SecurityCore Family Confidential

SD-SecurityCore-V2.8

Spec. Draft of SecurityCore

System Copy Protection

V2.8
2013. 10

 CORERIVER Semiconductor reserves the right to make corrections, modifications, enhancements, improvements, and other
changes to its products and services at any time.
 CORERIVER shall give customers at least a three month advance notice of intended discontinuation of a product or a service
through its homepage.
 Customers should obtain the latest relevant information before placing orders and should verify that such information is
current and complete.
 The CORERIVER products listed in this document are intended for usage in general electronics applications. These
CORERIVER products are neither intended nor warranted for usage in equipment that requires extraordinarily high quality
and/or reliability or a malfunction or failure of which may cause loss of human life or bodily injury.

Semiconductor Co,. Ltd. www.coreriver.com (E-mail : [email protected])

 Contents Confidential

1. What’s Copy Protection?

 Case 1 : without SecurityCore
 Case 2 : with SecurityCore
2. Production Overview
3. Features
4. Block Diagram
5. Pin Configurations
 SecurityCore4.1 / SecurityCore412
6. Pin Descriptions
7. Application Circuit
8. Strong Point of CORERIVER SECURITYCORE
9. I2C Interface
10. I2C Speed
11. How to Support Library
12. Absolute Maximum Ratings
13. DC Characteristics
14. AC Characteristics
15. Package Dimensions

Semiconductor Co,. Ltd. Spec. Draft [2]

 1. What’s Copy Protection? Confidential

 Without SecurityCore

Program
Original B/D Code
DVR

Set top Box

Easy to Copy
32bit
External Total System
MCU Run
Memory
DSP
DVD
Copied B/D
32bit MCU app.

32bit
External
MCU Run
Dead-Copy Memory
/DSP

Semiconductor Co,. Ltd. Spec. Draft [3]

 1. What’s Copy Protection? (Cont’d) Confidential

 With SecurityCore Original B/D

Identification Security Program

32bit
Core Code
MCU
/DSP

DVR
External Users Can’t
Memory Copy
Identification SecurityCore,
Set top Box OK!!! Copied B/D Run FAIL !

DVD

32bit MCU app.

Identification Fail Security
32bit Core
Dead-Copy MCU
/DSP

First Step
External
Memory
Identification
Second Step
FAIL!!!

Semiconductor Co,. Ltd. Spec. Draft [4]

 2. Product Overview Confidential

 The solution of System Copy Protection.

 Support a unique identification number

 Inventory Tracking

 Customizing Unique Algorithm

Semiconductor Co,. Ltd. Spec. Draft [5]

 3. Features Confidential

 Security
 Support Random Number Generation
 Encoder Read Protect
 Unique Algorithm : 64 bit Encryption
 Provide Unique SEED Key

 Operation
 2.7 ~ 5.5 Volts Operation
 -40 C to 85 C operating temperature
 Active current : Max. 1mA @3.3V, 2MHz
 Stop current : Max. 1uA (All Clock Off)
 Program Interface : I2C Interface
 E.S.D. protection up to 2,000V
 Package : 8-SOIC

Semiconductor Co,. Ltd. Spec. Draft [6]

4. Block Diagram Confidential

BDATA / SDA SCL

I2C
Interface
Controller Encryption Decryption
Logic Logic

Main
Controller BUS

POR

RESETB VDD VSS

Semiconductor Co,. Ltd. Spec. Draft [7]

5. Pin Configurations Confidential

 SecurityCore4.1  SecurityCore412

 I2C interface  I2C interface

N/C 1 8 VDD N/C 1 8 VDD

SC41P 8P
SC41P 8S
SC41P 8P
SC41P 8S

N/C 2 7 N/C N/C 2 7 N/C

RESETB 3 6 SCL N/C 3 6 SCL
VSS 4 5 SDA VSS 4 5 SDA

[ 8-SOIC] [ 8-SOIC]

Semiconductor Co,. Ltd. Spec. Draft [8]

 6. Pin Descriptions Confidential

 SecurityCore4.1

Symbol Direction Description Share Pins

VDD Input Voltage Power Source -

VSS Input Voltage Power Ground -

SDA Input/Output  Data I/O -

SCL Input/Output  Clock I/O -

 External Reset Input Signal (Default)
RESETB Input/Output -
 Bit Programmable
OTHERS  Data I/O -

 SecurityCore412

Symbol Direction Description Share Pins

VDD Input Voltage Power Source -

VSS Input Voltage Power Ground -

SDA Input/Output  Data I/O -

SCL Input/Output  Clock I/O -

OTHERS  Data I/O -

Semiconductor Co,. Ltd. Spec. Draft [9]

 7. Application Circuit Confidential

 I2C Interface

VDD VDD

RRSTB Main Main

8 SDA 8 SDA
5 MCU/ 5 MCU/
ScurityCore4.1
3
SCL DSP ScurityCore412
SCL DSP
6 6
4 4

VSS VSS

Semiconductor Co,. Ltd. Spec. Draft

 8. Strong Point of CORERIVER SC30&SC4X (1/2) Confidential

 SC4X stores a security algorithm as extremely small electric charges.

