|Publication number||US6772307 B1|
|Application number||US 09/879,333|
|Publication date||Aug 3, 2004|
|Filing date||Jun 11, 2001|
|Priority date||Jun 11, 2001|
|Publication number||09879333, 879333, US 6772307 B1, US 6772307B1, US-B1-6772307, US6772307 B1, US6772307B1|
|Inventors||Tom Long Nguyen, Mallik Bulusu|
|Original Assignee||Intel Corporation|
|Export Citation||BiBTeX, EndNote, RefMan|
|Patent Citations (38), Non-Patent Citations (4), Referenced by (6), Classifications (14), Legal Events (6)|
|External Links: USPTO, USPTO Assignment, Espacenet|
This invention relates to the field of memory devices and, more specifically, to protection of data stored within memory devices.
A motherboard is the main circuit board inside a computer system that connects directly or indirectly to every part of the computer system. The motherboard contains processors, memories, control chipsets and various buses used to link the motherboard components with various hardware devices such as a display, a drive, a keyboard, etc.
In order for a computer system to function, the computer's operating system needs to be configured to communicate with the computer system's devices. A Basic Input Output System (BIOS) is used for this configuration. The BIOS resides in a non-volatile memory device, such as a flash memory, hereinafter referred to as a BIOS memory. The BIOS includes low-level code, referred to as boot code, that enables communication between the computer's operating system and hardware devices. The boot code provides the initial instructions for power on self-test (POST) and booting system files. When a computer system is powered on, the boot code is fetched from BIOS memory and placed into a random access memory (RAM) for execution (although some boot code may be executed directly from the BIOS memory). The boot code is executed, for example, to load the operating system into the system's processor.
The BIOS memory is typically tested by memory manufacturers to verify compliance with specifications before shipment to a motherboard manufacturer. The motherboard manufacturer, such as an original equipment manufacturer (OEM), then programs the code into the BIOS memory. The BIOS memory can then be configured for its regular operation. As such, a BIOS memory may have different interfaces for each of these modes, for example, a programming mode and an operation mode. The particular mode is selected prior to power-up or before return from reset. The programming mode may be used as a programming interface for OEMs to use during motherboard manufacturing or component pre-programming. The programming interface is generally not intended for use during regular computer operations. The operation interface is used to operate with the control chipsets during platform operations.
The use of different interfaces allows for security and manageability features, while also allowing for the component to be tested and programmed quickly with automated test equipment (ATE) and memory programmers in the OEM's manufacturing flow. One of the security features is the ability to protect certain sections, or blocks, of the BIOS memory from accidental or intentional corruption during such a process. A BIOS memory may come in different sizes, for example, 8 Megabits (Mb, also referred to as 1 Megabyte (MB)) and 4 Mb (½ MB). Each BIOS memory has a set of contiguous blocks. Typically block granularity may be 65536 bytes (64 KB). As such, on an 8 Mb BOIS BIOS memory, there may be 16 blocks as illustrated in FIG. 1.
Prior BIOS memories use the top most block (e.g., block 15 of an 8 Mb) to store critical code, such as the boot code. Access to the boot code stored in the top most block may be controlled by a top block lock (TBL) input. The TBL input is configured to receive a signal that when held low (active) prevents program or block erase operations in the top most block. BIOS memories may also include a write protect (WP) input that serves the same function as TBL for the remaining blocks: all blocks except the top block. The WP input operates independently from the TBL input and does not affect the lock status of the top block.
Currently, the TBL input of a BIOS memory provides protection only on the top most (e.g., 64 Kbyte size) block of the BIOS. Due to boot code sizes growing greater than block granularity, the top block lock feature of prior BIOS memories may not meet newer security requirements.
The present invention is illustrated by way of example and not intended to be limited by the figures of the accompanying drawings.
FIG. 1 illustrates a prior art single, top block locking scheme.
FIG. 2A illustrates one embodiment of a computer system containing a memory component having multiple block locking.
FIG. 2B illustrates one embodiment of a boot flow for a computer system.
FIG. 3A illustrates one embodiment of a BIOS memory having a multiple block lock architecture.
FIG. 3B illustrates a block protection configuration for a 16 block BIOS memory.
