Layout Analysis Embedded Memory

Similar documents
Layout Analysis I/O. Analysis from an HD Video/Audio SoC

STMicroelectronics STM32F103ZET6 32 Bit MCU Embedded NOR Flash

STMicroelectronics STM32F103ZET6 32 Bit MCU. Advanced Functional Analysis

Sample Table of Contents

QUALCOMM MSM6275 Chipset

Texas Instruments TMX320TCI6488ZUNV Baseband Processor System on a Chip

Sigma Designs SMP8642 Secure Media Processor

AltaSens A5262-4T 4.5 Megapixel CMOS Image Sensor 0.18 µm IBM Process

SanDisk Flash Memory Controller. Partial Circuit Analysis

Samsung K9GAG08U0M-PCB0 16 Gbit Multi-Level Cell (MLC) 51 nm Process Technology NAND Flash Memory

Sharp NC µm Pixel CCD Image Sensor

Atmel MXT540E Touch Screen Controller

Sharp NC Mp, 1.66 µm Pixel Size CCD Image Sensor

Texas Instruments S W Digital Micromirror Device

NVIDIA Tegra T20-H-A2 Application Processor TSMC 40 nm Low Power CMOS Process

Nokia N90 (Toshiba ET8EA3-AS) 2.0 Megapixel CMOS Image Sensor Process Review

Samsung S5PC210 Exynos 4210 Application Processor

Nan Ya NT5DS32M8BT-6K 256 Mbit DDR SDRAM Structural Analysis

Matsushita MN2DS0015 System on a Chip for DVD Players 65 nm CMOS Process Structural Analysis

Sony ICX098BL ¼ Inch Optical Format 5.6 µm Pixel Size CCD Image Sensor

Motorola Mobility T6VP0XBG-0001 Baseband Processor With FVP0 Die Markings From the Motorola Mobility DROID RAZR and BIONIC Smartphones

Texas Instruments OMAP4460BCBS Application Processor

IBM 43E7488 POWER6 Microprocessor from the IBM System 8203-E4A Server

Samsung S6E8AA0A01 Display Driver IC (DDI) Extracted from a Samsung Galaxy S III

Canon Digic II CH Digital Image Processor Structural Analysis

G 32 Gb NAND Flash Multichip Package Controller Die Internal Voltage Converter and Oscillator

Numonyx JSPCM128A00B85ES 128 Mbit Phase Change Memory 90 nm BiCMOS PCM Process

RF Micro Devices RF6260 Power Amplifier Module from the Samsung Galaxy S II Smartphone

Qualcomm APQ8064 Avenger Snapdragon S4 Pro Application Processor

Texas Instruments OMAP4430FCBS (with Die Markings F781821F) Application Processor

Broadcom BCM4335 5G Wi-Fi ac Combo Wireless Chip

Samsung Exynos 5250 Dual ARM Cortex -A15 Application Processor

Memjet ML Printhead from the RapidX1 Color Label Printer

Qualcomm WCN3660/WCN3680 Wireless Combo Chips

Micron Technology. MT41K512M8RH Gb DDR3 SDRAM. Circuit Analysis DQ, VDDQ, and VREFDQ I/O Pads

NXP Semiconductors. HTRC110 HITAG Read/Write IC. Full Circuit Analysis

Comparison of Nine SDRAM Devices. Focused Technology Review

Luxtera PN Silicon CMOS Photonic Chip Freescale 130 nm SOI CMOS Process

Texas Instruments. BQ2025 Single Wire Serial Interface for the Apple Lightning Cable. Full Circuit Analysis

Marvell. 88SE9123-NAA2 SATA 6 Gb/s RAID Controller. SATA 3.0 Interface Analog Macro Circuit Analysis

Texas Instruments. XIO2000AI PCI Express to PCI Bus Translation Bridge. PCI Express Interface Circuit Analysis

Freescale. MCZ33905D5EK SBC Gen2 with CAN High Speed and LIN Interface. Circuit Analysis of Power Management Unit, CAN Interface, and LIN Block