- + + - + -
- + - + - +
+ - - + + -
- + - + - +
- + + + - +

SC30&SC4X

 The security algorithm is not hard-wired.

 It is really impossible to find it by de-cap.

Semiconductor Co,. Ltd. Spec. Draft

 8. Strong Point of CORERIVER SC4X (2/2) Confidential

 Upgrade function in the field.

Algorithm SC30&4X

Upgrade
on
System

 CORERIVER SC4X can upgrade the security algorithm on a used system.

 To prevent the security algorithm from being cracked, you can replace it by a new one.

Semiconductor Co,. Ltd. Spec. Draft

9. I2C Interface : Bypass (1/6) Confidential

BASE BAND

CREATE VECTOR DATA ( 8 bit )

SECURITY CORE
ENCODING VECTOR ( 8 bit )

SEND ENCODING DATA ( 8bit * 12) N

INVERTING WAIT
Y
N
WAIT SEND VECTOR DATA ( 8bit * 12)

DECODING DATA END

COMPARE FAIL

SUCCESS

Semiconductor Co,. Ltd. Spec. Draft [13]

 9. I2C Interface : Byte Read/Write (2/6) Confidential

 1 Byte Read Timing : Device Address default [0x40], Clock Frequency ( < 100 KHz)

No more data to read

Start Stop
Device Address : 0100 000 Read (1) Data [Address] : 0000 1101 (0x0D)
Condition Condition

SDA

SCL 7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0
MSB LSB MSB LSB ACK
Device Address ACK Data from Slave
from Slave from Master

 1 Byte Write Timing : Device Address default [0x40], Clock Frequency ( < 100 KHz)

No more data to write

Start Stop
Device Address : 0100 000 Write (0) Data [Address] : 0100 0001 (0x41)
Condition Condition

SDA

SCL 7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0
MSB LSB MSB LSB ACK
Device Address ACK Data to Slave
from Slave from Slave

Semiconductor Co,. Ltd. Spec. Draft [14]

 9. I2C Interface : Slave & Master Timing (3/6) Confidential

 Multi (N) Bytes Read Timing with Memory Address

Start Restart
Condition Device Address : 0100 000 Write (0) Address : 0011 0101 (0x35) Condition

SSDA/MSDA

SSCL/MSCL 7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0
MSB LSB MSB LSB
Device Address ACK Memory Address ACK
from Slave from Slave

Device Address : 0100 000 Read (1) Data [Address] : 0000 1101 (0x0D)

SSDA/MSDA

SSCL/MSCL 7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0
MSB LSB ACK MSB LSB ACK
Device Address Data from Slave
from Slave from Master

No more data to read

Stop
Data [Address+N-2] : 0010 1000 (0x28) Data [Address+N-1] = 0000 1101 (0x0D) Condition

SSDA/MSDA

SSCL/MSCL 7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0
MSB LSB ACK MSB LSB ACK
Data from Slave Data from Slave
from Master from Master

: I2C Master/Slave Interrupt

Semiconductor Co,. Ltd. Spec. Draft [15]

 9. I2C Interface : Slave & Master Timing (4/6) Confidential

 Multi (N) Bytes Write Timing with Memory Address

Start
Condition Device Address : 0100 000 Write (0) Address : 0011 0101 (0x35)

SSDA/MSDA

SSCL/MSCL 7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0
MSB LSB MSB LSB
Device Address ACK Memory Address ACK
from Slave from Slave

Data [Address] : 0111 0010 (0x72) Data [Address+N-2] : 0000 1101 (0x0D)

SSDA/MSDA

SSCL/MSCL 7 6 5 4 3 2 1 0 7 6 5 4 3 2 1 0
MSB LSB MSB LSB ACK
Data to Slave ACK Data to Slave
from Slave from Slave

No more data to write

Stop
Data [Address+N-1] : 0100 0001 (0x41)
Condition

SSDA/MSDA

SSCL/MSCL 7 6 5 4 3 2 1 0
MSB LSB ACK
Data to Slave
from Slave

: I2C Master/Slave Interrupt

Semiconductor Co,. Ltd. Spec. Draft [16]

9. I2C Interface : Test signal - Version (5/6) Confidential

Device number version number

0xC0 0x80

Semiconductor Co,. Ltd. Spec. Draft [17]

 9. I2C Interface : Processing Time (6/6) Confidential

 I2C Interface - Delay

No Process Time
1 Chip Address – Data Delay 20us

2 Data – Stop Delay 20us

3 Write – Read Delay (Algorithm processing time) 100ms (Min. 50ms)

Semiconductor Co,. Ltd. Spec. Draft [18]

10. I2C Speed Confidential

Device I2C Min Speed I2C Max Speed

SecurityCore 4.1 3KHz 400KHz

SecurityCore 412 3KHz 400KHz

* Best SC41CR I2C Speed : 40KHz ~ 100KHz.