FIG. 4 illustrates one embodiment of a BIOS memory having two interfaces.
FIG. 5 illustrates one embodiment of setting a protection configuration.
FIG. 6 illustrates an alternative embodiment of setting a protection configuration.
In the following description, numerous specific details are set forth such as examples of specific, components, circuits, processes, etc. in order to provide a thorough understanding of the present invention. It will be apparent, however, to one skilled in the art that these specific details need not be employed to practice the present invention. In other instances, well known components or methods have not been described in detail in order to avoid unnecessarily obscuring the present invention.
FIG. 2A illustrates one embodiment of a computer system containing a memory component having multiple block locking. Computer system 200 may be, for example, a personal computer system. Computer system 200 may include one or more processors (e.g., processor 260), a memory controller 265, an input/output (I/O) controller 270, and one or more BIOS memories (e.g., BIOS memory 250). In one embodiment, processor 260, memory controller 265, I/O controller 270 and BIOS memory 250 may reside on a motherboard 261. In an alternative embodiment, one or more of processor 260, memory controller 265, I/O controller 270 and BIOS memory 250 may reside on other types of component boards, for example, a daughter board.
The memory controller 265 controls operations between processor 260 and a memory device 264, for example, a random access memory (RAM). The I/O controller 270 may control operations between processor 260 and one or more input/output (I/O) devices 275, for examples, a keyboard and a mouse over a low pin count (LPC) bus 271. The I/O controller 270 may also control operations between processor 260 and peripheral devices, for example, a drive 274. Additional buses may also be coupled to I/O controller 270 for controlling other devices, for examples, a peripheral component interconnect (PCI) bus 272 and a universal serial bus (USB) 273. In one embodiment, the memory controller 265 and the I/O controller 270 may be integrated into a single component.
BIOS memory 250 may be coupled to I/O controller 270 via bus 266. BIOS memory 250 is a non-volatile programmable memory, for example, a flash memory that retains the contents of data stored within it even after power is no longer supplied. Alternatively, BIOS memory 250 may be other types of programmable memory devices, for examples, a programmable read only memory (PROM) and an erasable programmable read only memory (EPROM). In one embodiment, BIOS memory 250 may be similar to an 82802 firmware hub (FWH) manufactured by Intel Corp., of Santa Clara, Calif. that is modified to provide locking of multiple boot blocks as discussed herein. Computer system 200 may also include other BIOS memories in addition to BIOS memory 250.
When the computer system 200 powers on, boot code is fetched from BIOS memory 250 and placed, in whole or in part, into memory device 264. As such, boot code may be executed either from memory device 264 or directly from BIOS memory 250. System booting is known in the art; accordingly, a detailed discussion is not provided.
Although illustrated with a conventional personal computer system, BIOS memory 250 is not so limited in use. In an alternative embodiment, BIOS memory 250 may be used in other types of data processing systems, for examples, personal digital assistants (PDA), laptop computers, workstations, wireless phones, network hubs and switches.
BIOS memory 250 may be partitioned into multiple blocks and configured to enable two or more of the multiple blocks to operate as boot blocks storing boot code. Boot code may include code that provides the initial instructions for power on self-test and booting of computer system 200. The boot code may also include recovery code to restore computer system 200 from firmware corruption. In one embodiment, for example, a boot block group may include processor abstraction layer (PAL) code, system abstraction layer (SAL) code and recovery code. The PAL includes code for determining whether one or more processors in computer system 200 are ready for operation. The SAL includes code for determining whether to initiate a recovery. The recovery code includes code for interpreting the file systems and drivers for accessing hardware devices. The different codes may exist as separate components in the boot block group and may be written in different languages. In one embodiment, for example, SAL may be written in assembly language and the recovery code may be written in C. In an alternative embodiment, the boot code may only include recovery code without PAL and SAL code. In yet another embodiment, the boot code may only include the minimum code necessary to initialize computer system 200 such as routines for power on self tests (POST) and/or routines to enable certain low level interactions with devices such as a display.
The combined size of each of the boot code components may be greater than the size of a single boot block. For example, a block size may be 64 KB while the combined size of all the boot code may be 320 KB. A 320 KB boot code cannot fit within a single 64 KB boot block. In such a situation, a multiple block boot group may be used to store the boot code, as discussed below in relation to FIG. 3A.
