RRAM-BASED AUTHENTICATION CIRCUIT
A memory device includes a memory array comprising a plurality of bits, wherein each bit comprises two memory cells each having a variable resistance; a formation circuit, coupled to the plurality of bits, and configured to cause a first memory cell of a first bit to be at a low resistance state; and an authentication circuit, coupled to the plurality of bits, configured to designate a logical state to the first memory cell of the first bit and use the logical state of the first memory cell of the first bit to generate a physically unclonable function (PUF) signature.
The present application claims priority to U.S. Provisional Patent Application No. 62/427,550, filed on Nov. 29, 2016, which is incorporated by reference herein in its entirety.
BACKGROUNDWith the increasing use of integrated circuits in electronic devices that provide different types of information for a variety of different applications, there has been an increasing need to adequately protect sensitive and/or critical information that may be stored within an electronic device to limit access to such information to only other devices that have permission to access the information. Some examples of applications include the authentication of devices, protection of confidential information within a device, and securing a communication between two or more devices.
A physically unclonable function (PUF) is a physical structure generally within an integrated circuit that provides a number of corresponding outputs (e.g., responses) in response to inputs (e.g., challenges/requests) to the PUF. Each PUF provides one or more sets of request-response pairs. An identity of the integrated circuit may be established by such request-response pairs provided by the PUF. With the establishment of the identity, secure communication can be provided between devices. The PUF can also be used for existing authentication purposes to replace the current method of assigning an identity to an electronic device. Since the PUF is based on intrinsic properties of a manufacturing process, the PUF has various advantages over conventional authentication approaches that inscribe an identity on a device that may be mimicked and/or reverse engineered more easily.
Aspects of the present disclosure are best understood from the following detailed description when read with the accompanying figures. It is noted that various features are not necessarily drawn to scale. In fact, the dimensions of the various features may be arbitrarily increased or reduced for clarity of discussion.
The following disclosure describes various exemplary embodiments for implementing different features of the subject matter. Specific examples of components and arrangements are described below to simplify the present disclosure. These are, of course, merely examples and are not intended to be limiting. For example, it will be understood that when an element is referred to as being “connected to” or “coupled to” another element, it may be directly connected to or coupled to the other element, or one or more intervening elements may be present.
A physical unclonable function (PUF) is generally used for authentication and secret key storage without requiring secure electrically erasable programmable read-only memory (EEPROMs) (or any of other non-volatile memory) and/or other expensive hardware (e.g., battery-backed static random-access memory). Instead of storing secrets in a digital memory, the PUF derives a secret from physical characteristics of an integrated circuit (IC). The PUF is based on an idea that even though an identical manufacturing process is used to fabricate a plurality of ICs, each IC may be slightly different due to manufacturing variability. PUFs leverage this variability to derive “secret” information that is unique to each of the ICs (e.g., a silicon “biometric”). Generally, such secret information is referred to as a “signature” of the IC. In addition, due to the manufacturing variability that defines the signature, one cannot manufacture two identical ICs even with full knowledge of the IC's design. Various types of variability of an IC can be used to define such a signature such as, for example, gate delay(s), power-on state(s) of a memory device (e.g., a static random-access memory (SRAM) device), and/or any of a variety of physical characteristics of an IC.
In recent years, unconventional nonvolatile memory (NVM) devices, such as ferroelectric random access memory (FRAM) devices, magnetic random access memory (MRAM) devices, phase-change random access memory (PRAM) devices, and resistive random access memory (RRAM) devices, have emerged. In particular, RRAM devices, which exhibit a switching behavior between a high resistance state and a low resistance state, have various advantages over conventional NVM devices. Such advantages include, for example, compatible fabrication steps with current complementary-metal-oxide-semiconductor (CMOS) technologies, low-cost fabrication, a compact structure, flexible scalability, fast switching, high integration density, etc.
