit, includes splitting the functionality of an integrated circuit into two separate integrated circuits, and interconnecting the two separate integrated circuits in an interlocking manner. In this embodiment, the two circuits cannot operate without being connected together. Moreover, the interconnection can be monitored to further ensure the protection of the sensitive information stored therein. Furthermore, the information contained within the two separate integrated circuits can be destroyed upon detecting a break in the interconnection. As further protection from reverse engineering of the information contained in the two circuits, the two separate integrated circuits can be interconnected so that all conduction paths and charge storage sites are not accessible from the exterior, such as in a flip-chip configuration. In addition, rather than being destroyed, the information can be overwritten with random data upon detecting a break in the interconnection.
- FIG. 8 depicts an
exemplary embodiment 80 of an apparatus for use in an SRAM configuration according to one aspect of the present invention. Another potential solution to the problem being solved by the present invention involves separating thetransistors transistors chip 81 and the remainder are connected throughsolder bonds chip 82. Such a device is depicted in FIG. 8. - In this
embodiment 80, theinput 85 and theoutput 86 are included on thesame chip 81.Power Vdd 83 is received on thechip 81 and the supply voltage Vss 88 is provided on theflip chip 82. Essentially, the functionality of a single chip is split into two separate chips so that each chip includes a portion of the total functionality. Without the chips connected, the total functionality will be lost. Consequently, one cannot determine the state of the memory cells when the chips are pried apart. Splitting thetransistors bonds - Hundreds of cells (even thousands, and perhaps millions) can be fabricated below the bond pad (i.e., solder connection pad). The connections for the cells can be routed to the solder pad through vias in the passivation layer. When the flip chip is assembled, the memory is complete. If the flip-chip is removed, then the memory cell is non-functional. In this embodiment, it is beneficial to have multiple false routings that will make reverse engineering of the circuit difficult to impossible. Placing transistors below bond pads further increases the difficulty of reverse engineering such a circuit.
- Read-Only-Memory (ROM) presents a different set of problems. One can still separate the cells on the two chips. N-type cells can be placed on one chip and P-type cells can be placed on another chip (i.e., the flip chip) or vice versa. Alternatively, the N-type and P-type transistors can be implemented on the same chip and the gates that ground the transistors can be placed on the flip-chip with connections going through the bond pads.
- According to yet another aspect of the present invention, an apparatus for storing information in electronic form includes multiple memory cells and two integrated circuits. Each of the memory cells includes at least a first transistor pair and a second transistor pair. The memory cells stores the information in electronic form. The first integrated circuit has disposed therein each of the first transistor pairs of each of the memory cells. The second integrated circuit has disposed therein each of the second transistor pairs of each of the memory cells. The first and second integrated circuits are coupled together in a flip-chip configuration.
- According to another aspect of the present invention, an apparatus for storing information in electronic form includes several memory cells and two integrated circuits. Each of the memory cells includes at least two transistors. The memory cells store the information in electronic form. One integrated circuit has disposed therein both of the transistors forming the memory cells. The other integrated circuit has disposed therein a ground coupled to each of the two transistors in the one integrated circuit. As in the above, the two integrated circuits are coupled together in a flip-chip configuration. Multiple solder bonds are provided via which the two transistors in each memory cell are coupled to the ground in the other integrated circuit. As discussed above, a continuity detection circuit monitors a continuity of connection between the two integrated circuits, and writes false data to the memory cells upon detecting a break in the continuity. In addition, two voltage supplies are provided both on the same chip, e.g., the chip without the ground.
