Method and apparatus for controlling enablement of JTAG interface
A method, device and system for controlling JTAG interface enablement within a communication device. The JTAG interface can be selectively enabled based on the receipt of an encrypted access token generated by an access token server. The access token server generates the access token in response to an end user providing appropriate device-specific information. The access token includes appropriate information that, upon appropriate authentication and decryption, can temporarily device bind the boot code image of the device in a manner that enables the JTAG interface. Alternatively, the access token includes appropriate information that instructs the general purpose processor to choose between JTAG interface enablement information and JTAG interface disablement information for use with the boot code image of the device. The access token can include expiration information that causes an enabled JTAG interface to revert back to its disabled status upon expiration of the access token.
1. A communication device, comprising:
at least one processor to receive an access token having a first boot code image portion encrypted with JTAG enablement information by an encryption key unique to the communication device;
a memory element coupled to the at least one processor for storing at least a portion of the first boot code image portion received by the at least one processor;
a JTAG interface coupled to the at least one processor and enabled to allow access to the at least one processor and disabled to prevent access to the at least one processor; and
an enablement module coupled to the at least one processor to enable and disable the JTAG interface based on the JTAG enablement information,
wherein at least one of the at least one processor and the enablement module authenticates the access token received by the communication device,
wherein at least one of the at least one processor and the enablement module combines the first boot code image portion with a second boot code image portion stored in the communication device to form an encrypted boot code image including the JTAG enablement information, and
wherein at least one of the at least one processor and the enablement module decrypts the encrypted boot code image to obtain the JTAG enablement information.
2. The device as recited in claim 1 , wherein the second boot code image portion does not include any JTAG enablement information.
3. The device as recited in claim 1 , wherein the first boot code image portion and the JTAG enablement information are encrypted by a global encryption key (GEK) prior to being encrypted by the encryption key unique to the communication device.
4. The device as recited in claim 3 , wherein the encryption key unique to the communication device is one of a public key and a symmetric key.
5. The device as recited in claim 3 , wherein at least one of the at least one processor and the enablement module decrypts at least a portion of the access token to obtain the JTAG enablement information first using a unique device decryption key and then using the global encryption key (GEK).
6. The device as recited in claim 1 , wherein the access token is generated by an access token server in response to the access token server receiving device-specific information specific to the communication device.
7. The device as recited in claim 6 , wherein the communication device has at least one chip serial number, and wherein the device-specific information includes the chip serial number.
8. The device as recited in claim 6 , wherein the communication device provides an unencrypted version of the boot code image to the access token server in response to an access token request made to the communication device.
9. The device as recited in claim 8 , wherein at least a portion of the access token is encrypted using the encryption key provided to the access token server as part of the device-specific information.
10. The device as recited in claim 1 , wherein the access token includes multiple portions of boot code images, wherein at least one of the multiple portions of boot code images are encrypted with an encryption key unique to a particular communication device, and wherein the communication device decrypts the boot code image portion that was encrypted with the encryption key unique to the communication device.
11. The device as recited in claim 1 , wherein the first boot code image portion is encrypted with JTAG enablement information by a Unit Specific Key (USK) unique to the communication device, and wherein at least one of the at least one processor and the enablement module decrypts the second boot code image portion, re-encrypts the second boot code image portion with the USK, and combines the first boot code image portion with the encrypted second boot code image portion to form an encrypted boot code image including the JTAG enablement information.
12. The device as recited in claim 1 , wherein the JTAG enablement information includes at least one JTAG interface control block having a JTAG enablement flag to store a first value that enables the JTAG interface to allow access to the processor and a second value that disables the JTAG interface to prevent access to the processor.
