Enhanced packaging for PC security
View Patent ↗A pay-per-use computer, or other electronic device that uses local security, may use a security module or other circuit for monitoring and enforcement of a usage policy. To help prevent physical attacks on the security module, or the circuit board near the security module, a second circuit may be mounted over the security module to help prevent access to the security module. Both circuits may be mounted on a interposer and the interposer mounted to the circuit board, creating a stack including the first circuit, the interposer, the security module, and a main PC board. When the PC board includes dense signal traces under the security module a three dimensional envelope is created around the security module. When the first circuit is a high value circuit, such as a Northbridge, the risk/reward of attacking the security module is increased substantially and may deter all but the most determined hackers.
1. An apparatus for enhancing security of a component comprising:
an interposer with a top-side connection and first and second bottom-side connections;
a first circuit mounted to the interposer and directly connected to the top-side connection;
a second circuit mounted to the interposer and directly connected to the first bottom-side connection; and
a circuit board directly connected to the second bottom-side connection of the interposer, whereby the second circuit is physically surrounded by a combination of the interposer above, the circuit board below and the second bottom-side connections to the side of the second circuit.
2. The apparatus of claim 1 , further comprising a first signal connection between the top-side connection and the first bottom-side connection.
3. The apparatus of claim 1 , wherein the first circuit has a higher pin count than the second circuit.
4. The apparatus of claim 1 , wherein the second circuit comprises a security function operable at least in part to provide security for the first circuit.
5. The apparatus of claim 1 , wherein the first circuit has a higher circuit complexity than the second circuit.
6. The apparatus of claim 1 , wherein the circuit board comprises a plurality of signal paths that are not connected to the second bottom-side connection and that are circumscribed by the footprint of the interposer.
7. The apparatus of claim 1 , wherein the interposer further comprises top-side test connections for providing electrical access to the second circuit.
8. The apparatus of claim 1 , further comprising a heat sink.
9. A method of providing tamper-resistance to a circuit comprising:
providing an interposer having a top and a bottom side, a set of top-side connections, a first set of bottom-side connections, and a second set of bottom-side connections, the first set of bottom-side connections surrounded by the second set of bottom-side connections;
making a direct connection of a first circuit to the set of top-side connections; making a direct connection of a second circuit to the first set of bottom-side connections;
making a direct connection of the second set of bottom-side connections to a circuit board, whereby the second circuit is surrounded by the interposer, the circuit board, and the second set of bottom-side connections.
10. The method of claim 9 , wherein providing the interposer comprises providing the interposer having at least one signal connection between the set of top-side connections and the first set of bottom-side connections.
11. The method of claim 9 , wherein providing the interposer comprises providing the interposer with the set of top-side connections including a test point coupled to the first set of bottom-side components.
12. The method of claim 9 , further comprising providing at least one signal path from the circuit board to the first circuit through the second circuit.
13. The method of claim 9 , further comprising encapsulating the first and second circuits and the interposer with an encapsulation compound.
14. The method of claim 9 , further comprising mounting a clock source to the bottom side of the interposer.
15. The method of claim 9 , further comprising controlling power to the first circuit at the second circuit.
16. The method of claim 9 , further comprising gating signal transmissions to the first circuit at the second circuit.
17. The method of claim 9 , further comprising routing a plurality of signal traces under the interposer, the signal traces unconnected to the second set of bottom-side connections.