# US 12,001,363 B2 · Secure enclave system-in-package > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,001,363 B2 - Document ID: US12001363B2 - Status: Granted - Kind: B2 - Application number: 17/926,438 - Filed: 2021-05-21 - Published: 2023-06-15 - Granted: 2024-06-04 - Earliest claimed: 2020-05-22 - Assignees: Octavo Systems LLC - Applicants: Octavo Systems LLC - Inventors: Peter Robert Linder; Masood Murtuza; Erik James Welsh; William Arthur Fitzhugh Lee - Web page: https://patentgrep.com/patent/US12001363B2 ## CPC - G06F 13/36: for access to common bus or bus system - G06F 21/72: in cryptographic circuits - G06F 15/7807: {System on chip, i.e. computer system on a single chip; System in package, i.e. computer system on one or more chips in a single package} - G06F 21/55: Detecting local intrusion or implementing counter-measures - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - G06F 21/87: by means of encapsulation, e.g. for integrated circuits - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A Secure Enclave SiP (SE-SiP) is disclosed. The SE-SiP provides all the security benefits of a system designed using a Trusted Platform Module (TPM), replaces the need to trust a general-purpose CPU chip vendor with the need to trust a much simpler more trustworthy configurable device, and replaces the need to trust the entire system motherboard manufacturer with the much more limited need to trust the SE-SiP manufacturer. It can provide privacy for the software and data sent to the system, resident on it, or retrieved from it, with respect to all parties—including the person/party in physical possession of the device. ## Claims ### Claim 1 An apparatus, comprising: at least one startup component; at least one configurable hardware device; at least one trust component; and at least one SiP substrate, wherein said at least one startup component, said at least one configurable hardware device, and said at least one trust component are mounted on said at least one SiP substrate and operatively interconnected, and wherein said at least one startup component, said at least one configurable hardware device, and said at least one trust component are packaged together to form a first System-in-Package (SiP) device, and wherein the apparatus is a second SiP device that includes the first SiP device. ### Claim 2 (depends on 1) The apparatus of claim 1, wherein the trust component is implemented in a configurable logic device of the first SiP device. ### Claim 3 (depends on 1) The apparatus of claim 1, wherein the first SiP device has only one input/output (I/O) port, and the I/O port is connected to said at least one configurable hardware device. ### Claim 4 (depends on 1) The apparatus of claim 1, wherein said at least one startup component is adapted to configure said at least one configurable hardware device to execute a power-up or reset sequence stored in the startup component or associated memory. ### Claim 5 (depends on 1) The apparatus of claim 1, wherein said at least one configurable hardware device comprises one or more field-programmable gate arrays (FPGAs). ### Claim 6 (depends on 1) The apparatus of claim 1, wherein a plurality of serpentine electrodes, a capacitive mesh fabric, or a two-plate capacitive arrangement is formed on one or more exterior surfaces of the first SiP device, and the plurality of serpentine electrode, the capacitive mesh fabric, or the two-plate capacitive arrangement is formed inside the second SiP device. ### Claim 7 (depends on 4) The apparatus of claim 4, wherein the trust component is adapted to perform one or more of the following functions: (i) monitor and verify initialization and/or setup of said at least one configurable hardware device where the apparatus is powered up or is reset, (ii) monitor and verify setup of said at least one configurable hardware device where the apparatus is powered up or is reset, or (iii) monitor communications on the I/O port. ### Claim 8 An apparatus, comprising: at least one startup component; at least one configurable hardware device; at least one trust component; and at least one SiP substrate, wherein said at least one startup component, said at least one configurable hardware device, and said at least one trust component are mounted on said at least one SiP substrate and operatively interconnected, and wherein said at least one startup component, said at least one configurable hardware device, and said at least one trust component are packaged together to form a first System-in-Package (SiP) device, wherein said at least one configurable hardware device comprises an initialization configurable logic device and a main configurable logic device, the apparatus further comprising: an initialization configuration memory storing configurations for the initialization configurable logic device; an initialization configuration sequential loader capable of executing a power-up sequence for the apparatus and communicating with the initialization configuration memory; and a main configuration memory storing configurations for the main configurable logic device. ### Claim 9 (depends on 8) The apparatus