Semiconductor Co,. Ltd. Spec. Draft [19]

11. How to support Library Confidential

CORERIVER CUSTOMER

Provide BYPASS MODE example code Porting BYPASS MODE code

Make LIBRARY Send Final BYPASS MODE code

Provide Final LIBRARY Use LIBRARY FUNCTION With RANDOM DATA

END

NOTE : If CORERIVER don’t have customer’s development environment,

we can borrow customer’s IDE or visit customer’s company to make library.

Semiconductor Co,. Ltd. Spec. Draft [20]

12. Absolute Maximum Ratings Confidential

Items Conditions Ranges

Voltage on any pin relative to Ground - -0.5V to (VDD+0.5V)

Voltage in VDD relative to Ground - -0.5V to 6.5V

Output Voltage - -0.5V to (VDD+0.5V)

One I/O pin active -25mA

Output Current High
All I/O pin active -100mA

One I/O pin active +30mA

Output Current Low
All I/O pin active +150mA

Operating Temperature - -40 oC to 85 oC

Storage Temperature - -65 oC to +150 oC

Soldering Temperature - Peak 260 oC for 10 seconds

Semiconductor Co,. Ltd. Spec. Draft [21]

 13. DC Characteristics Confidential

* TA = = -40 oC ~ +85 oC, VDD = 2.7V ~ 5.5V unless otherwise specified.

Value
Parameter Symbol Pin Conditions Unit
Min. Typ. Max.

Input Low Voltage VIL1 BDATA VDD = 2.4V~5.5V -0.5 - 0.2VDD-0.1 V

Input high Voltage VIH1 BDATA VDD = 2.4V~5.5V 0.2VDD+1.0 - VDD+0.5 V

IOL = 20mA @VDD=5V

VOL1 BDATA - - 0.3VDD
(IOL = 5mA @VDD=2.6V)
Output Low Voltage V
IOL = 10mA @VDD=5V
VOL2 RESETB - - 0.3VDD
(IOL = 2.5mA @VDD=2.6V)

IOH = -15mA @VDD=5V

VOH BDATA 0.7VDD - - V
(IOH= -2.5mA @VDD=2.6V)
Output High Voltage
BDATA IOH= -40uA @VDD=5V
VOHP1 0.7VDD - - V
(pull-up resistor only) (IOH = -20uA @VDD=2.6V)

Input Leakage
IIL All pins VIN = VIH or VIL - - ±1 A
Current

Pin Capacitance CIO All VDD = 5V - 10 - pF

Semiconductor Co,. Ltd. Spec. Draft [22]

 14. AC Characteristics Confidential

* TA = -40 oC ~ +85 oC unless otherwise specified.

Value
Parameter Symbol Pin Conditions Unit
Min. Typ. Max.

VDD = 5V ± 10% 1 - 24
Operating Frequency Fsys XTAL2 MHz
VDD = 3V ± 10% 1 - 12

External Interrupt VDD = 5V ± 10% 4 - -

tINT External Interrupt FOSC
Input Width VDD = 3V ± 10% 4 - -

tINT

0.8VDD 0.8VDD
External Interrupt Pin 0.2VDD 0.2VDD

tINT

Semiconductor Co,. Ltd. Spec. Draft [23]

15. Package Dimensions : 8-SOIC Confidential

[8-SOIC]
HD Dimension in Inches Dimension in mm
Symbol
Min. Nom. Max. Min. Nom. Max.
D A 0.093 0.099 0.104 2.35 2.45 2.65
8 5 A1 0.004 0.008 0.012 0.10 0.20 0.30
b 0.014 0.016 0.019 0.35 0.42 0.49
D - 0.150 - - 3.81 -
8 pins E HE E 0.150 0.153 0.157 3.80 3.90 4.00
HD 0.189 0.193 0.197 4.80 4.90 5.00
a HE 0.234 0.239 0.244 5.95 6.07 6.20
1 4 L 0.038 0.043 0.048 0.97 1.08 1.2
L1 0.022 0.027 0.032 0.58 0.70 0.82
L1 a 0̊ ̊ - 8 ̊̊ 0 ̊̊ - 8 ̊̊
e 0.050 BSC 1.27 BSC
m L m 0.010 0.015 0.020 0.25 0.37 0.50

Notes:
A 1. Dimension D & E include mold mismatch and are determined at the mold
parting line.
Seating Plane A1 2. General appearance spec. should be based on final visual inspection spec.
e

Semiconductor Co,. Ltd. Spec. Draft [24]