Semiconductor device with secure access key and associated methods and systems
View Patent ↗Memory devices, systems including memory devices, and methods of operating memory devices are described, in which security measures may be implemented to control access to a fuse array (or other secure features) of the memory devices based on a secure access key. In some cases, a customer may define and store a user-defined access key in the fuse array. In other cases, a manufacturer of the memory device may define a manufacturer-defined access key (e.g., an access key based on fuse identification (FID), a secret access key), where a host device coupled with the memory device may obtain the manufacturer-defined access key according to certain protocols. The memory device may compare an access key included in a command directed to the memory device with either the user-defined access key or the manufacturer-defined access key to determine whether to permit or prohibit execution of the command based on the comparison.
1. A memory device, comprising:
a fuse array; and
one or more controllers coupled with the fuse array and configured to cause the memory device to:
receive first signaling indicating for the memory device to enter a programming mode;
receive, while operating in the programming mode, second signaling indicating security information associated with the fuse array;
program, while operating in the programming mode, a portion of the fuse array with the security information;
receive an access command directed to the fuse array; and
determine whether to permit access to the fuse array based at least in part on the access command and the security information.
2. The memory device of claim 1 , wherein the security information comprises an access key and a security mode associated with the access key, the security mode indicating one or more trigger events in which the memory device utilizes the access key to either permit or prohibit access to the fuse array.
3. The memory device of claim 2 , wherein the one or more controllers is further configured to cause the memory device to:
receive, via the access command, a second access key; and
permit access to the fuse array based at least in part on determining that the second access key matches the access key.
4. The memory device of claim 2 , wherein the one or more controllers is further configured to cause the memory device to:
receive, via the access command, a second access key; and
prohibit access to the fuse array based at least in part on determining that the second access key does not match the access key.
5. The memory device of claim 2 , wherein the one or more trigger events comprise a read command directed to the fuse array, a write command directed to the fuse array, or both.
6. The memory device of claim 2 , wherein the fuse array is configured to store a second access key in a second portion of the fuse array, and wherein the one or more controllers is further configured to cause the memory device to:
replace the access key with the second access key based at least in part on a status indicator associated with the second access key being set to an enabled state.
7. The memory device of claim 1 , wherein the programming mode comprises a post package repair (PPR) mode.
8. The memory device of claim 1 , wherein the one or more controllers is further configured to cause the memory device to:
activate design-for-test (DFT) functions of the memory device based at least in part on determining to grant permit access to the fuse array.
9. A method for memory device, comprising:
receiving first signaling indicating for the memory device to enter a programming mode;
receiving, while operating in the programming mode, second signaling indicating security information associated with a fuse array of the memory device;
programming, while operating in the programming mode, a portion of the fuse array with the security information;
receiving an access command directed to the fuse array; and
determining whether to permit access to the fuse array based at least in part on the access command and the security information.
10. The method of claim 9 , wherein the security information comprises an access key and a security mode associated with the access key, the security mode indicating one or more trigger events in which the memory device utilizes the access key to either permit or prohibit access to the fuse array.
11. The method of claim 10 , further comprising:
receiving, via the access command, a second access key; and
permitting access to the fuse array based at least in part on determining that the second access key matches the access key.
12. The method of claim 10 , further comprising:
receiving, via the access command, a second access key; and
prohibiting access to the fuse array based at least in part on determining that the second access key does not match the access key.
13. The method of claim 10 , wherein the one or more trigger events comprise a read command directed to the fuse array, a write command directed to the fuse array, or both.
14. The method of claim 10 , wherein the fuse array is configured to store a second access key in a second portion of the fuse array, the method further comprising:
replacing the access key with the second access key based at least in part on a status indicator associated with the second access key being set to an enabled state.
15. The method of claim 9 , wherein the programming mode comprises a post package repair (PPR) mode.
16. The method of claim 9 , further comprising:
activating design-for-test (DFT) functions of the memory device based at least in part on determining to permit access to the fuse array.
17. A memory device, comprising:
a fuse array configured to store a first access key and a status indicator associated with the first access key; and
one or more controllers coupled with the fuse array and configured to cause the memory device to:
receive first signaling indicating for the memory device to enter a programming mode;
receive, while operating in the programming mode, second signaling indicating a second access key associated with the fuse array;
program, while operating in the programming mode, the fuse array with the second access key;
receive an access command directed to the fuse array; and
determine whether to permit access to the fuse array based at least in part on the access command as well as the first access key or the second access key.
18. The memory device of claim 17 , wherein the one or more controllers is further configured to:
replace the second access key with the first access key based at least in part on setting the status indicator to an enabled state, wherein determining whether to permit access to the fuse array is based at least in part on the access command as well as the first access key.
19. The memory device of claim 17 , wherein the one or more controllers is further configured to:
combine the first access key with the second access key based at least in part on setting the status indicator to an enabled state, wherein determining whether to permit access to the fuse array is based at least in part on the access command as well as the combination of the first access key and the second access key.
20. The memory device of claim 17 , wherein the programming mode comprises a post package repair (PPR) mode.