FIG. 2B illustrates one embodiment of a boot flow for a computer system. After power on, step 289, of computer system 200, step 290, a decision on whether to enter a recovery mode is made. In one embodiment, a processor abstraction layer (PAL) may first be used to determine if one or more processors in computer system 200 are ready for operation. PAL code may be retrieved from BIOS memory 250 and executed, step 290. The PAL detects any errors with the processors and communicates this information with the SAL. The SAL uses the processor error information to make a recovery decision. A recovery may be required, for example, if firmware within a processor is determined to be corrupted. In one embodiment, a recovery may be forced, for example, through the use of a manual jumper. If recovery is not determined to be necessary, then computer system 200 may proceed with a normal boot flow, step 292.
If a recovery is deemed necessary, then the SAL may initialize the memory 264 with the recovery code, step 293. The recovery code includes code for interpreting the file systems and drivers for accessing hardware devices; such as removable media (e.g., drive 274). A media determination is performed using the recovery code, step 294, and then a recovery is performed, step 295. If the size of the abstraction layers and the recovery code is greater than a single block size, multiple blocks may be used to store the boot code. In this manner, computer system architectures may use a boot block group to store abstraction layer code and/or recovery code in excess of single block sizes. For example, BIOS memory 250 may have a block size of 64K. If, for example, the PAL code size is 40K, the SAL code size is 97K, and the recovery code size is 120K (for a total of 257K boot code), then five blocks may be used to store the boot code.
FIG. 3A illustrates one embodiment of a BIOS memory having a multiple block lock architecture. In one embodiment, for example, BIOS memory 250 may be 8 Mb BOIS memory having 16 blocks (blocks 300-315), with each of blocks 300-315 being 64 KB in size. The methods discussed herein are not limited to only 64 KB block, 8 Mb BIOS memories and may be applied to BIOS memories having other numbers of blocks and block sizes. Two or more of blocks 300-315 may be used to store boot code based on the boot code size. For example, if the boot code size is 320 KB, then the boot code may be stored in, and retrieved from, a boot blocks group 325 (e.g., blocks 315-311). The remaining blocks 330 may be used to store, for examples, BIOS configuration logic, code for peripheral enumeration and initializations, option ROM execution, establishing interrupt tables, etc. The boot blocks may be transparent to the other components of computer system 200 such that the components consider the multiple block span to operate similar to a top block of prior architectures. In an alternative embodiment, the blocks that make up boot blocks group 325 may be non-contiguous rather than the contiguous structure illustrated in the FIG. 3A. Various multi-block configurations may be selected using two or more inputs (e.g., a block lock input and write protect input), as illustrated in FIG. 3B.
FIG. 3B illustrates a block protection configuration for a 16 block BIOS memory. For example, a first configuration 331 may be a default configuration where the top most block (block 15) is the boot block and blocks 0 through 14 are free for other data storage. For another example, in a fifth block configuration 333, blocks 11 through 15 are designated as boot blocks. The multi block group 325 for a particular configuration may be accessed through the use of one or more inputs of memory device 350, as illustrated below in FIG. 4.
FIG. 4 illustrates one embodiment of a BIOS memory having two interfaces. Although illustrated with I/Os 401-432, BIOS memory 250 may have more or less than 32 I/Os. In one embodiment, BIOS memory 250 includes two or more interfaces, for example, a programming interface 470 and an operation interface 460. In an alternative embodiment, BIOS memory 250 may have less or more than two interfaces. For example, BIOS memory 250 may have a testing interface for use at wafer level testing. As such, an “input” as used herein may be accessed through a packaged pin or directly through a die pad.
Where two interfaces are used, a particular interface may be selected by toggling a voltage state on an interface configuration (IC) input 429. While one interface is in use, the other component interfaces are disabled. As such, IC input 429 provides control between interfaces 470 and 460. In one embodiment, for example, IC input 429 may be held low or floated to enable the operation interface 460 and held high to enable programming interface 460. The particular interface mode is selected prior to power-up or before a return from reset, for example, when a reset (RST) input 402 is transitioned from a low state to a high state. When RST input 402 is driven low, write operations to BIOS memory 250 are inhibited to provide data protection during power transitions, resets internal automation, and may tri-state certain inputs. When RST input 402 is driven high, normal operations are enabled. Alternatively, other voltage configurations on IC input 429 and RST input 402 may be used to select between interfaces 410 and 460 and reset BIOS memory 250, respectively.