- FIG. 9 depicts such an
exemplary embodiment 91 of an apparatus according to one aspect of the present invention. In thisembodiment 91, thetransistors chips flip chip 92. In thisembodiment 91, the supply voltages Vdd and Vss are provided on thesame chip 93.Input 96 andoutput 97 are also provided on thesame chip 93. Without the flip-chip, one would not know which cells are programmed. The transistors and gates can be arranged under the pads to further inhibit reverse engineering. - FIG. 10 depicts an exemplary embodiment of an apparatus according to one aspect of the present invention. In this
embodiment 101 for use in an SRAM configuration, the transistors 102-105 are split so that the memory cell is split across twochips transistors 102, 103 are disposed inchip 106 and theother transistors chip 107. Adjacent transistors are interconnected in a similar manner. - In summary, the present invention provides several techniques and devices for protecting sensitive information stored on an integrated circuit. These techniques and devices prevent one from reverse engineering the circuit to decode the stored sensitive information by preventing physical access to the stored sensitive information and by altering the stored sensitive information upon detection of an attempt to defeat the physical security. In addition, the present invention provides a split integrated circuit whose functionality requires two separate chips to remain coupled together in a flip-chip manner.
- While the present invention has been explained in terms of several exemplary embodiments, the scope of the present invention is not limited to the above exemplary embodiments but by the claims set forth below.
Claims (37)
1. A method for protecting information contained within an integrated circuit, comprising the steps of:
splitting the functionality of a circuit into two separate portions;
implementing the two separate portions as two separate integrated circuits;
interconnecting the two separate integrated circuits in an interlocking manner; and
monitoring an interconnection of the two separate integrated circuits.
2. The method according to claim 1 , further comprising the step of destroying the information contained within the two separate integrated circuits upon detecting a break in the interconnection of the two separate integrated circuits.
3. The method according to claim 1 , further comprising the step of interconnecting the two separate integrated circuits so that all conduction paths and charge storage sites are not accessible from the exterior.
4. The method according to claim 1 , wherein the two separate integrated circuits are connected in a flip-chip manner.
5. The method according to claim 1 , further comprising the step of writing random data to the memory upon detecting a break in the interconnection of the two separate integrated circuits.
6. The method according to claim 1 , further comprising the step of disposing at least a plurality of transistors storing sensitive information under a plurality of bond pads.
7. The method according to claim 1 , further comprising the step of disposing at least a plurality of gates storing sensitive information below a plurality of bond pads.
8. An apparatus for storing information comprising:
a first integrated circuit having a plurality of charge storage sites in which charges are stored representing the information to be stored;
a second integrated circuit being coupled to the first integrated circuit in a flip-chip configuration and preventing access to the plurality of charge storage sites;
a detection circuit being disposed in one of the first and second integrated circuits and monitoring a connection between the first and second integrated circuits, said detection circuit altering the information stored in the first integrated circuit upon detecting a break in the connection between the first and second integrated circuits.
9. The apparatus according to claim 8 , wherein the second integrated circuit is disposed over only a portion of the first integrated circuit.
10. The apparatus according to claim 8 , wherein the first integrated circuit includes a plurality of conduction paths, and said second integrated circuit is coupled to the first integrated circuit so that the first integrated circuit covers the plurality of conduction paths.
11. The apparatus according to claim 8 , further comprising a plurality of conduction paths coupling the first integrated circuit to the second integrated circuit, wherein said detection circuit monitors conduction continuity of one or more of the plurality of conduction paths.
12. The apparatus according to claim 8 , further comprising a read-write circuit coupled to the detection circuit and the plurality of charge storage sites, said detection circuit enabling said read-write circuit to write false data to the plurality of charge storage sites upon detection of a break in continuity.
13. The apparatus according to claim 8 , further comprising an alternate power source being coupled to the detection circuit and providing power to the detection circuit upon removal of normal supply power.
14. The apparatus according to claim 13 , wherein the alternate power source also provides power to the read-write circuit upon removal of normal supply power.
15. The apparatus according to claim 13 , wherein the alternate power source provides an unsuitable voltage to the plurality of charge storage sites upon detection of a break in the continuity by the detection circuit.
16. The apparatus according to claim 13 , wherein the alternate power source includes one or more selected from the group of: a battery, a capacitor, and an energy storage device.
17. The apparatus according to claim 13 , wherein the alternate power source includes a plurality of capacitors coupled in a parallel configuration during charging, and switched to a series configuration upon detection of a continuity fault.