STMicroelectronics L9959T Dual PMOS High-Side H-Bridge

Goodix BD10239A (ASIC Die from the GT1151) Touch Screen Controller ASIC

Broadcom BCM7405 HD Video/Audio System-on-Chip (SoC)

LG Electronics LG4945 LCD Display Driver IC

Apple iphone 6s Fingerprint Sensor

Sony ICX098BL ¼ Inch Optical Format 5.6 µm Pixel Size CCD Image Sensor

Qualcomm MSM8974AC Snapdragon 801 Application Processor

Samsung Exynos 5433 Application Processor

Panasonic Mp, 4.4 µm Pixel Size LiveMOS Image Sensor from Panasonic LUMIX DMC-G1 Micro Four Thirds Digital Interchangeable Lens Camera

Samsung SGH-I987 Galaxy Tablet 7.0. Teardown Report

Texas Instruments TMS320F2812GHHA DSP Embedded Flash Macro Partial Circuit Analysis

Sony IMX214 Second Generation 13 Mp Exmor RS Stacked BSI CIS with SME-HDR

Xilinx XC4VLX25-FF668AGQ FPGA. IOB Circuit Analysis

Micron MT54V512H18EF-10 9Mb QDR SRAM Circuit Analysis

Mosel Vitelic (IBM-Siemens) V53C181608K60 1Mx16 CMOS EDO DRAM

Memory in Digital Systems

TABLE OF CONTENTS III. Section 1. Executive Summary

Infineon HYB39S128160CT M SDRAM Circuit Analysis

Hewlett-Packard HDCS-2000 CMOS Image Sensor Circuit Analysis

Advanced materials research using the Real-Time 3D Analytical FIB-SEM 'NX9000'

Memories. Design of Digital Circuits 2017 Srdjan Capkun Onur Mutlu.

MEMORIES. Memories. EEC 116, B. Baas 3

3D systems-on-chip. A clever partitioning of circuits to improve area, cost, power and performance. The 3D technology landscape

Problem 2 If the cost of a 12 inch wafer (actually 300mm) is $3500, what is the cost/die for the circuit in Problem 1.

IBG Protection for Anti-Fuse OTP Memory Security Breaches

CS 348B Project Report Mingyu Gao, Jing Pu

Memory in Digital Systems

Non-destructive, High-resolution Fault Imaging for Package Failure Analysis. with 3D X-ray Microscopy. Application Note

How Safe is Anti-Fuse Memory? IBG Protection for Anti-Fuse OTP Memory Security Breaches

Unleashing the Power of Embedded DRAM

Future Technology Devices International

LG Semicon GM71C17400BJ6 16M DRAM Circuit Analysis Report

NAND Flash: Where we are, where are we going?

Introduction to Semiconductor Memory Dr. Lynn Fuller Webpage:

+1 (479)

Design Factors Affecting Laser Cutting Parameters Line width Wider lines more heat flow Lines affect spot size larger line: wider spot Lines much

Literacy for Integrated Circuit Reverse Engineering

Memory Design I. Array-Structured Memory Architecture. Professor Chris H. Kim. Dept. of ECE.

Advances in Flexible Hybrid Electronics Reliability

Introduction. Chapter 1. Logic Non-Volatile Memory. List of Sections. List of Figures

Investigation on seal-ring rules for IC product reliability in m CMOS technology

Introduction 1. GENERAL TRENDS. 1. The technology scale down DEEP SUBMICRON CMOS DESIGN

TEXAS INSTRUMENTS ANALOG UNIVERSITY PROGRAM DESIGN CONTEST MIXED SIGNAL TEST INTERFACE CHRISTOPHER EDMONDS, DANIEL KEESE, RICHARD PRZYBYLA SCHOOL OF

Introduction to SRAM. Jasur Hanbaba

Semiconductor Reverse. Randy Torrance 9 th September 2009

Chip Card & Security ICs SLE Intelligent 256-Byte EEPROM with Write Protection function and Programmable Security Code

Lecture 20: CAMs, ROMs, PLAs

Flash TOSHIBA TOSHIBA

CMPE 415 Programmable Logic Devices FPGA Technology I

Semiconductor Memory Classification. Today. ESE 570: Digital Integrated Circuits and VLSI Fundamentals. CPU Memory Hierarchy.

