TRUE RANDOM NUMBER GENERATOR (TRNG) CIRCUIT USING A DIFFUSIVE MEMRISTOR
20210382696 · 2021-12-09
Inventors
Cpc classification
H10N70/826
ELECTRICITY
H10N70/245
ELECTRICITY
H04L9/12
ELECTRICITY
G11C13/0011
PHYSICS
H03K3/84
ELECTRICITY
G06F7/588
PHYSICS
H03K19/20
ELECTRICITY
G11C2213/56
PHYSICS
International classification
Abstract
A true random number generator device based on a diffusive memristor is disclosed. The random number generator device includes a diffusive memristor driven by a pulse generator circuit. The diffusive memristor produces a stochastically switched output signal. A comparator circuit receives the stochastically switched output signal from the diffusive memristor and generates an output signal having a random pulse width. An AND gate logic circuit is driven by a clock signal and the output signal from the comparator circuit. The AND gate logic circuit produces a combined output signal. A counter circuit receives the combined output signal from the AND gate logic circuit and generates a random bit string output signal.
Claims
1-4. (canceled)
5. A random number generator device, comprising: a diffusive memristor device driven by a pulse generator circuit, the diffusive memristor device producing a stochastically switched output signal; a comparator circuit that receives the stochastically switched output signal from the diffusive memristor device and generates an output signal having a random pulse width; an AND gate logic circuit driven by a clock signal and the output signal from the comparator circuit, the AND gate logic circuit producing a combined output signal; and a counter circuit that receives the combined output signal from the AND gate logic circuit and generates a random bit string output signal.
6. The random number generator device of claim 5, wherein the random bit string output signal has a frequency that is a fraction of the frequency of the clock signal.
7. The random number generator device of claim 5, wherein the counter circuit is one of a single bit counter circuit or a multi-bit counter circuit.
8. The random number generator device of claim 5, wherein the diffusive memristor device includes a dielectric layer formed from silver doped silicon oxide (Ag:SiO.sub.x), wherein the Ag:SiO.sub.x dielectric layer is disposed between a bottom electrode and a top electrode.
9. The random number generator device of claim 8, wherein at least one of the bottom electrode or the top electrode includes a layer of one of platinum (Pt), palladium (Pd) or titanium nitride (TiN).
10. The random number generator device of claim 8, wherein dielectric layer includes silver nanoparticles disposed within the silicon oxide, and wherein the diffusive memristor device further includes a silver layer formed between the dielectric layer and the top electrode.
11. The random number generator device of claim 8, wherein the diffusive memristor device is formed on a semiconductor substrate.
12. The random number generator device of claim 11, wherein the semiconductor substrate includes a silicon wafer substrate, and wherein the diffusive memristor device further includes a titanium adhesion layer interposed between the silicon wafer substrate and the bottom electrode.
13. The random number generator device of claim 5, wherein the diffusive memristor device includes a dielectric layer formed from a metal doped oxide, a metal bottom electrode and a metal top electrode, wherein the metal doped oxide is disposed between the metal bottom electrode and the metal top electrode.
14. The random number generator device of claim 13, wherein dielectric layer includes metal nanoparticles disposed within the oxide, and wherein the diffusive memristor device further includes an additional metal layer formed between the dielectric layer and the metal top electrode.
15. The random number generator device of claim 14, wherein a metal corresponding to the metal nanoparticles is same as a metal included in the additional metal layer.
16. The random number generator device of claim 15, wherein the metal includes one of silver (Ag), copper (Cu) or lithium (Li) and the oxide includes a silicon oxide (SiO.sub.x).
17. The random number generator device of claim 13, wherein at least one of the metal top electrode or the metal bottom electrode includes one of platinum (Pt), palladium (Pd) or titanium nitride (TiN).
18-20. (canceled)
Description
BRIEF DESCRIPTION OF THE DRAWINGS
[0020]
[0021]
[0022]
[0023]
[0024]
DETAILED DESCRIPTION
[0025]
[0026] The inset portion of
[0027] In some implementations, a silver (Ag) layer 144 is formed and disposed between the Ag:SiO.sub.2 switching layer 140 and the top electrode layer 150 to provide an additional supply of silver (Ag) for optimal operation of the switching layer 140. In some implementations, the thickness of the Ag layer 144 is 5 nm, or in a range thereabouts.