18. An apparatus for storing information comprising:
a first integrated circuit having a plurality of charge storage sites in which charges are stored representing the information to be stored;
a second integrated circuit being coupled to the first integrated circuit in a flip-chip configuration and preventing access to the plurality of charge storage sites;
a proximity detection circuit being disposed in one of the first and second integrated circuits and monitoring a proximity of the first integrated circuit relative to the second integrate circuit, said proximity detection circuit altering the information stored in the first integrated circuit upon detecting a change in the proximity between the first and second integrated circuits.
19. The apparatus according to claim 18 , wherein the second integrated circuit is disposed over only a portion of the first integrated circuit.
20. The apparatus according to claim 18 , wherein the first integrated circuit includes a plurality of conduction paths, and said second integrated circuit is coupled to the first integrated circuit so that the first integrated circuit covers the plurality of conduction paths.
21. The apparatus according to claim 18 , further comprising a read-write circuit coupled to the detection circuit and the plurality of charge storage sites, said proximity detection circuit enabling said read-write circuit to write false data to the plurality of charge storage sites upon detection of a change in the proximity between the first and second integrated circuits.
22. The apparatus according to claim 18 , further comprising an alternate power source being coupled to the detection circuit and providing power to the detection circuit upon removal of normal supply power.
23. The apparatus according to claim 22 , wherein the alternate power source also provides power to the read-write circuit upon removal of normal supply power.
24. The apparatus according to claim 22 , wherein the alternate power source provides an unsuitable voltage to the plurality of charge storage sites upon detection of a change in the proximity between the first and second integrated circuits.
25. The apparatus according to claim 22 , wherein the alternate power source includes one or more selected from the group of: a battery, a capacitor, and an energy storage device.
26. An apparatus for storing information in electronic form comprising:
a plurality of memory cells, each of which plurality of memory cells includes at least a first transistor and a second transistor, said plurality of memory cells storing the information in electronic form,
a first integrated circuit on which is disposed each of the first transistors of each of the plurality of memory cells; and
a second integrated circuit on which is disposed each of the second transistors of each of the plurality of memory cells, wherein said first and second integrated circuits are coupled together in a flip-chip configuration.
27. The apparatus according to claim 26 , further comprising a plurality of solder bonds via which the first and second transistors in each memory cell are coupled together.
28. The apparatus according to claim 27 , further comprising a continuity detection circuit monitoring a continuity of connection between the first and second integrated circuits, and writing false data to the plurality of memory cells upon detecting a break in the continuity.
29. The apparatus according to claim 26 , further comprising a first voltage supply and a second voltage supply, wherein said first voltage supply is disposed on the first integrated circuit and the second voltage supply is disposed on the second integrated circuit.
30. An apparatus for storing information in electronic form comprising:
a plurality of memory cells, each of which plurality of memory cells includes at least a first transistor pair and a second transistor pair, said plurality of memory cells storing the information in electronic form,
a first integrated circuit on which is disposed each of the first transistor pairs of each of the plurality of memory cells; and
a second integrated circuit on which is disposed each of the second transistor pairs of each of the plurality of memory cells, wherein said first and second integrated circuits are coupled together in a flip-chip configuration.
31. The apparatus according to claim 30 , further comprising a plurality of solder bonds via which the first and second transistor pairs in each memory cell are coupled together.
32. The apparatus according to claim 30 , further comprising a continuity detection circuit monitoring a continuity of connection between the first and second integrated circuits, and writing false data to the plurality of memory cells upon detecting a break in the continuity.
33. The apparatus according to claim 30 , further comprising a first voltage supply and a second voltage supply, wherein said first voltage supply is disposed on the first integrated circuit and the second voltage supply is disposed on the second integrated circuit.