BIOS memory 250 also includes a block lock (BL) input 408 and a write protect (WP) input 407. The BL input 408 may be used to prevent program or block erase operations in multiple boot blocks that are selected based on the state applied to BL input 408. For example, when BL input 408 is driven to a low state, the particular number of selected boot blocks is protected when RST is driven low. In one embodiment, for example, the state of the BL input 408 may be controlled via a jumper. WP input 407 serves the same function as BL input 408 for the remaining blocks. In one embodiment, the state of the WP input 407 may be controller via a pull-up resistor by default. In embodiments where the protection state is sampled at the beginning of an operation, the BL and WP inputs 408 and 407, respectively, are set to the desired protection configuration prior to starting a program or erase operation.
The number of boot blocks selected for locking (the protection configuration), may be set in either of the interfaces: programming interface 470 or operation interface 460. The particular protection configuration may be set using a plurality of protection configuration inputs of BIOS memory 250.
FIG. 5 illustrates one embodiment of setting a protection configuration. In one embodiment, for example, the protection configuration inputs may be designed into reserved for future use (RFU) inputs 418 to 421 of a BIOS memory device. RFU inputs may have no function on older generation of the BIOS memory device and are reserved for functions on future generations of a product. In alternative embodiments, other inputs of BIOS memory 250 may be used to set the protection configuration. The operation mode 460 may be selected, for example, by driving IC input 429 low and then protection inputs 418 to 421 may be read (e.g., when RST input 402 is driven low) to determine the protection configuration.
By applying different voltage states to the protection configuration inputs 418 to 421, one of protection configurations 331 to 345 may be selected. For example, if the voltage states 0, 1, 0, 0 are applied to protection configuration inputs 421, 420, 419, and 418, respectively, then “configuration 5” 335, corresponding to locking blocks 11 through 15 of FIG. 3B, is selected. In an alternative embodiment, other voltage states and combinations may be used to select each protection configuration.
Alternatively, the particular protection configuration may set using inputs in programming mode 470, as illustrated in FIG. 6. A different set of inputs may be used in programming mode 470 than operation mode 460 to select the particular protection configuration. For example, where inputs 418-421 are already designated for a use in programming interface 470, inputs 413, 414, 415, and 417 may be used to select the particular protection configuration. Inputs 413, 414, 415, and 417 may be data inputs used to transfer firmware into BIOS memory 250. In alternative embodiments, other inputs of a BIOS memory may be used to set the protection configuration. The programming interface 470 may be selected, for example, by driving IC input 429 high. Protection inputs 413, 414, 415, and 417 are then read (e.g., when RST input 402 is driven low) to determine the protection configuration.
By applying different voltage states to the protection configuration inputs 413, 414, 415, and 417, one of protection configurations 331 to 345 may be selected. For example, if the voltage states 0, 1, 0, 0 are applied to protection configuration inputs 417, 415, 414, and 413, respectively, then “configuration 5” 335, corresponding to locking blocks 11 through 15 of FIG. 3B, is selected.
In one embodiment, BIOS memory 250 may include block-locking registers (not shown) coupled to corresponding memory blocks. In such an embodiment, the status of BL and WP may not affect the status of block-locking registers. BL and WL inputs 408 and 407 when active, write-protect the appropriate blocks regardless of the associated block locking registers. For example, when protection configuration 335 is selected, writing to blocks 11-15 of BIOS memory 250 is prevented, regardless of the state of write block bits in the block locking registers. In such a case, clearing the write-protect bit in a register will have no functional effect, even though the register may indicate that the block is no longer locked.