[0028]
[0029]
[0030]
[0031]
[0032] In some implementations, an oxide layer, such as silicon oxide (SiO.sub.2) layer 104, is formed on the substrate 102. In some implementations, the circuit device 100 includes a titanium (Ti) layer 106 deposited on the surface of the silicon oxide layer 104 to create an adhesion surface for a bottom electrode 130. The Ti layer 106 has a thickness of 1.5 nm or in a range thereabout, in some implementations.
[0033] As described previously, in some implementations, the diffusive memristor device 120 includes a platinum (Pt) layer that creates the bottom electrode 130, and a silver doped silicon oxide (Ag: SiO.sub.2) layer that creates a dielectric insulating switching layer 140. In some implementations, the dielectric insulating switching layer 140 includes silver nanoclusters 142. In such implementations of the diffusive memristor device 120, an additional silver (Ag) layer 144 is formed on the dielectric insulating layer 140. A platinum (Pt) layer is formed on the silver layer 144 that creates the top electrode 150. In some implementations, a gold (Au) layer that creates a bonding electrode 160 is formed on the top surface of the top electrode 150. The bonding electrode 160 is included for better contact with measurement probes.
[0034] In the implementation shown in
[0035] The Ag layer 5 nm 144 that is formed and disposed between the Ag: SiO.sub.2 switching layer 140 and the Pt top electrode 150 operates as a reservoir of silver (Ag) atoms to avoid any silver (Ag) depletion during switching. In some implementations, after fabrication, the silver (Ag) doping ratio in the Ag: SiO.sub.2 switching layer 140 is around 17% (atomic ratio), as determined by X-ray photoelectron spectroscopy (XPS). In some implementations, a 10 nm thick Ag: SiO.sub.2 switching layer 140 deposited on a thin SiN.sub.x membrane includes dense silver (Ag) nanoclusters 142 that are uniformly dispersed in the SiO.sub.2 matrix of the switching layer 140. The majority of the Ag nanoclusters 142 are 2 to 5 nm in diameter, with a few outliers of 10 nm.
[0036]
[0037]
[0038] The stochastic delay time of the Ag: SiO.sub.2 based diffusive memristor 260 during ON-switching is utilized as the source of randomness for the TRNG circuit 200. In some implementations, the voltage source 202 generates a voltage pulse (V.sub.1) of fixed width that is applied across the diffusive memristor 260 and series resistor 204 (
[0039] Since the delay time characteristic of the diffusive memristor 260 is random, the output voltage pulse V.sub.3 (212) from the comparator 210 has a random width. Voltage V.sub.3 (
[0040]
[0041] The diffusive memristor based TRNG circuit 200 was experimentally implemented by a simple circuit built on a breadboard (
[0042] To assess the performance of the diffusive memristor based TRNG circuit 200, randomness testing for 76 million binary bits was carried out using the standard statistical testing package developed by the National Institute of Standards and Technology (NIST 800-22 test suite). A microcontroller's built-in 16-bit counter with 11.0592 MHz crystal oscillation frequency was used as the clock signal (e.g., representing the output signal of clock circuit 230) and the 6 lowest-order bits were collected. Each input pulse provides 6 random binary bits, for a total bit generation rate of 6 kbs.sup.−1. According to the test protocol, 76 million bits were collected and divided into 76 sequences (1 million bits each) for the NIST tests, which returned two statistics: P-value (except non-overlapping-template and random excursions variant), and pass rate. The bits are considered random and successfully pass the test only if the P-value is greater than 0.0001 and the pass rate exceeds the minimum value defined by NIST. As shown in Table 1, the diffusive memristor based TRNG circuit 200 passed all 15 NIST tests without any post-processing.