34. An apparatus for storing information in electronic form comprising:
a plurality of memory cells, each of which plurality of memory cells includes at least a first transistor and a second transistor, said plurality of memory cells storing the information in electronic form,
a first integrated circuit on which is disposed each of the first and second transistors of each of the plurality of memory cells; and
a second integrated circuit on which is disposed a ground coupled to each of the first and second transistors, wherein the first and second transistors are coupled to the ground via the second integrated circuit, and the first and second integrated circuits are coupled together in a flip-chip configuration.
35. The apparatus according to claim 34 , further comprising a plurality of solder bonds via which the first and second transistors in each memory cell are coupled to the ground in the second integrated circuit.
36. The apparatus according to claim 34 , further comprising a continuity detection circuit monitoring a continuity of connection between the first and second integrated circuits, and writing false data to the plurality of memory cells upon detecting a break in the continuity.
37. The apparatus according to claim 34 , further comprising a first voltage supply and a second voltage supply, wherein said first and second voltage supplies are disposed on the first integrated circuit.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US10/120,243 US20020104872A1 (en) | 2000-02-04 | 2002-04-10 | Method and apparatus for securing electronic circuits |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US09/498,006 US6414884B1 (en) | 2000-02-04 | 2000-02-04 | Method and apparatus for securing electronic circuits |
US10/120,243 US20020104872A1 (en) | 2000-02-04 | 2002-04-10 | Method and apparatus for securing electronic circuits |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/498,006 Division US6414884B1 (en) | 2000-02-04 | 2000-02-04 | Method and apparatus for securing electronic circuits |
Publications (1)
Publication Number | Publication Date |
---|---|
US20020104872A1 true US20020104872A1 (en) | 2002-08-08 |
Family
ID=23979228
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/498,006 Expired - Lifetime US6414884B1 (en) | 2000-02-04 | 2000-02-04 | Method and apparatus for securing electronic circuits |
US10/120,243 Abandoned US20020104872A1 (en) | 2000-02-04 | 2002-04-10 | Method and apparatus for securing electronic circuits |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/498,006 Expired - Lifetime US6414884B1 (en) | 2000-02-04 | 2000-02-04 | Method and apparatus for securing electronic circuits |
Country Status (1)
Country | Link |
---|---|
US (2) | US6414884B1 (en) |
Cited By (11)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1391928A2 (en) * | 2002-08-23 | 2004-02-25 | Infineon Technologies AG | Chip assembly with at least two semiconductor chips and method of controlling the alignment of two adjacent semiconductor chips |
US6710441B2 (en) * | 2000-07-13 | 2004-03-23 | Isothermal Research Systems, Inc. | Power semiconductor switching devices, power converters, integrated circuit assemblies, integrated circuitry, power current switching methods, methods of forming a power semiconductor switching device, power conversion methods, power semiconductor switching device packaging methods, and methods of forming a power transistor |
US20050081040A1 (en) * | 2003-05-30 | 2005-04-14 | Johnson Barry W. | In-circuit security system and methods for controlling access to and use of sensitive data |
US20060087883A1 (en) * | 2004-10-08 | 2006-04-27 | Irvine Sensors Corporation | Anti-tamper module |
US20060168702A1 (en) * | 2003-07-11 | 2006-07-27 | Ernst Bretschneider | Security-sensitive semiconductor product, particularly a smart-card chip |