of claim 8, further comprising: an operating system (OS) storage in communication with the initialization configurable logic device and the main configurable logic device; a first RAM in communication with the main configurable logic device; a main BIOS storage in communication with both of the initialization configurable logic device and the main configurable logic device; a second RAM in communication with the initialization configurable logic device; and an initialization BIOS storage in communication with the initialization configurable logic device, wherein the first RAM and the second RAM are the same RAM or different RAM. ### Claim 10 (depends on 8) The apparatus of claim 8, further comprising a privacy and integrity mechanism (PIM) comprising one or more conductors. ### Claim 11 An apparatus, comprising: at least one startup component; at least one configurable hardware device; at least one trust component; a privacy and integrity mechanism (PIM) comprising a plurality of serpentine electrodes, a capacitive mesh fabric, or a two-plate capacitive arrangement; and at least one SiP substrate, wherein said at least one startup component, said at least one configurable hardware device, and said at least one trust component are mounted on said at least one SiP substrate and operatively interconnected, and wherein said at least one startup component, said at least one configurable hardware device, and said at least one trust component are packaged together to form a first System-in-Package (SiP) device. ### Claim 12 (depends on 11) The apparatus of claim 11, wherein said at least one configurable hardware device or startup component is configured to measure one or more of resistance, capacitance, inductance, or frequency using the serpentine electrodes, capacitive mesh fabric, or two-plate capacitive arrangement, thereby capable of detecting an attempted access of the apparatus. ### Claim 13 (depends on 11) The apparatus of claim 11, wherein the two-plate capacitive arrangement comprises a first capacitive element and a second capacitive element, and the first capacitive element is a porous plate or a plurality of overlapping or woven bond wires. ### Claim 14 (depends on 13) The apparatus of claim 13, wherein one or more packaged electrical components included in the SiP forms a dielectric between the first and second capacitive elements. ### Claim 15 (depends on 11) The apparatus of claim 11, wherein the PIM is capable of performing any one or more of the following functions: (i) preventing external observation (ii) preventing emission of radiation, or (iii) providing heat management. ### Claim 16 An apparatus, comprising: at least one startup component; at least one configurable hardware device; at least one trust component; and at least one SiP substrate, wherein said at least one startup component, said at least one configurable hardware device, and said at least one trust component are mounted on said at least one SiP substrate and operatively interconnected, and wherein said at least one startup component, said at least one configurable hardware device, and said at least one trust component are packaged together to form a first System-in-Package (SiP) device, wherein the apparatus is configured to: measure one or more of resistance, capacitance, inductance, or frequency using a serpentine electrode, a capacitive mesh fabric, or a two-plate capacitive arrangement, detect an attempted access of the apparatus based at least in part on the measurement, and respond to the detected attempted access. ### Claim 17 (depends on 16) The apparatus of claim 16, wherein the apparatus is configured to respond to the detected attempted access by taking any one or more of the following actions: erasing all non-volatile memory; erasing both volatile and non-volatile memory; performing a shut-down operation; performing a self-destruct; or implementing an active data transfer countermeasure. ### Claim 18 An apparatus, comprising: at least one startup component; at least one configurable hardware device; at least one trust component; and at least one SiP substrate, wherein said at least one startup component, said at least one configurable hardware device, and said at least one trust component are mounted on said at least one SiP substrate and operatively interconnected, and wherein said at least one startup component, said at least one configurable hardware device, and said at least one trust component are packaged together to form a first System-in-Package (SiP) device, wherein said at least one startup component is adapted to configure said at least one configurable hardware device to execute a power-up or reset sequence stored in the startup component or associated memory, and wherein the trust component is adapted to perform one or more of the following functions: (i) monitor and verify initialization and/or setup of said at least one configurable hardware device where the apparatus is powered up or is reset, (ii) monitor and verify setup of said at least one configurable hardware device where the apparatus is powered up or is reset, or (iii) monitor communications on the I/O port.