Chapter 2 On-Chip Protection Solution for Radio Frequency Integrated Circuits in Standard CMOS Process

Solving Integration Challenges for Printed and Flexible Hybrid Electronics

Memory in Digital Systems

SL2ICS5311EW/V7. Name Description. Diameter: 8 Thickness: Material: ground + stress releave. Roughness: R t max. 5 μm. Chip size: 940 x 900 μm 2

ECE520 VLSI Design. Lecture 1: Introduction to VLSI Technology. Payman Zarkesh-Ha

Unit 6 1.Random Access Memory (RAM) Chapter 3 Combinational Logic Design 2.Programmable Logic

Chapter TEN. Memory and Memory Interfacing

IO & ESD protection 1.8V & 3.3V capable general purpose digital IO pad based on 1.8V devices for TSMC 28nm CMOS technology

Transcription:

Sample Report For any additional technical needs concerning semiconductor and electronics technology, please call Sales at Chipworks. 3685 Richmond Road, Suite 500, Ottawa, ON K2H 5B7, Canada Tel: 613.829.0414 Fax: 613.829.0515 www.chipworks.com

Table of Contents Table of Contents 1 Layout Analysis Embedded Memory 1.1 List of Figures 1.2 List of Tables 2 Device Overview 2.1 Introduction 2.2 Device Summary 3 Device Identification 3.1 Die 4 Memory Block Analysis 4.1 Annotated Die Photograph Memory Blocks 4.2 Memory Block Measurements 4.3 Memory Cell Plan View SEM Analysis 5 Statement of Measurement Uncertainty and Scope Variation About Chipworks

Overview 1-1 1 Layout Analysis Embedded Memory This report gives an overview of the memories on a die, reporting on the physical size, logical size, and cell size of the largest memories overall on the chip, the most commonly used memory, the smallest memory, and the largest of each type of memory. This report contains the following information: Package photos Package X-ray Depot (bare die) die photograph Die size measurements Annotated metal 1 or poly die photographs showing the largest memory of each type, the 10 largest memories, the most common memory, and the smallest memory on the die Physical measurements of the memories listed above Cell size measurements for the smallest cell of each type of the memories listed above SEM plan-view images of cell layout at poly for the smallest cell of each type of memory (all SRAM variants, edram, OTP, and eflash) Number of rows, columns, bits, and cell efficiency of the memories listed above Table summarizing memory area and die utilization of the memories listed above (percentage of die, logical and actual bit size)

Overview 1-2 1.1 List of Figures 3 Device Identification 3.1.1 Die and Paddle X-Ray 3.1.2 Die 3.1.3 Die Markings 1 3.1.4 Die Markings 2 3.1.5 Die Markings 3 4 Memory Block Analysis 4.1.1 Annotated Metal 1 Die Photograph Memory 4.3.1 ROM Poly 4.3.2 ROM Metal 1 4.3.3 EEPROM Poly 4.3.4 EEPROM Metal 1 4.3.5 6T SRAM Poly 4.3.6 6T SRAM Metal 1 1.2 List of Tables 2 Device Overview 2.1.1 Device Identification 2.2.1 Device Summary 4 Memory Block Analysis 4.2.1 Memory Block Measurements

Device Overview 2-1 2 Device Overview 2.1 Introduction This report is a functional analysis (FAR) of the Contactless IC. Three types of memory are found on the die, ROM, EEPROM and a 6T SRAM. There is approximately 839 Kb of ROM, 29 Kb of EEPROM, and 4 Kb of SRAM. A VPP generator circuit is located next to the EEPROM, providing an internally generated voltage, required for the flash memory. Table 2.1.1 Device Identification Package markings Die markings Date code 2.1.1 Device Identification Table 2.1.1 Device Identification