In the foregoing specification, the invention has been described with reference to specific exemplary embodiments thereof. It will, however, be evident that various modifications and changes may be made thereto without departing from the broader spirit and scope of the invention as set forth in the appended claims. The specification and drawings are, accordingly, to be regarding in an illustrative sense rather than a restrictive sense.
|Cited Patent||Filing date||Publication date||Applicant||Title|
|US5065364||Sep 15, 1989||Nov 12, 1991||Intel Corporation||Apparatus for providing block erasing in a flash EPROM|
|US5126808||Oct 23, 1989||Jun 30, 1992||Advanced Micro Devices, Inc.||Flash EEPROM array with paged erase architecture|
|US5197034||Oct 9, 1991||Mar 23, 1993||Intel Corporation||Floating gate non-volatile memory with deep power down and write lock-out|
|US5210845||Nov 28, 1990||May 11, 1993||Intel Corporation||Controller for two-way set associative cache|
|US5293424||Oct 14, 1992||Mar 8, 1994||Bull Hn Information Systems Inc.||Secure memory card|
|US5297148||Oct 20, 1992||Mar 22, 1994||Sundisk Corporation||Flash eeprom system|
|US5369754||Mar 30, 1994||Nov 29, 1994||Intel Corporation||Block specific status information in a memory device|
|US5438546||Jun 2, 1994||Aug 1, 1995||Intel Corporation||Programmable redundancy scheme suitable for single-bit state and multibit state nonvolatile memories|
|US5442704||Jan 14, 1994||Aug 15, 1995||Bull Nh Information Systems Inc.||Secure memory card with programmed controlled security access control|
|US5509134||Jun 30, 1993||Apr 16, 1996||Intel Corporation||Method and apparatus for execution of operations in a flash memory array|
|US5513136||Dec 19, 1994||Apr 30, 1996||Intel Corporation||Nonvolatile memory with blocks and circuitry for selectively protecting the blocks for memory operations|
|US5592641||Jun 30, 1993||Jan 7, 1997||Intel Corporation||Method and device for selectively locking write access to blocks in a memory array using write protect inputs and block enabled status|
|US5673222||Jun 20, 1996||Sep 30, 1997||Sharp Kabushiki Kaisha||Nonvolatile semiconductor memory device|
|US5704035||Jul 3, 1996||Dec 30, 1997||Intel Corporation||Computer method/apparatus for performing a basic input/output system (BIOS) power on test (POST) that uses three data patterns and variable granularity|
|US5822251||Sep 29, 1997||Oct 13, 1998||Bit Microsystems, Inc.||Expandable flash-memory mass-storage using shared buddy lines and intermediate flash-bus between device-specific buffers and flash-intelligent DMA controllers|
|US5844986||Sep 30, 1996||Dec 1, 1998||Intel Corporation||Secure BIOS|
|US5886582||Aug 7, 1996||Mar 23, 1999||Cypress Semiconductor Corp.||Enabling clock signals with a phase locked loop (PLL) lock detect circuit|
|US5890191||May 10, 1996||Mar 30, 1999||Motorola, Inc.||Method and apparatus for providing erasing and programming protection for electrically erasable programmable read only memory|
|US5954818||Feb 3, 1997||Sep 21, 1999||Intel Corporation||Method of programming, erasing, and reading block lock-bits and a master lock-bit in a flash memory device|
|US5974500||Nov 14, 1997||Oct 26, 1999||Atmel Corporation||Memory device having programmable access protection and method of operating the same|
|US5991197||Mar 24, 1998||Nov 23, 1999||Mitsubishi Denki Kabushiki Kaisha||Semiconductor memory device having data protection feature|
|US6009495||Nov 8, 1995||Dec 28, 1999||Packard Bell Nec||Protected address range in an electrically erasable programmable read only memory|
|US6026016 *||May 11, 1998||Feb 15, 2000||Intel Corporation||Methods and apparatus for hardware block locking in a nonvolatile memory|
|US6031757||Nov 22, 1996||Feb 29, 2000||Macronix International Co., Ltd.||Write protected, non-volatile memory device with user programmable sector lock capability|
