Cisco Technology, Inc.

Samir Valjibhai Rajgor

Chirag Shroff

Srirajkumar Sundararaman

Aviran Kadosh

Dylan Thomas Walker

Sachin Agarwal

Srinivas Vundru

Kevin Shyh-Kang Chang

Tatiana Serguei Dorofeeva

A method for monitoring an Integrated Circuit (IC). The method includes a Root-Of-Trust (ROT) module to actuate a monitoring process to monitor at least one feature being performed in ongoing operations of the IC in accordance with a policy. The ROT module receives data that defines the policy that includes at least one feature being performed. A validating process is applied by the ROT module to data by using firmware and by using at least one built-in key of a plurality of built-in keys retrieved from a secure storage. The ROT module determines whether at least one feature is being performed in the ongoing operations of the IC in compliance with the policy. The ROT module applies an impairing process to impair at least one feature of the plurality of features being performed to attempt to place the performance of the ongoing operations of the IC in compliance with the policy.

Using root-of-trust (ROT) to continuously monitor device operation for impairment

A method of operating a system-on-chip (SOC) including decrypting, by isolated Root of Trust (RoT) code, a Stock Keeping Unit (SKU) license code from a host during bootup of a device. Then validating, by the isolated RoT code, the SKU license code with firmware and at least one built-in key of a plurality of built-in keys from secure storage. Finally, enabling or disabling, by the isolated RoT code, at least one feature set of a plurality of feature sets comprising resources configured at the SOC based on at least one SKU license code which has been decrypted by isolated RoT code using at least one built-in key and authenticated by firmware.

On-demand and secure hardware license-based SKU creation for ASICs

Growing community of inventors

Santa Clara, CA, United States of America

Samir Valjibhai Rajgor