Method and system for protecting processors from unauthorized debug access
View Patent ↗A method for securing a scan test architecture by performing an authentication operation to authorize use of a protected scan chain.
1. A method for securing a scan test architecture, the method comprising:
performing an authentication operation to authorize use of a protected scan chain of a scan test interface, wherein said performing an authentication operation includes:
providing a control scan chain of elements; and
comparing said control scan chain of elements against a plurality of secret key values, wherein said plurality of secret key values is a random number.
2. The method of claim 1 , wherein said performing an authentication operation further comprises:
authorizing use of said protected scan chain if said control scan chain of elements correctly corresponds to said plurality of secret key values.
3. The method of claim 2 , wherein said authorizing use of said protected scan chain further comprises:
authorizing use of said protected scan chain if each of said control scan chain of elements is a modulo twos complement of a corresponding key value in said plurality of key values.
4. The method of claim 2 , wherein said authorizing use of said protected scan chain further comprises:
authorizing use of said protected scan chain if each of said control scan chain of elements is an inverse of a corresponding key value in said plurality of key values.
5. The method of claim 1 , wherein said comparing said control scan chain of elements further comprises:
performing a XOR logic operation for each element in said control scan chain with a corresponding secret key value to obtain a plurality of values; and
performing at least one AND logic operation on said plurality of values to generate a control signal.
6. The method of claim 1 , further comprising:
disabling by default said protected scan chain of said scan test interface.
7. The method of claim 1 , wherein said plurality of secret key values comprises a plurality of fused values within said scan test architecture.
8. The method of claim 1 , wherein said plurality of secret key values is encrypted.
9. The method of claim 1 , wherein said scan test interface comprises a Joint Test Action Group (JTAG) scan test interface.
10. An integrated circuit, comprising:
an unprotected control scan chain;
a plurality of secret key values, wherein said unprotected control scan chain is used to authenticate use of a protected scan chain of said integrated circuit; and
a plurality of XOR logic blocks configured to perform an XOR logic operation on each element of said unprotected control scan chain and a corresponding secret key value to obtain a plurality of values.
11. The integrated circuit of claim 10 , further comprising:
at least one AND logic block configured to perform an AND logic operation on said plurality of values to generate a control signal.
12. The integrated circuit of claim 11 , wherein said unprotected control scan chain is configured to accept input values, such that if values of said unprotected control scan chain are not inverses of corresponding values of said plurality of secret key values, said control signal is low.
13. The integrated circuit of claim 10 , further comprising:
a control block configured to control said protected scan chain of a scan test interface.
14. The integrated circuit of claim 13 , wherein said control block is configured to enable a clock signal for said protected scan chain.
15. The integrated circuit of claim 13 , wherein said control block is configured to disable a clock signal for said protected scan chain.
16. A computer system, comprising:
a processor configured to process information; and
a computer-readable memory coupled to said processor and containing program instructions that, when executed, cause said processor to implement a method for securing a scan test architecture, the method including:
performing an authentication operation to authorize use of a protected scan chain of a scan test interface, wherein said performing an authentication operation comprises:
providing a control scan chain of elements; and
comparing said control scan chain of elements against a plurality of secret key values, wherein said plurality of secret key values includes a plurality of fused values within said scan test architecture.
17. The computer system of claim 16 , wherein said performing an authentication operation further comprises:
authorizing use of said protected scan chain if said control scan chain of elements correctly corresponds to said plurality of secret key values.
18. The computer system of claim 17 , wherein said authorizing use of said protected scan chain further comprises:
authorizing use of said protected scan chain if each of said control scan chain of elements is a modulo twos complement of a corresponding key value in said plurality of key values.
19. The computer system of claim 16 wherein said comparing said control scan chain of elements further comprises:
performing a XOR logic operation for each element in said control scan chain with a corresponding secret key value to obtain a plurality of values; and
performing at least one AND logic operation on said plurality of values to generate a control signal.
20. The computer system of claim 16 , further comprising:
disabling by default said protected scan chain of said scan test interface.