Fuse based replay protection with aggressive fuse usage and countermeasures for fuse voltage cut attacks

A system on a chip (SOC) comprising:

• a processor;
• memory comprising executable instructions that, when executed, perform operations comprising:
• accessing a trusted platform module (TPM) implemented in the SOC, the TPM comprising an on-die random access memory (RAM) storing:
• a blown-fuse count comprising a count of blown fuses;
• and
• a TPM state comprising:
• a TPM state fuse count;
• and
• a TPM state personal identification number (PIN)-attempt-failure count;
• receiving a PIN in an attempt to access a system protected by the TPM;
• determining the TPM state PIN-attempt-failure count for the PIN satisfies a PIN-attempt-failure count policy;
• attempting to blow a fuse of the TPM;
• and
• in response to an unsuccessful attempt to blow the fuse of the TPM, halting activity of the TPM.

A method implemented in a system on a chip (SOC), the method comprising:

• accessing a trusted platform module (TPM) implemented in the SOC, the TPM comprising an on-die random access memory (RAM) storing:
• a blown-fuse count comprising a count of blown fuses;
• and
• a TPM state comprising:
• a TPM state fuse count;
• and
• a TPM state personal identification number (PIN)-attempt-failure count;
• receiving a PIN in an attempt to access a system protected by the TPM;
• determining the TPM state PIN-attempt-failure count for the PIN satisfies a PIN-attempt-failure count policy;
• attempting to blow a fuse of the TPM;
• and
• in response to an unsuccessful attempt to blow the fuse of the TPM, halting activity of the TPM.

A first system comprising:

• a processor;
• memory comprising executable instructions that, when executed, perform operations comprising:
• accessing a trusted platform module (TPM) implemented by the first system, the TPM storing:
• a blown-fuse count comprising a count of blown fuses;
• and
• a TPM state comprising:
• a TPM state fuse count;
• and
• a TPM state personal identification number (PIN)-attempt-failure count;
• receiving a PIN in an attempt to access a second system protected by the TPM;
• determining the TPM state PIN-attempt-failure count for the PIN satisfies a PIN-attempt-failure count policy;
• attempting to blow a fuse of the TPM;
• and
• in response to an unsuccessful attempt to blow the fuse of the TPM, halting activity of the TPM.