Generally, an RRAM device, or more particularly an RRAM cell, includes a top electrode (e.g., an anode) and a bottom electrode (e.g., a cathode) with a variable resistance dielectric layer interposed therebetween. In some examples, an RRAM cell may further include a capping layer interposed between the top electrode and the variable resistance dielectric layer thereby causing the RRAM cell to have a bipolar switching behavior. The term “bipolar” as used herein refers to the two voltage polarities of an RRAM cell that exhibits a first conductive behavior with a first polarity of voltage applied across the top and bottom electrodes, and a second conductive behavior with a second polarity (a polarity opposite to the first polarity) of voltage applied across the top and bottom electrodes. In some embodiments, during a write operation to the RRAM cell, a ‘set’ voltage is applied across the top and bottom electrodes to change the variable resistance dielectric layer from a first resistivity (e.g., a high resistance state (HRS)) to a second resistivity (e.g., a low resistance state (LRS)). Similarly, a ‘reset’ voltage (e.g., opposite to the set voltage in polarity) may be applied across the top and bottom electrodes to change the variable resistance dielectric layer from the second resistivity back to the first resistivity, for example, from LRS to HRS. Therefore, the LRS and HRS may correspond to a logical “1” and a logical “0” (or vice versa), respectively.
The present disclosure provides various embodiments of systems and methods to generate a PUF signature, by an authentication circuit, for an RRAM cell array via utilizing randomly distributed characteristics of plural RRAM cells across the RRAM cell array. More specifically, the RRAM array includes a plurality of RRAM memory bits (hereinafter “bits”), and each bit includes two RRAM cells. By leveraging the above-mentioned manufacturing variability while forming the RRAM cells, in some embodiments, even though two RRAM cells in a single bit are applied with an identical bias condition (e.g., an identical voltage and/or an identical current), these two RRAM cells may still present respective different characteristics such as, for example, respective set voltages, respective reset voltages, etc. The respective different characteristics of the two RRAM cells in a single bit allows the authentication circuit to designate the two RRAM cells as a logical 1 and a logical 0, respectively. Further, corresponding locations (e.g., address of each bit) of the designated logical 1 and logical 0 are randomly distributed (i.e., unpredictable), again because of the manufacturing variability. As such, the authentication circuit may choose either a logical 1 or a logical 0 from each bit to generate a PUF signature. Consequently, such a PUF signature generated by the disclosed authentication circuit may advantageously be more “unpredictable,” and thus more “reliable.”
In some embodiments, the array 102 includes a plurality of bits, and, more specifically, each bit includes two RRAM cells, wherein each bit's respective RRAM cells are substantially similar to each other. In general, as discussed in further detail below with respect to
As discussed in further detail below with respect to
Through the BL's, WL's, and SL's, the bits of the array 102 are each coupled to the BL driver 104, the WL driver 106, the SL driver 108, respectively. In some embodiments, the BL driver 104 may include one or more multiplexers, switch devices, and/or the like that are each configured to select one or more of the BL's so as to assert respectively coupled bit(s). Similarly, the WL driver 106 and the SL driver 108 may each include one or more multiplexers, switch devices, and/or the like that are each configured to select one or more of the WL's and SL's so as to assert coupled bit(s), respectively. In some embodiments, through the respective BL or BL's, each bit may be further coupled to the formation circuit 110. The formation circuit 110 may include one or more voltage source circuits and/or current source circuits that are configured to “form” one of the two RRAM cells of the respective bit, which will be discussed in further detail below with respect to
In accordance with various embodiments, each of the bits of the array 102 may be further coupled to the I/O circuit 112 through respective BL or BL's. The I/O circuit 112 includes a plurality of sensing amplifiers (SA's) that are each configured to “read” a data bit (either a logical 1 or a logical 0) from one or more bits of the array 102. In some embodiments, such read data bit may be used by the authentication circuit 114 to generate one or more PUF signatures. Accordingly, the authentication circuit 114 may include a PUF generator, an error correction circuit, a compiler, etc.
In some embodiments, the control logic circuit 116 may be coupled to the BL driver 104, the WL driver 106, and the SL driver 108, and is configured to control each of them. For example, the control logic circuit 116 may provide a column address to the BL driver 104 so as to cause the BL driver 104 to assert one or more corresponding bit(s) that are arranged in the column address; the control logic circuit 116 may provide a row address to the WL driver 106 so as to cause the WL driver 106 to provide a WL assertions signal to activate one or more selection transistors that are arranged in the row address; the control logic circuit 116 may provide a selector address to the SL driver 108 so as to cause the SL driver 108 to assert one or more corresponding bit(s) that are arranged in the selector address.
