Integrated circuit for validating and decrypting software data

Abstract

An integrated circuit is provided. The IC runs a boot program that verifies programs before the programs can be loaded onto, or run by, the IC by verifying whether the programs are signed with a boot key, verifies, with the boot program, a developmental boot program signed with the boot key which verifies developmental programs before the developmental programs can be loaded onto, or run by, the IC by verifying whether the IC has a predetermined identifier, and loads the verified developmental boot program and run the loaded developmental booth program thereby enabling loading or running of the developmental programs on the IC if the IC has the predetermined identifier. The IC is programmed with program code configured to receive encrypted software data, decrypt the software data, and validate the software data. The decrypted software is executed only when the validation is successful.

1 . An integrated circuit configured to:
 run a boot program that verifies programs before said programs can be loaded onto, or run by, the integrated circuit by verifying whether said programs are signed with a boot key;   verify, with the boot program, a developmental boot program signed with the boot key which verifies developmental programs before said developmental programs can be loaded onto, or run by, the integrated circuit by verifying whether the integrated circuit has a predetermined integrated circuit identifier; and   load the verified developmental boot program and run the loaded developmental booth program thereby enabling loading or running of said developmental programs on the integrated circuit if the integrated circuit has the predetermined integrated circuit identifier, and   
       programmed with program code configured to:
 receive encrypted software data, 
 decrypt the software data; and 
 validate the software data, 
 wherein the decrypted software is executed only when the validation is successful. 
 
     
     
         2 . An integrated circuit according to  claim 1 , wherein the encryption function is RSA. 
     
     
         3 . An integrated circuit according to  claim 1 , wherein the boot program contains a plurality of keys, and one of the keys is selected for use in decrypting the software data, the key being selected in accordance with a selection criterion. 
     
     
         4 . An integrated circuit according to  claim 3 , wherein the selection criterion is time-based, a particular one of the keys being selected depending on the time the selection is made. 
     
     
         5 . An integrated circuit according to  claim 3 , wherein the selection criteria relates to a physical arrangement or configuration of the integrated circuit. 
     
     
         6 . An integrated circuit according to  claim 5 , wherein the physical arrangement or configuration includes one or more of the following:
 one or more pads wired to a reference voltage or to ground;   one or more fuses, one or more of which has been blown; or   the contents of non-volatile memory.