EP1840964A1 (en) * | 2006-03-31 | 2007-10-03 | Irvine Sensors Corp. | Semiconductor device with protected access |
US20080028168A1 (en) * | 2006-07-28 | 2008-01-31 | Sony Corporation | Data storage apparatus, data protection method, and communication apparatus |
US20100031376A1 (en) * | 2008-07-29 | 2010-02-04 | International Business Machines Corporation | Continuity Check Monitoring for Microchip Exploitation Detection |
US20130077782A1 (en) * | 2004-11-29 | 2013-03-28 | Broadcom Corporation | Method and Apparatus for Security Over Multiple Interfaces |
US8933520B1 (en) | 2007-12-27 | 2015-01-13 | Volterra Semiconductor LLC | Conductive routings in integrated circuits using under bump metallization |
US10719633B2 (en) * | 2015-04-29 | 2020-07-21 | Utimaco, Inc. | Inhibiting a penetration attack |
Families Citing this family (56)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7054162B2 (en) * | 2000-02-14 | 2006-05-30 | Safenet, Inc. | Security module system, apparatus and process |
US6993661B1 (en) * | 2001-08-09 | 2006-01-31 | Garfinkel Simson L | System and method that provides for the efficient and effective sanitizing of disk storage units and the like |
US8335915B2 (en) * | 2002-05-14 | 2012-12-18 | Netapp, Inc. | Encryption based security system for network storage |
US6853093B2 (en) * | 2002-12-20 | 2005-02-08 | Lipman Electronic Engineering Ltd. | Anti-tampering enclosure for electronic circuitry |
US7758911B2 (en) * | 2003-05-08 | 2010-07-20 | Honeywell International Inc. | Microelectronic security coatings |
US7015823B1 (en) | 2004-10-15 | 2006-03-21 | Systran Federal Corporation | Tamper resistant circuit boards |
DE102005005622B4 (en) * | 2005-02-08 | 2008-08-21 | Infineon Technologies Ag | Security chip stack and a method for producing a security chip stack |
US7281667B2 (en) * | 2005-04-14 | 2007-10-16 | International Business Machines Corporation | Method and structure for implementing secure multichip modules for encryption applications |
WO2006118679A2 (en) * | 2005-04-28 | 2006-11-09 | Second Sight Medical Products, Inc. | Package for an implantable neural stimulation device |
US7557597B2 (en) * | 2005-06-03 | 2009-07-07 | International Business Machines Corporation | Stacked chip security |
US8898452B2 (en) * | 2005-09-08 | 2014-11-25 | Netapp, Inc. | Protocol translation |
US7402442B2 (en) * | 2005-12-21 | 2008-07-22 | International Business Machines Corporation | Physically highly secure multi-chip assembly |
US8171307B1 (en) | 2006-05-26 | 2012-05-01 | Netapp, Inc. | Background encryption of disks in a large cluster |
US20070279969A1 (en) * | 2006-06-02 | 2007-12-06 | Raytheon Company | Intrusion detection apparatus and method |
US8374698B2 (en) * | 2006-08-18 | 2013-02-12 | Second Sight Medical Products, Inc. | Package for an implantable neural stimulation device |
US8181011B1 (en) | 2006-08-23 | 2012-05-15 | Netapp, Inc. | iSCSI name forwarding technique |
US8397083B1 (en) | 2006-08-23 | 2013-03-12 | Netapp, Inc. | System and method for efficiently deleting a file from secure storage served by a storage system |
US7971234B1 (en) | 2006-09-15 | 2011-06-28 | Netapp, Inc. | Method and apparatus for offline cryptographic key establishment |
US7995759B1 (en) | 2006-09-28 | 2011-08-09 | Netapp, Inc. | System and method for parallel compression of a single data stream |
US8245050B1 (en) | 2006-09-29 | 2012-08-14 | Netapp, Inc. | System and method for initial key establishment using a split knowledge protocol |
US8042155B1 (en) | 2006-09-29 | 2011-10-18 | Netapp, Inc. | System and method for generating a single use password based on a challenge/response protocol |
US8190905B1 (en) | 2006-09-29 | 2012-05-29 | Netapp, Inc. | Authorizing administrative operations using a split knowledge protocol |