Referring still to
As described above, each RRAM cell further includes a transistor coupled to the respective resistor, in series. In some embodiments, such a transistor is typically referred to as a “selection transistor,” or an “enablement transistor” that is configured to enable a conduction path to flow through the coupled resistor. As shown in
Referring now to
Referring now to
In some embodiments, the BL's 303 and 323 are coupled to the formation circuit 110 through the BL driver 104. As shown, the formation circuit 110 includes a current source circuit 310. Such a current source circuit 310 is configured to provide a constant current 310′ to the RRAM cells 302 and 322 through respective BL's 303 and 323. In some embodiments, the constant current 310′ may serve as a “winner-takes-all” current for the RRAM cells 302 and 322 to compete with each other so as to allow the bit 300 to be written as a logical 1 and a logical 0, which will be discussed in further detail below.
In some embodiments, before the constant current 310′ is applied to the RRAM cells 302 and 322, the selections transistors 306 and 326 may be turned on by assertion signals through respective WL's 305 and 325. In some embodiments, the assertion signals may be provided by the WL driver 106. Moreover, the SL's 307 and 327 may be each pulled to ground by the SL driver 108. When the constant current 310′ (e.g., about 50˜100 μA) is applied to both of the RRAM cells 302 and 322, due to the above-mentioned manufacturing variability, one of the RRAM cells, for example, the RRAM cell 302, may be “formed” first, as described in
In some alternative embodiments, the formation circuit 110 may include voltage source circuit (not shown) coupled with a current limiter (not shown). The current limiter may be coupled between the voltage source circuit and respectively coupled RRAM cells, e.g., 302 and 322. In such embodiments, the voltage source circuit may be configured to provide a formation voltage to the RRAM cells 302 and 322 so as to perform an initial forming process while the current limiter may be configured to concurrently monitor a level of current flowing through either the RRAM cell 302 or RRAM cell 322 based on a pre-determined threshold (e.g., a maximum current level). As such, when either of the RRAM cells 302 and 322 is formed first, e.g., the RRAM cell 302, the RRAM cell 302 transitions from the HRS to the LRS. Accordingly, the formation voltage is won by the formed RRAM cell 302 and a current with a relatively large level flows from the voltage source circuit, and through the current limiter and the RRAM cell 302. In some embodiments, in response to the current limiter detecting such a current with the relatively large level exceeds the pre-determined threshold, the current limiter may terminate the initial forming process.
Because of the unpredictable nature regarding which of the RRAM cells in a bit will be fainted first, in some embodiments, the formation circuit 110 may use an included voltage source (e.g., 350 of
Subsequently, in some embodiments, the formation circuit 110 may further apply a second voltage (e.g., about 3V) to the RRAM cell at the LRS. The second voltage is substantially higher than the first voltage so as to provide an additional forming process to the RRAM cell at the LRS (e.g., 302 in the above example). In some embodiments, the provision of such an additional forming process may advantageously provide better data retention. And accordingly, the authentication circuit 114 may designate the RRAM cells 302 and 322 with respective logical states. In some embodiments, the authentication circuit 114 may designate the RRAM cell 302 with a logical 1, and the RRAM cell 304 with a logical 0. In some other embodiments, the authentication circuit 114 may designate the RRAM cell 302 with a logical 0, and the RRAM cell 304 with a logical 1. The following discussion will use the former designation, i.e., the LRS corresponds to a logical 1 and the HRS corresponds to a logical 0. As such, the RRAM cells 302 and 324 of the bit 300 then are each written to a respective bit data (a logical 1 and a logical 0, respectively).
Additionally or alternatively, in some embodiments, the authentication circuit 114 may designate the logical states to the RRAM cells of each bit before the second voltage is applied to the RRAM cell in the LRS. As such, the authentication circuit 114 may perform the designation after the authentication circuit 114 is informed of the state that each RRAM cell presents (i.e., right after the first voltage is applied).