Device Overview 2-2 2.2 Device Summary Table 2.2.1 Device Summary Manufacturer Foundry Part number Type Date code Package markings Package type Die markings Die size (die edge seal) Process type Number of metal layers Number of poly layers Minimum transistor gate Process generation Feature measured to determine process generation 2.2.1 Device Summary Table 2.2.1 Device Summary

Device Identification 3-1 3 Device Identification 3.1 Die Figure 3.1.1 is an X-ray image of the die and its supporting metal header. The die is mounted inside a credit card (not shown), with two bond wires connecting the die to its supporting paddle. Two antenna wires are also seen contacting the paddle. Figure 3.1.1Die and Paddle X-Ray Figure 3.1.1 Die and Paddle X-Ray antenna wire die Figure 3.1.1 Die and Paddle X-Ray

Device Identification 3-2 The die is shown in Figure 3.1.2. The die measures 1.95 mm x 2.72 mm within the die seals and has a 5.3 mm 2 area. Figure 3.1.2Die Figure 3.1.2 Die Figure 3.1.2 Die

Device Identification 3-3 The die markings found on the are shown in Figure 3.1.3 through Figure 3.1.5. Figure 3.1.3Die Markings 1 Figure 3.1.3 Die Markings 1 Figure 3.1.3 Die Markings 1 Figure 3.1.4Die Markings 2 Figure 3.1.4 Die Markings 2 Figure 3.1.4 Die Markings 2 Figure 3.1.5Die Markings 3 Figure 3.1.5 Die Markings 3 Figure 3.1.5 Die Markings 3

Memory Block Analysis 4-1 4 Memory Block Analysis 4.1 Annotated Die Photograph Memory Blocks Three types of memory exist on the die: ROM, EEPROM, and 6T SRAM. Figure 4.1.1 shows the type and location of each memory block. Figure 4.1.1Annotated Metal 1 Die Photograph Memory Figure 4.1.1 Annotated Metal 1 Die Photograph Memory 6T SRAM ROM EEPROM Figure 4.1.1 Annotated Metal 1 Die Photograph Memory

Memory Block Analysis 4-2 4.2 Memory Block Measurements Table 4.2.1 lists the measurements for the individual memory array blocks, identified in Section 4.1. The memory block length, width and area are given along with the unit cell area, as derived from the SEM analysis of Section 4.3. The logical blocks size were derived by dividing the memory macro block by the unit cell area. The actual size was obtained by counting the wordlines and bitlines in the selected blocks, and includes normal bits and any possible redundant bits. Table 4.2.1 Memory Type (mm) Memory Block Measurements Block Length Block Width (mm) Block Area (mm²) Unit Cell Area (µm²) Logical Block Size (Bits) 4.2.1 Memory Block Measurements Actual Wordlines Actual Bitlines Table 4.2.1 Memory Block Measurements Actual Block Size (Bits) Efficiency (%) ROM 0.77 0.81 0.62 0.53 1,176,792 820 1024 839,680 71.4 EEPROM 0.81 0.65 0.52 4.51 116,740 70 420 29,400 25.2 6T SRAM 0.36 0.35 0.13 5.0 9,137 64 64 4,096 44.8

Memory Block Analysis 4-3 4.3 Memory Cell Plan View SEM Analysis Figure 4.3.1 and Figure 4.3.2 are plan-view SEM images of the ROM at poly and metal 1, respectively. Each ROM cell is 0.81 µm long and 0.66 µm wide, yielding a cell area of 0.53 µm 2. The poly wordlines run horizontally in the image. Figure 4.3.1ROM Poly Figure 4.3.1 ROM Poly Figure 4.3.1 ROM Poly

Memory Block Analysis 4-4 Figure 4.3.2ROM Metal 1 Figure 4.3.2 ROM Metal 1 Figure 4.3.2 ROM Metal 1

Memory Block Analysis 4-5 Figure 4.3.3 and Figure 4.3.4 are plan-view SEM images of the EEPROM at poly and metal 1, respectively. Each EEPROM cell is 3.64 µm long by 1.24 µm wide, yielding a cell area of 4.51 µm 2. Figure 4.3.3EEPROM Poly Figure 4.3.3 EEPROM Poly Figure 4.3.3 EEPROM Poly

