Secure update of programmable integrated circuits in data center computing environments
AssigneeXilinx, Inc.
InventorsEllery Cochell, Brian S. Martin, Ravi N. Kurlagunda
Life of this patent
Estimating the term…
Abstract
Secure updating of programmable integrated circuits includes receiving, within the programmable integrated circuit, a configuration bitstream, inserting, using a processor of the programmable integrated circuit, a key into the configuration bitstream resulting in a modified configuration bitstream, encrypting, using the programmable integrated circuit, the modified configuration bitstream using the key resulting in an encrypted configuration bitstream, and storing the encrypted configuration bitstream in a boot memory for the programmable integrated circuit.
Claims12
A method, comprising:
- receiving, within a programmable integrated circuit, a configuration bitstream;
- inserting, using a processor of the programmable integrated circuit, a key into the configuration bitstream resulting in a modified configuration bitstream;
- encrypting, using the programmable integrated circuit, the modified configuration bitstream using the key resulting in an encrypted configuration bitstream;
- storing the encrypted configuration bitstream in a boot memory for the programmable integrated circuit;
- wherein the processor is a soft-processor implemented in programmable circuitry of the programmable integrated circuit, and wherein the processor performs the encrypting using the key or controls an encryption engine that performs the encryption using the key;
- wherein the processor is coupled to a block random access memory, the block random access memory stores the key, is only readable by the processor, and the processor obtains the key from the block random access memory;
- and
- wherein the key is a unique symmetric key stored in a permanent memory of the programmable integrated circuit, wherein the permanent memory is not readable by the processor.
An integrated circuit, comprising:
- a communication bus interface configured to receive a configuration bitstream;
- a processor configured insert a key into the configuration bitstream resulting in a modified configuration bitstream;
- wherein the processor is a soft-processor implemented in programmable circuitry of the integrated circuit, and wherein the processor or an encryption engine controlled by the processor encrypts the modified configuration bitstream using the key resulting in an encrypted configuration bitstream;
- a memory controller configured to store the encrypted configuration bitstream in a boot memory for the integrated circuit;
- wherein the processor is coupled to a block random access memory, the block random access memory stores the key, is only readable by the processor, and the processor obtains the key from the block random access memory;
- and
- wherein the key is a unique symmetric key stored in a permanent memory of the integrated circuit, wherein the permanent memory is not readable by the processor.
Dependencies are inferred from the claim text.