Referring now to
Different from the bit 300 of
In some embodiments, the operation of the bit 360 is substantially similar to the above-described operation of the bit 300 except that the initial forming process in the bit 360 is determined by the forming detection circuit 390. Similarly, before the constant currents 312′ and 314′ are each applied to the RRAM cells 362 and 382, the selections transistors 366 and 386 may be turned on by respective assertion signals through WL's 365 and 385. In some embodiments, the assertion signals may be provided by the WL driver 106. Moreover, the SL's 367 and 387 may be each pulled to ground by the SL driver 108. In some embodiments, the constant current 312′ and 314′ are approximately at a same current level, e.g., about 50˜100 μA. When the constant currents 312′ and 314′ are each applied to the RRAM cells 362 and 382, due to the above-mentioned manufacturing variances, one of the RRAM cells, for example, the RRAM cell 362, may be “formed” first. Based on the above-described operation of the RRAM cells, once an RRAM cell is formed, the RRAM cell may transition from the HRS to the LRS, and when the RRAM cell is not yet formed, the RRAM cell may remain at the HRS.
In some embodiments, the forming detection circuit 390 is configured to monitor resistances of the resistors 364 and 384. Once the forming detection circuit 390 detects a substantial difference of the resistances between the resistors 364 and 384, the forming detection circuit 390 may cause the current source circuits 312 and 314 to cease providing currents 312′ and 314′. As such, the initial forming process of one of the RRAM cells (i.e., the cell that transitions to the LRS state) is terminated based on detection of a substantial difference of the resistances. Following similar operations as described above (i.e., a first voltage is each applied to the RRAM cells 362 and 382 so as to allow the I/O circuit 112 to discriminate which RRAM cell is at the LRS and which RRAM cell is at the HRS, and a second voltage is applied to the RRAM cell at the LRS for better data retention), the RRAM cells 362 and 382 may be each designated with a respective logical state. Continuing with the above example, the RRAM cells 362 (now at the LRS) is written to a logical 1, and the RRAM cell 382 (still at the HRS) is written to a logical 0.
Similarly, in some alternative embodiments, the formation circuit 110 may include two voltage source circuits (not shown) coupled to the RRAM cells 362 and 382, respectively, and further include two current limiters coupled between the respective voltage source circuit and RRAM cell. Functionalities of such voltage source circuits and current limiters are substantially similar to the voltage source circuit and current limiter coupled to the bit 300 so that discussions of operations of the voltage source circuits and current limiters coupled to the bit 360 are omitted.
In some embodiments, each of the plurality of the bits across the array 102 may follow the above-described operations to be written to a logical 1 and a logical 0. To recap, due to the unpredictable nature of the initial forming process, one cannot predict which of the RRAM cells in each bit will be formed first, that is, which RRAM cell will be written to a logical 1. As such, the logical 1's and the logical 0's are randomly distributed across the array 102. In accordance with some embodiments of the present disclosure, the authentication circuit 114 (
As mentioned above, the plurality of bits across the array 102 is arranged in a three-dimensional column-row configuration.
Referring now to
As shown, the array 102 further includes BL's: 401-1, 401-2, 401-3, and 401-4, WL's: 403-1, 403-2, 403-3, and 403-4, and SL's: 405-1, 405-2, 405-3, and 405-4. In some embodiments, the BL's 401-1, 401-2, 401-3, and 401-4 are arranged horizontally along the Y direction (e.g., columns), the WL's 403-1, 403-2, 403-3, and 403-4, and SL's 405-1, 405-2, 405-3, and 405-4 are respectively arranged horizontally along the X direction (e.g., rows). Moreover, each BL intersects with plural pairs of WL's and SL's, and at each intersection, one RRAM cell is vertically (i.e., along the Z direction) disposed between the common BL and respective SL with the respective WL being disposed between the SL and the common BL. For example, the RRAM cells 402-1, 402-2, 410-1, and 410-2 are disposed between the intersection of the BL 401-1 and the pairs of WL and SL (403-1 and 405-1), (403-2 and 405-2), (403-3 and 405-3), and (403-4 and 405-4), respectively. Further, the WL 403-1 is disposed between the BL 401-1 and 405-1; the WL 403-2 is disposed between the BL 401-1 and 405-2; the WL 403-3 is disposed between the BL 401-1 and 405-3; the WL 403-4 is disposed between the BL 401-1 and 405-4.
