Abstract: A method for generating a secure nonce using a one-time programmable (OTP) memory within an integrated circuit to provide persistence, the method including randomly selecting k currently-unprogrammed bits in the OTP memory, creating a data set using data derived from current contents of the OTP memory altered by changing the states of the k currently-unprogrammed bits of the OTP memory, and employing as the secure nonce the data set or data derived from the data set. The selected k bits are programmed in the OTP memory.

Abstract: A method for controlling the use of intellectual property (IP) in an individual integrated circuit includes loading data including the IP into the individual integrated circuit, loading an IP license certificate into the individual integrated circuit, the certificate including identification of the IP authorized for the individual integrated circuit, determining inside the individual integrated circuit whether the IP is authorized for the individual integrated circuit, enabling operation of the individual integrated circuit if the IP circuit is authorized for use in the individual integrated circuit, and imposing a penalty on operation of the individual integrated circuit if the IP is not authorized for use in the individual integrated circuit.

Abstract: A method for determining if an individual integrated circuit was manufactured using an individual instance of tooling includes collecting from the individual integrated circuit first data representing at least one attribute that varies as a function of the tooling used to manufacture the individual integrated circuit and second data identifying the integrated circuit as having been manufactured using the individual instance of tooling. The first data is compared to a signature of the individual instance of tooling identified by the second data. The signature is derived from the at least one attribute measured from a population of integrated circuits that were manufactured using the individual instance of tooling. The individual integrated circuit is identified as having been manufactured using the individual instance of tooling identified in the second data collected from the individual integrated circuit if the first data correlates to the signature by a predetermined threshold.

Abstract: A method for securely booting a target processor in a target system from a secure root of trust includes computing a message authentication code from boot code to be provided to the target processor, including an obfuscated algorithm for recreating the message authentication code in the target processor, serving the boot code to the target processor, executing the boot code to recreate the message authentication code in the target processor, serving the message authentication code back to the root of trust, comparing the returned message authentication code with the message authentication code generated in the root of trust, continuing execution of the boot code data if the returned message authentication code matches the message authentication code, and applying at least one penalty to the target system if the returned message authentication code does not match the message authentication code generated in the root of trust.

Abstract: A method for securely programming a population of authorized FPGAs includes defining the population of authorized FPGAs, generating an encrypted configuration bitstream for the population of authorized FPGAs, generating an individual Authorization Code for each FPGA in the population of authorized FPGAs, feeding the individual Authorization Codes into the FPGAs in the population of FPGAs, feeding the encrypted configuration bitstream into all of the FPGAs in the population of FPGAs, and in each FPGA using the Authorization Code to decrypt the encrypted configuration bitstream to program the FPGA.

Abstract: A method for generating a secure nonce using a one-time programmable (OTP) memory within an integrated circuit to provide persistence, the method including randomly selecting k currently-unprogrammed bits in the OTP memory, creating a data set using data derived from current contents of the OTP memory altered by changing the states of the k currently-unprogrammed bits of the OTP memory, and employing as the secure nonce the data set or data derived from the data set. The selected k bits are programmed in the OTP memory.

Abstract: A method for determining if an individual integrated circuit was manufactured using an individual instance of tooling includes collecting from the individual integrated circuit first data representing at least one attribute that varies as a function of the tooling used to manufacture the individual integrated circuit and second data identifying the integrated circuit as having been manufactured using the individual instance of tooling. The first data is compared to a signature of the individual instance of tooling identified by the second data. The signature is derived from the at least one attribute measured from a population of integrated circuits that were manufactured using the individual instance of tooling. The individual integrated circuit is identified as having been manufactured using the individual instance of tooling identified in the second data collected from the individual integrated circuit if the first data correlates to the signature by a predetermined threshold.

Abstract: A method for controlling the use of intellectual property (IP) in an individual integrated circuit includes loading data including the IP into the individual integrated circuit, loading an IP license certificate into the individual integrated circuit, the certificate including identification of the IP authorized for the individual integrated circuit, determining inside the individual integrated circuit whether the IP is authorized for the individual integrated circuit, enabling operation of the individual integrated circuit if the IP circuit is authorized for use in the individual integrated circuit, and imposing a penalty on operation of the individual integrated circuit if the IP is not authorized for use in the individual integrated circuit.

Abstract: A method for controlling the use of intellectual property (IP) in an individual integrated circuit includes loading data including the IP into the individual integrated circuit, loading an IP license certificate into the individual integrated circuit, the certificate including identification of the IP authorized for the individual integrated circuit, determining inside the individual integrated circuit whether the IP is authorized for the individual integrated circuit, enabling operation of the individual integrated circuit if the IP circuit is authorized for use in the individual integrated circuit, and imposing a penalty on operation of the individual integrated circuit if the IP is not authorized for use in the individual integrated circuit.

Abstract: A method for securely programming a population of authorized FPGAs includes defining the population of authorized FPGAs, generating an encrypted configuration bitstream for the population of authorized FPGAs, generating an individual Authorization Code for each FPGA in the population of authorized FPGAs, feeding the individual Authorization Codes into the FPGAs in the population of FPGAs, feeding the encrypted configuration bitstream into all of the FPGAs in the population of FPGAs, and in each FPGA using the Authorization Code to decrypt the encrypted configuration bitstream to program the FPGA.