US7853019B1 (en) | 2006-11-30 | 2010-12-14 | Netapp, Inc. | Tape failover across a cluster |
US8607046B1 (en) | 2007-04-23 | 2013-12-10 | Netapp, Inc. | System and method for signing a message to provide one-time approval to a plurality of parties |
US8611542B1 (en) | 2007-04-26 | 2013-12-17 | Netapp, Inc. | Peer to peer key synchronization |
US8824686B1 (en) | 2007-04-27 | 2014-09-02 | Netapp, Inc. | Cluster key synchronization |
US8037524B1 (en) | 2007-06-19 | 2011-10-11 | Netapp, Inc. | System and method for differentiated cross-licensing for services across heterogeneous systems using transient keys |
US8196182B2 (en) | 2007-08-24 | 2012-06-05 | Netapp, Inc. | Distributed management of crypto module white lists |
US7843339B2 (en) | 2007-08-27 | 2010-11-30 | Verifone, Inc. | Secure point of sale device employing capacitive sensors |
US9774445B1 (en) | 2007-09-04 | 2017-09-26 | Netapp, Inc. | Host based rekeying |
US7983423B1 (en) | 2007-10-29 | 2011-07-19 | Netapp, Inc. | Re-keying based on pre-generated keys |
US7812428B2 (en) * | 2007-12-05 | 2010-10-12 | Atmel Rousset S.A.S. | Secure connector grid array package |
US7772514B2 (en) * | 2007-12-20 | 2010-08-10 | Verifone, Inc. | Capacitive user-interface switches |
US9013336B2 (en) | 2008-01-22 | 2015-04-21 | Verifone, Inc. | Secured keypad devices |
US8595514B2 (en) | 2008-01-22 | 2013-11-26 | Verifone, Inc. | Secure point of sale terminal |
EP2300954B1 (en) | 2008-06-24 | 2014-12-03 | NDS Limited | Security within integrated circuits |
WO2010104543A2 (en) * | 2008-12-31 | 2010-09-16 | Arizona Board Of Regents, For And On Behalf Of Arizona State University | Integrated circuits secure from invasion and methods of manufacturing the same |
WO2010111655A1 (en) * | 2009-03-26 | 2010-09-30 | Hypercom Corporation | Keypad membrane security |
US8358218B2 (en) | 2010-03-02 | 2013-01-22 | Verifone, Inc. | Point of sale terminal having enhanced security |
US8330606B2 (en) | 2010-04-12 | 2012-12-11 | Verifone, Inc. | Secure data entry device |
CN101834430A (en) * | 2010-05-31 | 2010-09-15 | 深圳市新国都技术股份有限公司 | Data circuit protection structure with binding line safety net |
US8405506B2 (en) | 2010-08-02 | 2013-03-26 | Verifone, Inc. | Secure data entry device |
US8593824B2 (en) | 2010-10-27 | 2013-11-26 | Verifone, Inc. | Tamper secure circuitry especially for point of sale terminal |
US8621235B2 (en) | 2011-01-06 | 2013-12-31 | Verifone, Inc. | Secure pin entry device |
US8605401B2 (en) * | 2011-04-29 | 2013-12-10 | Altera Corporation | Systems and methods for securing a programmable device against an over-voltage attack |
US8884757B2 (en) | 2011-07-11 | 2014-11-11 | Verifone, Inc. | Anti-tampering protection assembly |
US9691066B2 (en) | 2012-07-03 | 2017-06-27 | Verifone, Inc. | Location-based payment system and method |
US9213869B2 (en) | 2013-10-04 | 2015-12-15 | Verifone, Inc. | Magnetic stripe reading device |
US20160026275A1 (en) | 2014-07-23 | 2016-01-28 | Verifone, Inc. | Data device including ofn functionality |
US9595174B2 (en) | 2015-04-21 | 2017-03-14 | Verifone, Inc. | Point of sale terminal having enhanced security |
US10567170B2 (en) * | 2015-12-24 | 2020-02-18 | Mcafee, Llc | Hardware-generated dynamic identifier |
US9942761B1 (en) | 2016-10-10 | 2018-04-10 | International Business Machines Corporation | User access verification |
US10544923B1 (en) | 2018-11-06 | 2020-01-28 | Verifone, Inc. | Devices and methods for optical-based tamper detection using variable light characteristics |
EP3667533A1 (en) * | 2018-12-10 | 2020-06-17 | Thales Dis France SA | Method for securing a system in case of an undesired power-loss |
CN111339508A (en) * | 2020-02-28 | 2020-06-26 | 北京达佳互联信息技术有限公司 | Shared password analysis method and device, electronic equipment and storage medium |