However, it is understood that the illustrated embodiments of
In some embodiments, when the bits of the array 102 arranged as the embodiment of
The method 500 starts with operation 502 in which an RRAM array wherein each bit of the RRAM array includes two RRAM cells, in accordance with various embodiments. Such an RRAM array may be illustrated as one of the circuit diagrams with respect to
The method 500 continues to operation 504 in which each bit of the RRAM array is applied with one or more constant currents, in accordance with various embodiments. In the illustrated embodiment of
The method 500 continues to operation 506 in which an I/O circuit coupled to the RRAM array determines which RRAM cell in each bit is formed, in accordance with various embodiments. In some embodiments, a first voltage (about 1˜2V) may be applied, by a formation circuit (e.g., 110), to both of the RRAM cells in each bit, and then the I/O circuit (e.g., 112) discriminates the states (i.e., HRS and LRS) of the two RRAM cells by monitoring either the currents flowing through the RRAM cells or voltages present on the respectively coupled BL's or SL's. In some embodiments, during the operation 506, the determined states of the RRAM cells in each bit may be provided to the authentication circuit 114 for designation of respective logical states (e.g., a logical 1 or a logical 0).
The method 500 continues to operation 508 in which a second voltage, substantially higher than the first voltage (the operation 506), is applied to the formed RRAM cell of each bit, in accordance with various embodiments. That is, the second voltage is applied to the RRAM cell of each bit that has transitioned from the HRS to the LRS. In some embodiments, the second voltage is about 3 V. Such a substantially higher voltage applied to the formed RRAM cell may advantageously provide better data retention to the formed RRAM cell. In some embodiments, after the second voltage is applied to the formed RRAM cell of each bit, authentication circuit 114 may designate the formed RRAM cell a logical 1 and the unformed RRAM cell a logical 0 (or vice versa).
The method 500 continues to operation 510 in which the authentication circuit 114 uses either logical 1's or logical 0's across the RRAM array to generate a PUF signature, in accordance with various embodiments. As described above, since the logical 1's and 0's are randomly distributed across the RRAM array, the PUF signature generated based on such randomly distributed logical 1's or 0's may be more reliable.
In an embodiment, a memory device is disclosed. The memory device includes a memory array comprising a plurality of bits, wherein each bit comprises two memory cells each having a variable resistance; a formation circuit, coupled to the plurality of bits, and configured to cause a first memory cell of a first bit to be at a low resistance state; and an authentication circuit, coupled to the plurality of bits, configured to designate a logical state to the first memory cell of the first bit and use the logical state of the first memory cell of the first bit to generate a physically unclonable function (PUF) signature.
In another embodiment, a memory device includes a memory array comprising a plurality of bits, wherein each bit comprises two resistive random access memory (RRAM) cells that each having a variable resistance; a formation circuit, coupled to the plurality of bits, and configured to cause a first RRAM cell of a first bit to be at a low resistance state; and an authentication circuit, coupled to the plurality of bits, configured to designate a logical state to the first RRAM cell of the first bit and use the logical states of the first RRAM cells of the first bit to generate a physically unclonable function (PUF) signature.
Yet in another embodiment, a memory device includes a memory array comprising a plurality of bits, wherein each bit comprises two memory cells each having a variable resistance; a formation circuit, coupled to the plurality of bits, and configured to cause first and second memory cells of a first bit to transition to a low resistance state and remain at a high resistance state, respectively; and an authentication circuit, coupled to the plurality of bits, configured to designate first and second logical states to the first and second memory cells, respectively, of the first bit, and use either the first or the second logical states of the first bit to generate a physically unclonable function (PUF) signature.
The foregoing outlines features of several embodiments so that those ordinary skilled in the art may better understand the aspects of the present disclosure. Those skilled in the art should appreciate that they may readily use the present disclosure as a basis for designing or modifying other processes and structures for carrying out the same purposes and/or achieving the same advantages of the embodiments introduced herein. Those skilled in the art should also realize that such equivalent constructions do not depart from the spirit and scope of the present disclosure, and that they may make various changes, substitutions, and alterations herein without departing from the spirit and scope of the present disclosure.
Claims
1. A memory device, comprising:
- a memory array comprising a plurality of bits, wherein each bit comprises two memory cells each having a variable resistance;
- a formation circuit, coupled to the plurality of bits, and configured to cause a first memory cell and a second memory cell of a first bit to be at a low resistance state and at a high resistance state, respectively; and
- an authentication circuit, coupled to the plurality of bits, configured to designate a logical state to the first memory cell of the first bit and use the logical state of the first memory cell of the first bit to generate a physically unclonable function (PUF) signature.