TABLE-US-00001 TABLE 1 Min. pass SUCCESS/ Parameter P-Value Pass Rate rate FAILURE 1. Approximate 0.00983 75/76 72/76 SUCCESS Entropy 2. Block 0.768138 75/76 72/76 SUCCESS Frequency 3. Cumulative 0.046525, 73/75, 74/76 72/76 SUCCESS Sums 0.426525 4. FFT 0.739918 75/76 72/76 SUCCESS 5. Frequency 0.477737 74/76 72/76 SUCCESS 6. Linear 0.350485 76/76 72/76 SUCCESS Complexity 7. Longest Run 0.042413 76/76 72/76 SUCCESS 8. Non — 11052/11248 10656/11248 SUCCESS Overlapping Template 9. Overlapping 0.592591 75/76 72/76 SUCCESS Template 10. Random — 360/368 344/368 SUCCESS Excursions 11. Random — 818/828 774/828 SUCCESS Excursions Variant 12. Rank 0.094936 76/76 72/76 SUCCESS 13. Runs 0.042413 75/76 72/76 SUCCESS 14. Serial 0.739918, 76/75, 76/76 72/76 SUCCESS 0.795464 15. Universal 0.000954 76/76 72/76 SUCCESS
[0043]
[0044] For the simulations depicted in
[0045] With continued reference to
[0046] Evolution of silver (Ag) nanoparticle density distribution during two typical switching cycles (with G(t) presented in
[0047] After that, silver (Ag) nanoparticles gradually migrate towards the other terminal (forming bridge spans,
[0048]
In equation (1), A and k are fitting parameters related to potential curvature and depth of the well, and C is a normalization constant. Adding the deterministic RC effect, the distribution of stochastic delay time (t) can be determined using equations (2) and (3):
where τ.sub.0 is characteristic “RC” time, V.sub.tr is a threshold when the memristor can switch to its low resistance state if V(t) >V.sub.tr, and t.sub.1 is associated with any other deterministic voltage-independent delays (e.g., characteristic temperature relaxation time).
[0049] As discussed above, earlier approaches utilizing switching variations to build TRNG circuits have defined a threshold value for some switching characteristic (for example SET voltage or read current). In earlier approaches, the TRNG circuit will output a logic level 1 if the measured value exceeds the threshold, and output a logic level 0 otherwise. Complicated feedback and post-processing (such as von Neumann corrections) are needed to correct the ratio of 1 s to 0 s (bias) and improve the randomness to acceptable standards before running NIST tests. This is because the distribution of 0 and 1 bits generated is highly dependent on the exact distribution of the measured characteristic. If the median value shifts over time, then 0 and 1 outputs will not be equally probable.
[0050] In contrast to the earlier approaches, the diffusive memristor based TRNG circuit, e.g., TRNG device 200, more efficiently exploits variations in switching characteristics as sources of randomness, which is distinct from the previous threshold-value approaches. As shown in
[0051] In some implementations, pulse parameters are chosen to optimize bitrate and ensure the randomness of bits generated by the TRNG circuit 200. For example, in some implementations, a sufficiently large pulse width and amplitude is selected such that the TRNG devices turn ON every cycle. This prevents situations where there is no switching to the low resistive state during pulses, which can cause no random number generation. In some implementations, the interval between pulses is increased so that the device is always fully relaxed and nonzero delay time occurs during every ON-switching cycle. This prevents situations where there is insufficient time to relax to the high resistive state during the inter-pulse interval, which can also cause no random number generation.
[0052] Randomness from volatile switching with a high ON/OFF ratio is easier to exploit than small noises or current fluctuations. As a result, simpler circuits are required. The diffusive memristor TRNG circuit 200 can be built into memory subsystems, reducing chip area and increasing security. As revealed by simulations, the stochasticity is derived from the process of ionic motion, indicating that the diffusive memristor TRNG circuit 200 is more resistant to harsh environments than other electron-based TRNGs. Moreover, when the TRNG is operating, varying temperature affects the distribution by shifting its maximum towards lower time delays. However, the high frequency clock used to generate random numbers ensures that the randomness is not affected.
[0053] The current bit generation rate using the diffusive memristor TRNG circuit 200 is 6 kbs.sup.−1, which is sufficient for many encryption applications, such as Secure Session Layer (SSL) keys, car keys, and identification cards. In some implementations, to further increase the bit rate for other applications, a counter with more bits is used in the TRNG circuit. A higher frequency clock signal causes higher order bits to flip frequently to guarantee the generation of high quality random bit streams. This, however, comes at the cost of increased power consumption.