13. A communication device, comprising:
at least one general purpose processor to receive an access token having a first boot code image portion with JTAG enablement information, a unique device identifier attached to the first boot code portion, and a digital signature;
a memory element coupled to the general purpose processor for storing at least a portion of the first boot code image portion received by the general purpose processor;
a JTAG interface coupled to the general purpose processor and enabled to allow access to the general purpose processor and disabled to prevent access to the general purpose processor;
a security processor coupled to the general purpose processor and coupled to the JTAG interface; and
an enablement module coupled to the general purpose processor to enable and disable the JTAG interface based on the JTAG enablement information,
wherein at least one of the general purpose processor, the security processor and the enablement module authenticates the access token received by the communication device,
wherein the general purpose processor passes the first boot code image portion to the security processor only if the unique device identifier attached to the first boot code image portion matches a corresponding unique device identifier stored within the communication device,
wherein the security processor is configured to combine the first boot code image portion with a second boot code image portion stored in the communication device to form an encrypted boot code image including the JTAG enablement information, and
wherein at least one of the general purpose processor, the security processor and the enablement module is configured to decrypt the encrypted boot code image to obtain the JTAG enablement information.
14. The device as recited in claim 13 , wherein the access token includes a plurality of unique device identifiers, and wherein the general purpose processor passes the first boot code image portion to the security processor only if one of the plurality of unique device identifiers matches a corresponding unique device identifier stored within the communication device.
15. A communication device, comprising:
at least one general purpose processor to receive an access token having a unique device identifier and a digital signature, wherein the general purpose processor includes a boot code image portion having JTAG enablement (JTAG=ON) information and a boot code image portion having JTAG disablement (JTAG=OFF) information;
a memory element coupled to the general purpose processor for storing at least a portion of the first boot code image portion received by the general purpose processor;
a JTAG interface coupled to the general purpose processor and enabled to allow access to the general purpose processor and disabled to prevent access to the general purpose processor;
a security processor coupled to the general purpose processor and coupled to the JTAG interface; and
an enablement module coupled to the general purpose processor to enable the JTAG interface based on JTAG enablement (JTAG=ON) information and disable the JTAG interface based on JTAG disablement (JTAG=OFF) information,
wherein at least one of the general purpose processor, the security processor and the enablement module authenticates the access token received by the communication device,
wherein the general purpose processor passes the boot code image portion having JTAG enablement (JTAG=ON) information to the security processor if the unique device identifier received by the communication device matches a corresponding unique device identifier stored within the communication device,
wherein the general purpose processor passes the boot code image portion having JTAG disablement (JTAG=OFF) information if the unique device identifier received by the communication device does not match a corresponding unique device identifier stored within the communication device,
wherein the security processor combines either the boot code image portion having JTAG enablement (JTAG=ON) information or the boot code image portion having JTAG disablement (JTAG=OFF) information with an existing boot code image portion stored in the communication device to form a combined boot code image including either JTAG enablement (JTAG=ON) information or JTAG disablement (JTAG=OFF) information, and
wherein at least one of the security processor and the enablement executes the combined boot code image to either enable or disable the JTAG interface.
16. The device as recited in claim 15 , wherein the access token includes a plurality of unique device identifiers, and wherein the general purpose processor passes the first boot code image portion to the security processor only if one of the plurality of unique device identifiers matches a corresponding unique device identifier stored within the communication device.
17. A method for controlling the enablement of a JTAG interface of a communication device, the method comprising:
receiving an access token having a first boot code image portion encrypted with JTAG enablement information by an encryption key unique to the communication device, wherein the communication device enables and disables the JTAG interface based on the JTAG enablement information;
authenticating the access token received by the communication device based on the device-specific information;
combining the first boot code image portion with a second boot code image portion stored in the communication device to form an encrypted boot code image including the JTAG enablement information; and
decrypting the encrypted boot code image to obtain the JTAG enablement information.
18. A non-transitory computer readable medium storing instructions that, when executed on a programmed processor, carry out a method for controlling the enablement of a JTAG interface of a communication device, the computer readable medium comprising:
instructions for receiving an access token having a first boot code image portion encrypted with JTAG enablement information by an encryption key unique to the communication device, wherein the communication device enables and disables the JTAG interface based on the JTAG enablement information;
instructions for authenticating the access token received by the communication device based on the device-specific information;
instructions for combining the first boot code image portion with a second boot code image portion stored in the communication device to form an encrypted boot code image including the JTAG enablement information; and
instructions for decrypting the encrypted boot code image to obtain the JTAG enablement information.