Infineon Technologies Ag

Veit Kleeberger

Rafael Zalman

Dirk Hammerschmidt

Thomas Zettler

Georg Georgakos

Bernhard Gstoettenbauer

Ludwig Rossmeier

Alexander Zeh

Berndt Gammel

Boyko Traykov

The disclosure creates a method for generating a proof-of-work. In the method, a data block is associated with a nonce. Then, the data block associated with the nonce is encrypted into a tag using a secret key. In a further step it is checked whether the tag meets a predetermined criterion. If the tag does not meet the predetermined criterion, the nonce is varied and the association and encryption are repeated until the check shows that the tag meets the criterion. In addition, the disclosure relates to the implementation of the proof-of-work during the process of authentication, encryption, transmission and reception of a message. In addition, the disclosure relates to a computer program and a device for carrying out the method.

Proof-of-work based on block cipher

An error diagnosis circuit includes a signal input for connection to a communication interface, configured to receive a first instruction and a second instruction for a device. A circuit is configured to compare the first instruction and the second instruction and to output an error signal if the first instruction and the second instruction differ from one another.

Error diagnosis circuit and method for operating a device

In some examples, a circuit comprises a function unit configured to perform a circuit function, and one or more in situ monitors configured to measure internal data associated with the circuit. The circuit may further comprise a memory configured to store one or more limit values associated with the one or more in situ monitors, and a lifetime model unit configured to determine whether the circuit has reached an end-of-life threshold based on the measured internal data from the one or more in situ monitors and the limit values.

Circuits and techniques for predicting end of life based on in situ monitors and limit values defined for the in situ monitors

A monitoring system includes: a sensor configured to generate a sensor signal based on a measured property; a controller configured to communicate with the sensor; and a communication channel electrically coupled to the sensor and the controller for carrying electrical communications therebetween. The sensor includes a transmitter configured to transmit an electrical signal on the communication channel to the controller. The controller includes a processing circuit configured to receive the electrical signal, measure an actual signal function response of the electrical signal, correlate the actual signal function response with a reference signal function response to generate a correlation value, compare the correlation value and a correlation threshold to produce a comparison result, and detect a fault based on the comparison result indicating that the correlation value satisfies the correlation threshold.

Security and reliability detection for a sensor communication channel

In some examples, a method of operating a circuit is described. The method may include performing a circuit function and estimating a probability of failure of the circuit based on one or more stress origination metrics, one or more stress victim events, and one or more initial state conditions.

Circuits and techniques for predicting failure of circuits based on stress origination metrics and stress victim events

A method for configuring a storage circuit, including: writing data via an input line into the storage circuit by a software write access; writing a bit-wise inverted form of the data via the input line into the storage circuit by a subsequent software write access; and generating an error signal if a comparison based on the written data and the written bit-wise inverted form of the data indicates a storage circuit configuration error, wherein the storage circuit permits hardware read access and lacks software read access.

Storage circuit with hardware read access

In some examples, this disclosure describes a method of operating a circuit. The method may comprise performing a circuit function under normal operating conditions, wherein performing the circuit function under the normal operating conditions includes performing at least a portion of the circuit functions via a characteristic circuit, performing at least the portion of the circuit function under enhanced stress conditions via a characteristic circuit replica, and predicting a potential future problem with the circuit function under the normal conditions based on an evaluation of operation of the characteristic circuit relative to operation of the characteristic circuit replica.

Differential aging monitor circuits and techniques for assessing aging effects in semiconductor circuits

In some examples, a method of operating a circuit may comprise performing a circuit function under normal conditions, performing the circuit function under aggravated conditions, predicting a potential future problem with the circuit function under the normal conditions based on an output of the circuit function under the aggravated conditions, and outputting a predictive alert based on predicting the potential future problem.

Circuits and techniques for assessing aging effects in semiconductor circuits

In some examples, a circuit may be configured to perform a method that includes performing a circuit function via a circuit function unit of a circuit, receiving sensor data from one or more sensors associated with the circuit function unit, and estimating a remaining life of the circuit based on an accelerated reliability model and the sensor data, wherein the sensor data comprises input to the accelerated reliability model. The circuit itself may include a dedicated circuit unit that estimates the remaining life of the circuit based on an accelerated reliability model and the sensor data, and the circuit may output one or more predictive alerts or predictive faults when the remaining life is below a threshold, which may prompt the system for predictive maintenance on the circuit.

End-of-life prediction for circuits using accelerated reliability models and sensor data

A method for providing a Proof-of-Work concept in a vehicle is provided. The vehicle includes a network including at least three control units, where a first control unit sends a first message to a second control unit, the second control unit sends a second message including the first message to a third control unit, and the third control unit determines a Proof-of-Work for the second message based on at least one vehicle-specific characteristics of the network. Also, an corresponding system as well as a vehicle including such system are provided.

Proof-of-work concept for a vehicle

A method for operating a microcontroller, which includes a processor and a peripheral circuit on a common chip, the method including initiating a process in the peripheral circuit, in the peripheral circuit generating recovery data, executing the process, checking whether the process has been executed successfully and, in the event that the check reveals that the process has not been executed successfully, generating recovered data from the recovery data, and executing the process again.

Method for operating a microcontroller and microcontroller by executing a process again when the process has not been executed successfully

A hybrid device includes a plurality of diverse subsystems, including a first and a second subsystem. The first subsystem includes at least one first secured storage device configured to store a first software and a first CPU configured to boot and execute the first software. The second subsystem includes at least one second secured storage device configured to store a second software and a second CPU configured to boot and execute the second software. The first CPU is configured to generate the first hash of the first software and transmit the generated first hash of the first software to the second subsystem. The second CPU is configured to perform a first authenticity validation check on the first software using the received first hash of the first software, and generate an error signal on a condition that the first authenticity validation check on the first software fails.

Secure hybrid boot systems and secure boot procedures for hybrid systems

A microcontroller system includes a processing unit, a first peripheral having a first set of registers, and an assurance module. The first peripheral is configured to receive a first reset signal that resets the first set of registers to a first actual reset value, which is expected to be a first expected value. The assurance module is configured to calculate a first signature value, which is based on the first actual reset value, in response to the first reset signal. The processing unit is configured to perform a first comparison between the calculated first signature value and a pre-determined first signature value to determine whether the microcontroller system is in a trusted safety state. The first comparison is performed in response to the first reset signal, and the pre-determined first signature value is based on the first expected value.

Growing community of inventors

Munich, Germany

Veit Kleeberger