US 12,265,626 B2
Apparatuses and methods with secure configuration update
Marcel Medwed, Graz (AT); Ventzislav Nikov, Haasrode (BE); and Tobias Schneider, Graz (AT)
Assigned to NXP B.V., Eindhoven (NL)
Filed by NXP B.V., Eindhoven (NL)
Filed on Jun. 1, 2022, as Appl. No. 17/830,197.
Prior Publication US 2023/0395110 A1, Dec. 7, 2023
Int. Cl. G06F 21/57 (2013.01); G06F 8/65 (2018.01); G11C 13/00 (2006.01); G11C 16/10 (2006.01)
CPC G06F 21/575 (2013.01) [G06F 8/65 (2013.01); G06F 21/572 (2013.01); G11C 13/0059 (2013.01); G11C 16/105 (2013.01)] 20 Claims
OG exemplary drawing
 
15. A method comprising:
storing a programmed configuration in a nonvolatile memory circuit of an integrated circuit;
operating an application-specific circuit, while the nonvolatile memory circuit is in a write-protection state and while access to an external network data-access circuit is enabled, consistent with the configuration programmed into the nonvolatile memory circuit and receive an indication that an update corresponding to a change in the configuration is appropriate;
executing a reset-and-boot circuit to, in response to the indication, execute reset and boot the application-specific circuit while access to an external network data-access circuit is disabled, and in response to the indication, to cause the application-specific circuit to operate consistent with an updated configuration which overrides the configuration previously programmed into the nonvolatile memory circuit; via a recovery circuit,
causing, in response to an indication that an update is downloaded for installation, the downloaded update to be installed in the nonvolatile memory circuit while access to the external network data-access circuit is disabled, and to permit execution of the reset mode after the update is installed, and
downloading, in response to an indication that an update is not downloaded for installation, an update provided via the external network data-access circuit while the nonvolatile memory circuit is in the write-protection state, and thereby permitting execution of the reset mode after the update is downloaded.