Memory Block Analysis 4-6 Figure 4.3.4EEPROM Metal 1 Figure 4.3.4 EEPROM Metal 1 Figure 4.3.4 EEPROM Metal 1

Memory Block Analysis 4-7 Figure 4.3.5 and Figure 4.3.6 are plan-view SEM images of the 6T SRAM at poly and metal 1, respectively. Each 6T SRAM cell is 3.44 µm long by 1.45 µm wide multi-port SRAM cell with a unit cell area of 5.0 µm 2. The wordlines implemented above metal 1, likely run vertically with respect to the plan-view poly image. Figure 4.3.56T SRAM Poly Figure 4.3.5 6T SRAM Poly Figure 4.3.5 6T SRAM Poly

Memory Block Analysis 4-8 Figure 4.3.66T SRAM Metal 1 Figure 4.3.6 6T SRAM Metal 1 Figure 4.3.6 6T SRAM Metal 1

Statement of Measurement Uncertainty and Scope Variation 5-1 5 Statement of Measurement Uncertainty and Scope Variation Statement of Measurement Uncertainty Chipworks calibrates length measurements on its scanning electron microscopes (SEM), transmission electron microscope (TEM), and optical microscopes, using measurement standards that are traceable to the International System of Units (SI). Our SEM/TEM cross-calibration standard was calibrated at the National Physical Laboratory (NPL) in the UK (Report Reference LR0304/E06050342/SEM4/190). This standard has a 146 ± 2 nm (± 1.4%) pitch, as certified by NPL. Chipworks regularly verifies that its SEM and TEM are calibrated to within ± 2% of this standard, over the full magnification ranges used. Fluctuations in the tool performance, coupled with variability in sample preparation, and random errors introduced during analyses of the micrographs, yield an expanded uncertainty of about ± 5%. The materials analysis reported in Chipworks reports is normally limited to approximate elemental composition, rather than stoichiometry, since calibration of our SEM and TEM based methods is not feasible. Chipworks will typically abbreviate, using only the elemental symbols, rather than full chemical formulae, usually starting with silicon or the metallic element, then in approximate order of decreasing atomic % (when known). Elemental labels on energy dispersive X-ray spectra (EDS) will be colored red for spurious peaks (elements not originally in sample). Elemental labels in blue correspond to interference from adjacent layers. Secondary ion mass spectrometry (SIMS) data may be calibrated for certain dopant elements, provided suitable standards were available. A stage micrometer, calibrated at the National Research Council of Canada (CNRC) (Report Reference LS-2005-0010), is used to calibrate Chipworks optical microscopes. This standard has an expanded uncertainty of 0.3 µm for the stage micrometer s 100 µm pitch lines. Random errors, during analyses of optical micrographs, yield an expanded uncertainty of approximately ± 5% to the measurements. Statement of Scope Variation Due to the nature of reverse engineering, there is a possibility of minor content variation in Chipworks standard reports. Chipworks has a defined table of contents for each standard report type. At a minimum, the defined content will be included in the report. However, depending on the nature of the analysis, additional information may be provided in a report, as value-added material for our customers.

About Chipworks About Chipworks Chipworks is the recognized leader in reverse engineering and patent infringement analysis of semiconductors and electronic systems. The company s ability to analyze the circuitry and physical composition of these systems makes them a key partner in the success of the world s largest semiconductor and microelectronics companies. Intellectual property groups and their legal counsel trust Chipworks for success in patent licensing and litigation earning hundreds of millions of dollars in patent licenses, and saving as much in royalty payments. Research & Development and Product Management rely on Chipworks for success in new product design and launch, saving hundreds of millions of dollars in design, and earning even more through superior product design and faster launches. Contact Chipworks To find out more information on this report, or any other reports in our library, please contact Chipworks at: Chipworks 3685 Richmond Rd. Suite 500 Ottawa, Ontario K2H 5B7 Canada T: 1.613.829.0414 F: 1.613.829.0515 Web site: www.chipworks.com Email: info@chipworks.com Please send any feedback to feedback@chipworks.com