[0054] In some implementations, the diffusive memristor TRNG circuit 200 is combined with a linear-feedback shift register (LFSR) for higher bit rates with little increase in power consumption. The bitrate can be readily increased by 50 times (to around 300 kbs.sup.−1) implementing this method. In some implementations, a bitrate over 100 MHz is achieved by using a LFSR with more bits. In addition to circuit solutions, device engineering that leads to a higher switching speed of the diffusive memristors also improve the bitrate without changing the TRNG circuit. For example, the switching matrix can be changed. Alternatively, other memristive devices can be used. For example, niobium dioxide (NbO.sub.2) could be a good candidate for the TRNG circuit because of its sub-ns switching speed, albeit with relatively high operation current (around 300 μA) and voltage (around 1.5 V), even with small device size. In some implementations, parallel operation of several diffusive memristor TRNG devices leads to increased bitrates by simultaneously generating multiple random sequences. In some implementations, circuit area is reduced by three dimensional (3D) vertical stacking of the TRNG devices.
[0055] The operations of the diffusive memristor TRNG circuit (such as circuit 200) can be further characterized in response to temperature effects and long pulse cycling. The diffusive memristor TRNG circuit 200 still functions satisfactorily and passes the NIST tests even at 85° C. The experiment/testing collected 11 M binary bits under 1 kHz pulses (voltage amplitude: 0.5 V and pulse width: 300 μs). Unlike in operation at room temperature, only the 3 lowest-order bits can be collected, which means the bitrate decreases from 6 kbs.sup.−1 to 3 kbs.sup.−1. at 85° C. However, this will not be a problem if the clock frequency is increased accordingly. Utilizing a clock signal greater than 8×11.0592=88.4736 MHz, it is possible to keep the bitrate steady at 6 kbs.sup.−1. The required clock frequency is dependent on the spread of delay time, and so the decreased bitrate could be a result of the decreased standard deviation of delay time at high temperatures.
[0056] Possible degradation due to long pulse cycling is the other concern for the memristive switching based TRNG circuit. For example, in one case, 54 million bits were collected from a single diffusive memristor before the device failed and got stuck at the ON state (each cycle produced 6 random bits with endurance of around 10.sup.7 cycles). However, the randomness in memristors is sufficient to generate high quality random bits even after long cycling using the method and circuit described herein, in contrast to previous attempts to build memristive switching based TRNG circuits.
[0057]
[0058] As shown in
[0059] In some implementations, an oxide layer 504 is formed on the substrate 502. In some implementations, the oxide layer 504 includes a silicon oxide (SiO.sub.x). In some implementations, the oxide layer 504 includes silicon dioxide (SiO.sub.2).
[0060] In some implementations, a metal adhesion layer 506 is deposited on the surface of the oxide layer 504 to create an adhesion surface for a bottom metal electrode 530. In some implementations, the metal adhesion layer 506 has a thickness of 1.5 nm or in a range thereabout. In some implementations, the metal in the adhesion layer 506 is titanium (Ti).
[0061] The diffusive memristor device 500 includes a metal bottom electrode layer 530. In some implementations, the metal bottom electrode 530 is fabricated to a thickness of approximately 15 nm. In some implementations, the metal bottom electrode 530 includes one of platinum (Pt), palladium (Pd) or titanium nitride (TiN).
[0062] The diffusive memristor device 500 includes a metal-doped dielectric oxide layer 540 that creates a switching layer. In some implementations, the oxide layer 540 is fabricated to a thickness of approximately 10 nm. In some implementations, the oxide layer 540 includes metal nanoclusters 542. In some implementations, the oxide in the layer 540 is a silicon oxide (SiO.sub.x). In some implementations, the silicon oxide is silicon dioxide (SiO.sub.2). In some implementations, the metal in the layer 540 is one of silver (Ag), copper (Cu) or lithium (Li).