US11301014B2 (en) * | 2020-08-07 | 2022-04-12 | Dell Products L.P. | Power/data transmission extender system |
Family Cites Families (10)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US4670770A (en) | 1984-02-21 | 1987-06-02 | American Telephone And Telegraph Company | Integrated circuit chip-and-substrate assembly |
US5185717A (en) * | 1988-08-05 | 1993-02-09 | Ryoichi Mori | Tamper resistant module having logical elements arranged in multiple layers on the outer surface of a substrate to protect stored information |
US5072331A (en) * | 1991-04-26 | 1991-12-10 | Hughes Aircraft Company | Secure circuit structure |
US5534465A (en) | 1995-01-10 | 1996-07-09 | At&T Corp. | Method for making multichip circuits using active semiconductor substrates |
WO1997004378A1 (en) * | 1995-07-20 | 1997-02-06 | Dallas Semiconductor Corporation | Microcircuit with memory that is protected by both hardware and software |
US5824571A (en) * | 1995-12-20 | 1998-10-20 | Intel Corporation | Multi-layered contacting for securing integrated circuits |
US5834160A (en) | 1996-01-16 | 1998-11-10 | Lucent Technologies Inc. | Method and apparatus for forming fine patterns on printed circuit board |
US5861652A (en) * | 1996-03-28 | 1999-01-19 | Symbios, Inc. | Method and apparatus for protecting functions imbedded within an integrated circuit from reverse engineering |
US5747982A (en) | 1996-12-05 | 1998-05-05 | Lucent Technologies Inc. | Multi-chip modules with isolated coupling between modules |
US5880523A (en) * | 1997-02-24 | 1999-03-09 | General Instrument Corporation | Anti-tamper integrated circuit |
-
2000
- 2000-02-04 US US09/498,006 patent/US6414884B1/en not_active Expired - Lifetime
-
2002
- 2002-04-10 US US10/120,243 patent/US20020104872A1/en not_active Abandoned
Cited By (22)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US6710441B2 (en) * | 2000-07-13 | 2004-03-23 | Isothermal Research Systems, Inc. | Power semiconductor switching devices, power converters, integrated circuit assemblies, integrated circuitry, power current switching methods, methods of forming a power semiconductor switching device, power conversion methods, power semiconductor switching device packaging methods, and methods of forming a power transistor |
US7019337B2 (en) | 2000-07-13 | 2006-03-28 | Isothermal Systems Research, Inc. | Power semiconductor switching devices, power converters, integrated circuit assemblies, integrated circuitry, power current switching methods, methods of forming a power semiconductor switching device, power conversion methods, power semiconductor switching device packaging methods, and methods of forming a power transistor |
EP1391928A3 (en) * | 2002-08-23 | 2006-03-15 | Infineon Technologies AG | Chip assembly with at least two semiconductor chips and method of controlling the alignment of two adjacent semiconductor chips |
EP1391928A2 (en) * | 2002-08-23 | 2004-02-25 | Infineon Technologies AG | Chip assembly with at least two semiconductor chips and method of controlling the alignment of two adjacent semiconductor chips |
US8495382B2 (en) | 2003-05-30 | 2013-07-23 | Privaris, Inc. | In-circuit security system and methods for controlling access to and use of sensitive data |
US20050081040A1 (en) * | 2003-05-30 | 2005-04-14 | Johnson Barry W. | In-circuit security system and methods for controlling access to and use of sensitive data |
US9923884B2 (en) | 2003-05-30 | 2018-03-20 | Apple Inc. | In-circuit security system and methods for controlling access to and use of sensitive data |
US9124930B2 (en) | 2003-05-30 | 2015-09-01 | Apple Inc. | In-circuit security system and methods for controlling access to and use of sensitive data |
US7587611B2 (en) * | 2003-05-30 | 2009-09-08 | Privaris, Inc. | In-circuit security system and methods for controlling access to and use of sensitive data |