Abstract: A method for securely booting a target processor in a target system from a secure root of trust includes computing a message authentication code from boot code to be provided to the target processor, including an obfuscated algorithm for recreating the message authentication code in the target processor, serving the boot code to the target processor, executing the boot code to recreate the message authentication code in the target processor, serving the message authentication code back to the root of trust, comparing the returned message authentication code with the message authentication code generated in the root of trust, continuing execution of the boot code data if the returned message authentication code matches the message authentication code, and applying at least one penalty to the target system if the returned message authentication code does not match the message authentication code generated in the root of trust.

Abstract: A method for verifying that data is correctly loaded into an individual programmable logic device includes computing a reference digest of the data to be loaded into the individual programmable logic device, loading the data into the individual programmable logic device, computing inside the individual programmable logic device an as-programmed digest of the data that was loaded into the individual programmable logic device, reading the as-programmed digest out of the individual programmable logic device, comparing the as-programmed digest with the reference digest, and verifying the loaded data if the as-programmed digest matches the reference digest, and indicating an error if the as-programmed digest does not match the reference digest.

Abstract: A circuit and method for compensating sigma-delta modulators in A/D and D/A converters is disclosed. Circuits according to the invention use a low-resolution Sigma-Delta encoded version of the signal to inexpensively encode quadratic and cubic compensation terms. These circuits can encode quadratic and cubic compensation signals with acceptably low quantization noise without requiring the use of expensive multi-bit multipliers to compute the square or cube of the signal. The method includes providing a binary word Q or a binary word C (or both) representing the desired amount of quadratic or cubic compensation to apply. Because the encoded quadratic and cubic signals have only one or a few bits, they can be multiplied by Q and C without the use of expensive multi-bit multipliers and applied to the modulator input or output to provide a compensated result.

Abstract: Inertial rate sensor and method in which a drive signal is applied to a rate sensing element, a pickup circuit is coupled to the rate sensing element for providing an output signal corresponding to movement of the rate sensing element, digital logic calibrates the rate sensor and detects the occurrence of faults in the rate sensor, the rate sensing element is utilized as a frequency reference for providing a system clock signal for the digital logic, a fixed phase relationship is maintained between vibration of the rate sensing element and the system clock signal, the system clock signal is filtered to eliminate responses to spurious transitions during a period following application of operating power to the sensor, and the digital logic is reset in synchronization with the system clock signal.

Abstract: A closed loop sensor that utilizes a piezoelectric structure. In one embodiment, drive/non-control electrodes apply drive voltages to the piezoelectric structure and drive/control electrodes apply drive/control voltages to the piezoelectric structure to cause drive mode displacement of the piezoelectric structure and cancel motion induced pickup mode and quadrature displacements of the piezoelectric structure. In another embodiment, pickup/control electrodes detect a pickup signal from the piezoelectric structure corresponding to the motion induced pickup mode and quadrature displacements and apply a control signal to the piezoelectric structure so as to cancel these displacements. In still another embodiment of the invention, an optical sensing device optically senses the motion induced pickup mode and quadrature displacements and control electrodes apply a control signal to the piezoelectric structure so as to cancel them.

Abstract: Accelerometer and method in which parts such as the seismic mass and force sensors are all fabricated of a single material such as crystalline quartz and bonded together in a manner which reduces the possibility of creep between them. Damping plates and squeeze film gas damping dampen movement of the seismic mass, and the parts are oriented in a predetermined manner relative to the crystallographic axes of the wafers from which they are fabricated to control the character of breakaway tabs which hold the parts to the wafers during fabrication.

Abstract: Accelerometer and method in which parts such as the seismic mass and force sensors are all fabricated of a single material such as crystalline quartz and bonded together in a manner which reduces the possibility of creep between them. Damping plates and squeeze film gas damping dampen movement of the seismic mass, and the parts are oriented in a predetermined manner relative to the crystallographic axes of the wafers from which they are fabricated to control the character of breakaway tabs which hold the parts to the wafers during fabrication.

Abstract: Mechanical resonator and method in which electrodes or other driving and sensing elements are energized with an AC voltage to produce oscillations in a tine. The electrodes or other driving and sensing elements have at least two parameters which are adjusted to selectively enhance oscillations in one mode, e.g. the fundamental mode, and/or to selectively suppress oscillations in one or more other modes, e.g. an overtone mode. The parameters which can be adjusted include the endpoints of electrodes, the width of a gap between adjacent ends of electrodes, and corresponding features of other driving and sensing elements.

Abstract: Proofmass assembly for an accelerometer having transducers fabricated of crystalline quartz and other components fabricated of fused quartz. The assembly includes a main support, a frame pivotally connected to the support for pendulous movement about a hinge axis such that the frame moves with a component of motion along the sensing axis of the accelerometer, a proofmass connected to the frame for movement about a compensation axis spaced from and generally parallel to the hinge axis, and a pair of transducers connected between the proofmass and the support for sensing forces produced by acceleration of the proofmass along the sensing axis. Differences in thermal expansion between the transducers and the fused quartz components are taken up by rotation of the proofmass about the compensation axis, and the two parallel axes permit translational motion of the proofmass in response to acceleration along the sensing axis without rotation of the proofmass relative to the support.