公开(公告)号：US10223531B2

公开(公告)日：2019-03-05

申请号：US15396052

申请日：2016-12-30

Applicant: Google Inc.

Inventor： Marius Schilder ,  Timothy Chen ,  Scott Johnson ,  Harrison Pham ,  Derek Martin

IPC: G06F21/57 ,  G06F21/30 ,  H04L9/08 ,  G01R31/3185 ,  G01R31/317 ,  G06F21/73 ,  G06F21/74 ,  G06F21/75 ,  G06F21/79 ,  G11C7/24 ,  G11C16/22 ,  G11C29/36 ,  G11C29/40 ,  G11C29/46 ,  G11C17/14 ,  G11C17/18 ,  G11C29/04 ,  G11C29/44

Abstract: A semiconductor chip device include device state fuses that may be used to configure various device states and corresponding security levels for the semiconductor chip as it transitions from wafer manufacturing to provisioned device. The device states and security levels prevent the semiconductor chip from being accessed and exploited, for example, during manufacturing testing. A secure boot flow process for a semiconductor chip over its lifecycle is also disclosed. The secure boot flow may start at the wafer manufacturing stage and continue on through the insertion of keys and firmware.

公开(公告)号：US10126966B1

公开(公告)日：2018-11-13

申请号：US15247626

申请日：2016-08-25

Applicant: GOOGLE INC.

Inventor： Benjamin Charles Serebrin ,  Scott Johnson ,  Timothy Chen

IPC: G06F3/06 ,  G11C16/32 ,  G06F21/52 ,  G11C16/28

Abstract: A method for reading a first data bit from a non-volatile memory of a memory system is disclosed. The N most-significant bits are stored for each of M words in a rotated storage section. Address bits are serially received according to the clock signals. Before receiving a final address bit, a rotated word made up of the most significant bit of the M words is fetched from the rotated storage section. Address bits are serially received and rotated words are fetched until the N most-significant bits of the M words have been fetched. Then, un-rotated words are serially fetched from the non-volatile memory. Within one clock signal of the final address bit receipt, a bit is selected out of the fetched rotated words based on the received address bits. The first data bit is returned based on the selected bit and un-rotated words are returned based on the address.

公开(公告)号：US10261700B1

公开(公告)日：2019-04-16

申请号：US15247632

申请日：2016-08-25

Applicant: GOOGLE INC.

Inventor： Benjamin Charles Serebrin ,  Trevor Bunker ,  Timothy Chen

IPC: G06F3/06 ,  G06F12/0802

Abstract: A method of accessing data in a non-volatile memory device is disclosed. The method includes serially receiving a command having an address in a virtual address space. When the address maps to the buffer in memory, the address may be matched to the address to one of a plurality of segments in buffer memory. Data may be moved from internal EEPROM/Flash memory to a segment of the plurality of segments of the buffer memory for an address range in the virtual address space that is likely to be read. A physical address may be generated within the buffer memory based on the address. Data may be fetched in the buffer memory based on the generated address and then a response for the command may be transmitted that includes the fetched data.

公开(公告)号：US10133497B1

公开(公告)日：2018-11-20

申请号：US15247199

申请日：2016-08-25

Applicant: GOOGLE INC.

Inventor： Benjamin Charles Serebrin ,  Timothy Chen ,  Scott Johnson

IPC: G06F3/06 ,  G06F21/52

Abstract: A method in a memory system having a security device and a serial external electrically erasable read-only memory (EEPROM) is disclosed. The method includes accepting N bits of a command prefix and matching the bits to command filtering rules. Upon matching the prefix to a command filtering rule, the method may perform a filter action associated with the matched rule. When the command prefix is for a destructive command prefix that can modify data in the EEPROM, the filter action may convert the command into a non-destructive command and inspect it for authentication. The converted command may be output to the external EEPROM without security processing in the security device and the external EEPROM may return read data without outputting. When the command prefix is for a non-destructive command prefix, the command may be allowed to pass through the external EEPROM unchanged without performing security processing in the security device.