Semiconductor device with secure access key and associated methods and systems
View Patent ↗Memory devices, systems including memory devices, and methods of operating memory devices are described, in which security measures may be implemented to control access to a fuse array (or other secure features) of the memory devices based on a secure access key. In some cases, a customer may define and store a user-defined access key in the fuse array. In other cases, a manufacturer of the memory device may define a manufacturer-defined access key (e.g., an access key based on fuse identification (FID), a secret access key), where a host device coupled with the memory device may obtain the manufacturer-defined access key according to certain protocols. The memory device may compare an access key included in a command directed to the memory device with either the user-defined access key or the manufacturer-defined access key to determine whether to permit or prohibit execution of the command based on the comparison.
1. An apparatus, comprising:
a memory array;
a nonvolatile memory configured to store a first access key; and
peripheral circuitry coupled to the nonvolatile memory and the memory array, and configured to:
receive an access request from a device coupled to the apparatus, wherein the access request is directed to accessing one or more design-for-test (DFT) functions stored in the nonvolatile memory, includes an address of the nonvolatile memory, and includes a second access key;
compare the first access key and the second access key; and
prohibit performance of the one or more DFT functions in response to the first access key being different than the second access key.
2. The apparatus of claim 1 , wherein the peripheral circuitry is further configured to permit the performance of the one or more DFT functions in response to the first access key matching the second access key.
3. The apparatus of claim 1 , wherein the peripheral circuitry is further configured to retrieve the first access key from the nonvolatile memory in response to receiving the access request.
4. The apparatus of claim 1 , wherein the nonvolatile memory includes at least one of fuses, anti-fuses, conductive layers, metal switches, blown capacitors, transistors with blown gate-oxide, Not-AND (NAND) flash memory cells, phase change memory (PCM) cells, or magnetic memory cells.
5. The apparatus of claim 1 , wherein the first access key is stored at a predetermined set of addresses of the nonvolatile memory, the predetermined set of addresses based on parameters associated with the apparatus such as a product identification, a design revision identification, a memory capacity, an operating voltage, a package type, an operating clock rate, an operating temperature range, or a combination thereof.
6. The apparatus of claim 5 , wherein the peripheral circuitry is further configured to partition the first access key to multiple portions that each correspond to individual addresses of the predetermined set of addresses.
7. The apparatus of claim 1 , wherein the peripheral circuitry is further configured to encode the first access key prior to storing the first access key at the nonvolatile memory.
8. The apparatus of claim 1 , wherein the peripheral circuitry is further configured to modify the first access key using a hash function prior to storing the first access key at the nonvolatile memory.
9. The apparatus of claim 1 , further comprising:
store the first access key in the nonvolatile memory, where the first access key is used to authenticate access to the nonvolatile memory.
10. A memory device, comprising:
a memory array;
a nonvolatile memory configured to store a first access key;
one or more circuits configured to perform design-for-test (DFT) functions of the memory device; and
peripheral circuitry coupled to the nonvolatile memory, the memory array, and the one or more circuits, and configured to:
generate one or more commands configured to activate the one or more circuits in response to receiving an access request from a host device coupled to the memory device, wherein the access request is directed to the DFT functions, and includes a second access key;
compare the first access key and the second access key; and
prohibit the one or more commands from activating the one or more circuits in response to determining the first access key being different than the second access key.
11. The memory device of claim 10 , wherein the first access key is stored at a predetermined set of addresses of the nonvolatile memory, the predetermined set of addresses based on parameters associated with the memory device such as a product identification, a design revision identification, a memory capacity, an operating voltage, a package type, an operating clock rate, an operating temperature range, or a combination thereof.
12. The memory device of claim 10 , wherein the first access key includes metadata identifying the memory device, the metadata including a product identification, a design revision identification, a production site identification, a production lot identification, a wafer identification within a production lot, a die location of the memory device within a wafer, or a combination thereof.
13. The memory device of claim 10 , wherein the one or more circuits of the memory device are coupled to a common internal potential of the memory device, and prohibiting the one or more commands from activating the one or more circuits includes deactivating the common internal potential.
14. The memory device of claim 10 , wherein the peripheral circuitry is further configured to permit the one or more commands to activate the one or more circuits in response to determining the first access key matching the second access key.
15. The memory device of claim 14 , wherein the one or more circuits of the memory device are coupled to a common internal potential of the memory device, and permitting the one or more commands activating the one or more circuits includes activating the common internal potential.
16. The memory device of claim 10 , wherein the DFT functions include at least one of a command directed to the memory device that is otherwise hidden from the host device, access to a register of the memory device that is otherwise inaccessible by the host device, a test mode operation of the memory device that is otherwise unavailable to the host device; or access to the nonvolatile memory that is otherwise inaccessible by the host device.
17. A system, comprising:
a host device; and
a memory device coupled to the host device, including:
a memory array;
a nonvolatile memory configured to store a first access key;
one or more circuits configured to perform design-for-test (DFT) functions of the memory device; and
peripheral circuitry coupled to the nonvolatile memory, the memory array, and the one or more circuits, and configured to:
generate one or more commands configured to activate the one or more circuits in response to receiving an access request from a host device coupled to the memory device, wherein the access request is directed to the DFT functions, and includes a second access key;
compare the first access key and the second access key; and
prohibit the one or more commands from activating the one or more circuits in response to determining the first access key being different than the second access key.
18. The system of claim 17 , wherein the first access key is stored at a predetermined set of addresses of the nonvolatile memory, the predetermined set of addresses based on parameters associated with the memory device such as a product identification, a design revision identification, a memory capacity, an operating voltage, a package type, an operating clock rate, an operating temperature range, or a combination thereof.
19. The system of claim 17 , wherein the first access key includes metadata identifying the memory device, the metadata including a product identification, a design revision identification, a production site identification, a production lot identification, a wafer identification within a production lot, a die location of the memory device within a wafer, or a combination thereof.
20. The system of claim 17 , wherein the DFT functions include at least one of a command directed to the memory device that is otherwise hidden from the host device, access to a register of the memory device that is otherwise inaccessible by the host device, a test mode operation of the memory device that is otherwise unavailable to the host device; or access to the nonvolatile memory that is otherwise inaccessible by the host device.