|US6058048||Aug 11, 1999||May 2, 2000||Samsung Electronics, Co., Ltd.||Flash memory device used as a boot-up memory in a computer system|
|US6081664||Sep 30, 1996||Jun 27, 2000||Intel Corporation||Method for monitoring a BIOS|
|US6154819||May 11, 1998||Nov 28, 2000||Intel Corporation||Apparatus and method using volatile lock and lock-down registers and for protecting memory blocks|
|US6154837||Jul 21, 1998||Nov 28, 2000||Mitsubishi Denki Kabushiki Kaisha||Microcomputer enabling an erase/write program of a flash memory to interrupt by transferring interrupt vectors from a boot ROM to a RAM|
|US6182187||Apr 7, 1993||Jan 30, 2001||Compaq Computer Corporation||System ROM including a flash EPROM and a ROM for storing primary boot code replacing a block flash EPROM|
|US6205548||Jul 31, 1998||Mar 20, 2001||Intel Corporation||Methods and apparatus for updating a nonvolatile memory|
|US6209069||May 11, 1998||Mar 27, 2001||Intel Corporation||Method and apparatus using volatile lock architecture for individual block locking on flash memory|
|US6240519 *||Apr 30, 1998||May 29, 2001||Compaq Computer Corporation||Computer method and apparatus to prompt for administrative password to flash a corrupted non-volatile memory|
|US6330635 *||Apr 16, 1999||Dec 11, 2001||Intel Corporation||Multiple user interfaces for an integrated flash device|
|US6377486 *||Jun 13, 2000||Apr 23, 2002||Samsung Electronics Co., Ltd.||Block architecture option circuit for nonvolatile semiconductor memory devices|
|US6446179 *||Dec 26, 2000||Sep 3, 2002||Intel Corporation||Computing system with volatile lock architecture for individual block locking on flash memory|
|US6591328 *||Jul 20, 1999||Jul 8, 2003||Sony Corporation||Non-volatile memory storing address control table data formed of logical addresses and physical addresses|
|US6633964 *||Mar 30, 2001||Oct 14, 2003||Intel Corporation||Method and system using a virtual lock for boot block flash|
|US20020144050 *||Mar 30, 2001||Oct 3, 2002||Vincent Zimmer||Method and system using a virtual lock for boot block flash|
|1||"Cellular Carriers Try New Tricks to Beat Bandits," G. Naik, Wall Street Journal, p. B1, Mar. 16, 1995.|
|2||"How Cellular Pirates Have Thwarted Efforts To Outsmart Them," by G. Naik, Wall Street Journal, p. B1, Mar. 16, 1995.|
|3||Intel 82802AB/82802AC Firmware Hub (FWH), Datasheet, Intel Corp., May 1999, 44 pages.|
|4||International Search Report in connection with Int'l Application PCT/US99/09462 (8 pages).|
|Citing Patent||Filing date||Publication date||Applicant||Title|
|US6826097 *||Jun 30, 2003||Nov 30, 2004||Hynix Semiconductor Inc.||Nonvolatile memory device including write protected region|
|US8032727 *||Oct 4, 2011||Broadcom Corporation||Method and system for locking OTP memory bits after programming|
|US8671242 *||Jan 3, 2012||Mar 11, 2014||Micron Technology, Inc.||Boot block features in synchronous serial interface NAND|
|US20040120187 *||Jun 30, 2003||Jun 24, 2004||Kang Hee Bok||Nonvolatile memory device including write protected region|
|US20060020746 *||Dec 22, 2004||Jan 26, 2006||Brownhill Robert J||Method and system for locking OTP memory bits after programming|
|US20120151129 *||Jun 14, 2012||Micron Technology, Inc.||Boot block features in synchronous serial interface nand|
|U.S. Classification||711/163, 711/103, 711/170, 711/152|
|International Classification||G11C16/22, G06F21/00, G06F13/00, G06F9/445|
|Cooperative Classification||G06F21/79, G11C16/22, G06F9/4401|
|European Classification||G06F21/79, G06F9/44A, G11C16/22|
|Jun 11, 2001||AS||Assignment|
Owner name: INTEL CORPORATION, CALIFORNIA
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:NGUYEN, TOM LONG;BULUSU, MALLIK;REEL/FRAME:011906/0163
Effective date: 20010606
|Oct 12, 2004||CC||Certificate of correction|
|Feb 1, 2008||FPAY||Fee payment|
Year of fee payment: 4
|Feb 11, 2008||REMI||Maintenance fee reminder mailed|
|Sep 21, 2011||FPAY||Fee payment|
Year of fee payment: 8
|Jan 20, 2016||FPAY||Fee payment|
Year of fee payment: 12