2. The memory device of claim 1, wherein each bit includes two resistive random access memory (PRAM) cells.
3. The memory device of claim 1, wherein the formation circuit is further configured to cause the second memory cell of the first bit to remain at the high resistance state.
4. The memory device of claim 1, further comprising:
- an input/output (I/O) circuit, coupled to the plurality of bits, and configured to determine whether the first memory cell is at the low resistance state.
5. The memory device of claim 4, wherein the formation circuit further comprises:
- a current source circuit that is coupled to the two memory cells of the first bit; and
- a voltage source circuit that is coupled to the two memory cells of the first bit.
6. The memory device of claim 5, wherein the current source circuit is configured to provide a constant current to the two memory cells of the first bit and cause the constant current to flow through the first memory cell of the first bit so as to cause the first memory cell of the first bit to be at the low resistance state.
7. The memory device of claim 6, wherein the voltage source circuit is configured to provide a first voltage to the two memory cells of the first bit, and wherein the I/O circuit determines whether the first memory cell is at the low resistance state.
8. The memory device of claim 7, wherein the voltage source circuit is configured to provide a second voltage that is substantially higher than the first voltage to the first memory cell.
9. The memory device of claim 1, wherein the formation circuit further comprises:
- first and second current source circuits that are each coupled to two memory cells of a second bit, respectively.
10. The memory device of claim 9, wherein the first and second current source circuits are configured to provide a first constant current and a second constant current to the two memory cells of the second bit, respectively, and wherein the first current source causes the first constant current to flow through the first memory cell of the second bit so as to cause the first memory cell of the second bit to be at the low resistance state.
11. A memory device, comprising:
- a memory array comprising a plurality of bits, wherein each bit comprises two resistive random access memory (RRAM) cells that each having a variable resistance;
- a formation circuit, coupled to the plurality of bits, and configured to cause a first RRAM cell of a first bit to be at a low resistance state and a second RRAM cell of the first bit to be at a high resistance state; and
- an authentication circuit, coupled to the plurality of bits, configured to designate a logical state to the first RRAM cell of the first bit and use the logical states of the first RRAM cells of the first bit to generate a physically unclonable function (PUF) signature.
12. The memory device of claim 11, wherein the formation circuit is further configured to cause the second RRAM cell of the first bit to remain at the high resistance state.
13. The memory device of claim 11, further comprising:
- an input/output (I/O) circuit, coupled to the plurality of bits, and configured to determine whether the first RRAM cell is at the low resistance state.
14. The memory device of claim 13, wherein the formation circuit further comprises:
- a current source circuit that is coupled to the two RRAM cells of the first bit; and
- a voltage source circuit that is coupled to the two RRAM cells of the first bit.
15. The memory device of claim 14, wherein the current source circuit is configured to provide a constant current to the two RRAM cells of the first bit and cause the constant current to flow through the first RRAM cell of the first bit so as to cause the first RRAM cell of the first bit to be at the low resistance state.
16. The memory device of claim 15, wherein the voltage source circuit is configured to provide a first voltage to the two RRAM cells of the first bit, and wherein the I/O circuit determines whether the first RRAM cell is at the low resistance state.
17. The memory device of claim 16, wherein the voltage source circuit is configured to provide a second voltage that is substantially higher than the first voltage to the first RRAM cell.
18. A memory device, comprising:
- a memory array comprising a plurality of bits, wherein each bit comprises two memory cells each having a variable resistance;
- a formation circuit, coupled to the plurality of bits, and configured to cause first and second memory cells of a first bit to transition to a low resistance state and remain at a high resistance state, respectively; and
- an authentication circuit, coupled to the plurality of bits, configured to designate first and second logical states to the first and second memory cells, respectively, of the first bit, and use either the first or the second logical states of the first bit to generate a physically unclonable function (PUF) signature.
19. The memory device of claim 18, wherein each bit includes two resistive random access memory (RRAM) cells.
20. The memory device of claim 18, further comprising:
- an input/output (I/O) circuit, coupled to the plurality of bits, and configured to determine whether the first memory cell is at the low resistance state.
Type: Application
Filed: Feb 16, 2017
Publication Date: May 31, 2018
Inventors: Yu-Der CHIH (Hsin-Chu City), Shih-Lien Linus Lu (Hsinchu), Yu-Der Chih (Hsinchu City)
Application Number: 15/435,082