Secure partial reconfiguration regions

摘要

Systems and methods for partially reconfiguring a programmable IC device are presented. Processing circuitry on the programmable IC device may identify a first region of the IC device to be reconfigured from a received bitstream. The processing circuitry may read a configuration bit associated with the identified first region, and determine, based on the configuration bit, whether to permit the received bitstream to reconfigure the identified first region. The received bitstream may be authenticated using an authentication key from a first set of authentication keys. The processing circuitry may determine whether to permit the received bitstream to reconfigure the identified first region based on the authentication key and the configuration bit.

主权项

1. A method for partially reconfiguring a programmable device with a plurality of configurable regions, the method comprising:
receiving a bitstream for reconfiguring one of the plurality of configurable regions of the device; authenticating the bitstream by determining whether an authentication key used to authenticate the received bitstream is a key from a set of authentication keys stored within the device; identifying a first region of the device to be reconfigured by the received bitstream; reading a configuration bit from the identified first region; and determining whether to permit the received bitstream to reconfigure the identified first region based on the configuration bit and the determining whether the authentication key is from a first subset rather than a second subset of the set of authentication keys stored within the device, wherein the first subset of the set of authentication keys is associated with a permission that allows configuration of the first region and the second subset of the set of authentication keys is associated with a permission that does not allow configuration of the first region.