[0063] In some implementations of the diffusive memristor device 500 with the metal nanoclusters 542, an additional metal layer 544 is formed on the dielectric insulating layer 540, with the same metal that is used for doping the oxide layer 540 being used for the nanoclusters 542 and the additional metal layer 544. For example, in some cases, the oxide layer 540 comprises a silver (Ag)-doped silicon dioxide (SiO.sub.2) layer. In such implementations, the metal nanoclusters 542 are silver (Ag) nanoclusters, and the additional metal layer 544 includes a silver (Ag) layer. As another example, in some cases, the metal in the layer 540 is copper (Cu) and the additional metal layer 544 includes a copper (Cu) layer. As another example, in some cases, the metal in the layer 540 is lithium (Li) and the additional metal layer 544 includes a lithium (Li) layer.
[0064] The additional metal layer 544 operates as a reservoir of metal atoms to avoid any metal depletion during switching using the oxide layer 540. In some implementations, the additional metal layer 544 is fabricated to a thickness of approximately 5 nm. In some implementations, the metal nanoclusters 542 are not present. In some implementations, the additional metal layer 544 is not present.
[0065] The diffusive memristor device 500 includes a metal top electrode 550. In some implementations, the metal top electrode 550 is fabricated to a thickness of approximately 20 nm. In some implementations, the metal top electrode 550 includes the same metal as the metal bottom electrode 530. For example, the metal top electrode 550 can include platinum (Pt) when the metal bottom electrode 530 includes platinum (Pt). However, in other implementations, the metal top electrode 550 and the metal bottom electrode 530 include different metals. For example, in some implementations, the metal top electrode 550 includes one of palladium (Pd) or titanium nitride (TiN).
[0066] In some implementations, a bonding layer 560 is formed on the top surface of the metal top electrode 550. The bonding layer 560, which is optional, is included in some implementations for better contact with measurement probes. In some implementations, the bonding layer 560 is fabricated to a thickness of approximately 30 nm. In some implementations, the bonding layer 560 includes gold (Au) as the bonding metal. In other implementations, the bonding layer 560 includes platinum (Pt) as the bonding metal.
[0067] In the above manner, a novel diffusive memristor TRNG device utilizing stochastic delay time as the source of randomness can be implemented. The diffusive memristor TRNG circuit has a simple structure, and shows evident advantages in circuit complexity, scalability and power consumption, compared to prior TRNG devices.
[0068] Device Fabrication. In some implementations, the diffusive memristor device 120 (or the diffusive memristor device 260) described herein is fabricated on a silicon (Si) wafer 102 that includes a 100 nm thermally grown silicon oxide (SiO.sub.2) layer 104 on top that forms the substrate for the device. For the 5×5 μm.sup.2 micro-device (e.g., crossbar device 100), the bottom electrode is patterned by ultraviolet photolithography. After that, a 1.5 nm thick titanium (Ti) adhesion layer 106 and a 15 nm thick platinum (Pt) bottom electrode 130 are deposited sequentially in an electron beam evaporator, followed by a lift-off process in acetone. A 10 nm silver doped silicon oxide (Ag:SiO.sub.2) blanket layer 140 is prepared by radio-frequency (RF) co-sputtering from silicon oxide (SiO.sub.2) and silver (Ag) targets (power for SiO.sub.2: 270 watts (W) and Ag: 12 W). The top electrode is defined by a second photolithography step and a 15 s oxygen (O.sub.2) descum, metallization of a 5 nm silver (Ag) layer 144 using RF sputtering (100 W) and 20 nm platinum (Pt) layer 150/30 nm gold (Au) layer 160 deposition using electron beam evaporator and lift-off. The extra silver (Ag) layer 144 provides the diffusive memristor device 120, and more specifically the dielectric switching layer 140 a reservoir of silver (Ag) ions, while the gold (Au) layer 160 is added as an optional feature to improve the contact between electrical contact pads and probe tips.
[0069] Electrical Characterization. In one implementation, DC electrical characterizations are carried out using a Keysight B1500 semiconductor parameter analyzer operating in a voltage-sweep mode. In this implementation, voltage pulses are generated through a Keysight 33220A function/arbitrary waveform generator while the output waveforms are monitored by a Keysight MSO-X 3104T mixed signal oscilloscope. During all the electrical measurements, the bottom electrodes 130 are connected to a resistance to ground while the top electrodes 150/160 are biased.
