System and method for authenticating and enabling functioning of a manufactured electronic device
A system and method for authenticating and enabling functioning of a manufactured electronic device are disclosed. A particular embodiment includes: an electronic device comprising: a protected device; and an embedded and active obfuscation unit including: an obfuscation code generator to produce an obfuscation code having a first portion representing manufacturing or physical characteristics of a particular paired system and a second portion representing one or more identifiers of the particular paired system; an authentication key retriever to use the obfuscation code to obtain an authentication key from an authorized representative using an external data communication; and an obfuscation state machine configured with a pre-defined quantity of state elements, a pre-defined quantity of the state elements being functional state elements, the obfuscation state machine being programmed with the authentication key to cause the obfuscation state machine to transition the protected device from an initial obfuscation state to a functional state.
1. An electronic device comprising:
a protected device; and
an embedded active obfuscation unit including:
an obfuscation code generator to produce an obfuscation code having a first portion representing manufacturing or physical characteristics of a particular paired system and a second portion representing one or more identifiers of the particular paired system;
an authentication key retriever to use the obfuscation code to obtain an authentication key from an authorized representative using an external data communication; and
an obfuscation state machine configured with a pre-defined quantity of state elements, a pre-defined quantity of the state elements being functional state elements, the obfuscation state machine being programmed with the authentication key to cause the obfuscation state machine to transition the protected device from an initial obfuscation state to a functional state, the embedded active obfuscation unit being further configured to load random bit-selected values from the obfuscation code into the obfuscation state machine for the values of the state elements and to load a different set of random bit-selected obfuscation values from the obfuscation code into the obfuscation state machine for the values of the functional state elements of the obfuscation state machine, thereby causing the protected device to transition from the initial obfuscation state through a set of obfuscation states before reaching the functional state for normal operation.
2. The electronic device of claim 1 wherein the first portion of the obfuscation code is generated by a physical unclonable function (PUF) device.
3. The electronic device of claim 1 wherein the first portion of the obfuscation code is generated by a randomly fused array.
4. The electronic device of claim 1 wherein the second portion of the obfuscation code is board/system identifier data including a board/system identifier and silicon or board manufacturing data.
5. A method comprising:
providing a protected device; and
providing an embedded active obfuscation unit including:
an obfuscation code generator to produce an obfuscation code having a first portion representing manufacturing or physical characteristics of a particular paired system and a second portion representing one or more identifiers of the particular paired system;
an authentication key retriever to use the obfuscation code to obtain an authentication key from an authorized representative using an external data communication;
an obfuscation state machine configured with a pre-defined quantity of state elements, a pre-defined quantity of the state elements being functional state elements, the obfuscation state machine being programmed with the authentication key to cause the obfuscation state machine to transition the protected device from an initial obfuscation state to a functional state, the embedded active obfuscation unit being further configured to load random bit-selected values from the obfuscation code into the obfuscation state machine for the values of the state elements and to load a different set of random bit-selected obfuscation values from the obfuscation code into the obfuscation state machine for the values of the functional state elements of the obfuscation state machine, thereby causing the protected device to transition from the initial obfuscation state through a set of obfuscation states before reaching the functional state for normal operation.
6. The method of claim 5 wherein the first portion of the obfuscation code is generated by a physical unclonable function (PUF) device.
7. The method of claim 5 wherein the first portion of the obfuscation code is generated by a randomly fused array.
8. The method of claim 5 wherein the second portion of the obfuscation code is board/system identifier data including a board/system identifier and silicon or board manufacturing data.