摘要:
A semiconductor device (10) having a plurality of on-chip processors (100, 101, 102), a plurality of key RAMs (110, 111, 112), a plurality of key RAM controllers (120, 121, 122), a fuse bank (200), a fuse bank controller (300) and a boot controller (500) is described. The boot controller (500) is arranged to, in a first programming stage, allocate a first array of fuses in the fuse bank (200) in dependence on the size of a first device key (210) for storing the first device key in the fuse bank (200), and, during boot-time, provide the first device key (210) to a first key RAM controller (120). The fuse bank controller (300) is arranged to program the first array of fuses with the first device key (210) in the first programming stage, provide the first device key to the boot controller (500) during boot-time, and prevent access to the first device key (210) in the fuse bank (200) during run-time. The first key RAM controller (120) is arranged to, during boot-time, store the first device key in the first key RAM (110), and, during run-time, restrict access to the first device key in the first key RAM (110) to exclusive access by the first on-chip processor (100). The first on- chip processor (100) is arranged to, during run-time, retrieve the first device key from the first key RAM (110) and use the first device key in the first key-protected processing.