[0070] Physical Characterization. The X-ray photoelectron spectroscopy (XPS) depth profile is acquired in a Physical Electronics Instruments (PHI) quantum 2000.
[0071] NIST Randomness Tests. In one implementation, a microcontroller (IAP15F2K61S2) is introduced to collect a large number of bits from the diffusive memristor TRNG device 200. To generate those sequences, input pulses (0.5 V, pulse width: 300 μs) at a frequency of 1 kHz are continuously sent by a voltage source 202 to the diffusive memristor 120 and a series resistor, for example resistor 204. The microcontroller's built-in 16-bit counter (11.0592 MHz) is used as the clock signal and collects the 6 lower-order bits (6 kbs.sup.−1). NIST Statistical Test Suite (Special Publication 800-22) are downloaded from the NIST websites and then run in a virtual Linux system machine using the GNU Compiler Collection (GCC) compiler. The test suite contains 15 randomness tests and each test targets a specific aspect of randomness. Each test returned two statistics, P-value (except non-overlapping-template and random excursions variant) and pass rate. The bits are considered to be random if and only if the P-value >0.0001 and the pass rate exceeds the minimum pass rate for each test.
[0072] Diffusive memristor dynamical simulations. To simulate resistive switching in the diffusive memristor 120, a generalized model is used where electric, heat and Ag-nanoparticle degrees of freedom were considered. In contrast, the memristor self-capacitance was also taken into account, which is important to describe the delay time distributions. The diffusion of silver (Ag)-nanoparticles is described by the Langevin equation (4), shown below:
In equation (4), x.sub.i describes the location of the i.sup.th Ag-nanoparticle, t is time, and η is the viscosity of Ag-nanoparticles. The potential profile U(x.sub.i), where Ag nanoparticles diffuse, is formed due to interfacial interactions, attracting small particles to the Ag-electrode and to the large cluster located near the electrode as well as large number of small minima due to pinning of Ag-nanoparticles to the device inhomogeneities and SiO.sub.2 matric structure as well as repulsion from the Pt-electrode. The particular shape of potential (the potential profile used in simulations is shown in
if Ag-nanoparticles accumulate effective charge a (the strength of this electric force tilt of the potential used in simulation is given in Supplementary ζ(t)
=0,
ζ(0)ζ(t)
=δ(t). The noise intensity is controlled by the temperature T (see
[0073] The heat dynamics in the memristor are described by Newton's cooling law, given by equation (5):
In equation (5), .sub.T is the memristor heat capacitance, Q=V(t).sup.2/R(x.sub.1, x.sub.2, . . . , x.sub.N) is Joule heat power with memristor resistance R(x.sub.1, x.sub.2, . . . , x.sub.N) which depends on Ag-nanoparticle locations, K is the heat transfer coefficient describing heat flux from the device. Note that the actual system temperature and the macroscopic-cluster temperature can be significantly different. We assume the resistance has a tunneling nature and is described by the equation R(x)=R(x.sub.1, x.sub.2, . . . , x.sub.N)=R.sub.tΣ.sub.0.sup.Ne.sup.(x.sup.
[0074] As a distributed system with high resistance the memristor can have a capacitance (C.sub.M) which was not considered in previous models. In general, this capacitance could be different in the two memristor states, but for simplicity, it was assumed that C.sub.M is a constant and is not a function silver (Ag) nano-particle locations. A simple consideration of a circuit that includes the memristor resistance connected in parallel to the memristor capacitance results in equation (6) for voltage drop V(t) across the memristor:
In equation (6), “RC” time τ.sub.0=C.sub.MR.sub.ex with the resistance R.sub.ex of external wires connected in sequence with the memristor. In some implementations, κτ.sub.0=16 and
are used.
Other Embodiments
[0075] Although a few implementations have been described in detail above, other modifications are possible. In addition, other components can be added to, or removed from, the described diffusive memristor and the diffusive memristor based true random number generator device. Accordingly, other implementations are within the scope of the following claims.