US20060168702A1 (en) * | 2003-07-11 | 2006-07-27 | Ernst Bretschneider | Security-sensitive semiconductor product, particularly a smart-card chip |
US7577926B2 (en) * | 2003-07-11 | 2009-08-18 | Nxp B.V. | Security-sensitive semiconductor product, particularly a smart-card chip |
US20060087883A1 (en) * | 2004-10-08 | 2006-04-27 | Irvine Sensors Corporation | Anti-tamper module |
US8074082B2 (en) | 2004-10-08 | 2011-12-06 | Aprolase Development Co., Llc | Anti-tamper module |
US20130077782A1 (en) * | 2004-11-29 | 2013-03-28 | Broadcom Corporation | Method and Apparatus for Security Over Multiple Interfaces |
US8909932B2 (en) * | 2004-11-29 | 2014-12-09 | Broadcom Corporation | Method and apparatus for security over multiple interfaces |
EP1840964A1 (en) * | 2006-03-31 | 2007-10-03 | Irvine Sensors Corp. | Semiconductor device with protected access |
US20080028168A1 (en) * | 2006-07-28 | 2008-01-31 | Sony Corporation | Data storage apparatus, data protection method, and communication apparatus |
US8933520B1 (en) | 2007-12-27 | 2015-01-13 | Volterra Semiconductor LLC | Conductive routings in integrated circuits using under bump metallization |
US20100031376A1 (en) * | 2008-07-29 | 2010-02-04 | International Business Machines Corporation | Continuity Check Monitoring for Microchip Exploitation Detection |
US9003559B2 (en) * | 2008-07-29 | 2015-04-07 | International Business Machines Corporation | Continuity check monitoring for microchip exploitation detection |
US10719633B2 (en) * | 2015-04-29 | 2020-07-21 | Utimaco, Inc. | Inhibiting a penetration attack |
US11687680B2 (en) | 2015-04-29 | 2023-06-27 | Utimaco Inc. | Inhibiting a penetration attack |
Also Published As
Publication number | Publication date |
---|---|
US6414884B1 (en) | 2002-07-02 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US6414884B1 (en) | Method and apparatus for securing electronic circuits | |
US5736777A (en) | Method and apparatus for fast self-destruction of a CMOS integrated circuit | |
EP0860881B1 (en) | Anti-tamper integrated circuit | |
JP4278176B2 (en) | Active security device with electronic memory | |
US4593384A (en) | Security device for the secure storage of sensitive data | |
US5998858A (en) | Microcircuit with memory that is protected by both hardware and software | |
US5072331A (en) | Secure circuit structure | |
US5389738A (en) | Tamperproof arrangement for an integrated circuit device | |
US8502396B2 (en) | Embedded package security tamper mesh | |
US20130141137A1 (en) | Stacked Physically Uncloneable Function Sense and Respond Module | |
US20090065591A1 (en) | Smart-card chip arrangement | |
US20060180939A1 (en) | Tamper-resistant semiconductor device | |
US8581251B2 (en) | Device for protecting an electronic integrated circuit housing against physical or chemical ingression | |
CN101305462A (en) | Physically highly secure multi-chip assembly | |
JP6635276B2 (en) | Electronic device having attack detection function, design method thereof and manufacturing method thereof | |
JP2001244414A (en) | Semiconductor integrated circuit | |
JP2520857B2 (en) | Integrated semiconductor circuit | |
US7015821B2 (en) | EEPROM memory matrix and method for safeguarding an EEPROM memory matrix | |
JP2000076140A (en) | Semiconductor integrated circuit | |
TW200409040A (en) | Chip having attack protection | |
EP3937055A1 (en) | Integrated circuit device with protection against malicious attacks | |
JP4836995B2 (en) | Integrated circuit module | |
JP4181068B2 (en) | Integrated circuit module | |
MXPA98001451A (en) | Circuit integrated to proof of violation |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
STCB | Information on status: application discontinuation |
Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION |