Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication...

25
Experimental Investigation of Microwave Vulnerabilities in CMOS Inverters Agis A. Iliadis, and Kyechong Kim Electrical and Computer Engineering Department University of Maryland, College Park, MD 20742 Collaboration T. Firestone, J. Rodgers, J. Kim, N. Goldsman Acknowledgements Support from AFOSR-MURI is gratefully acknowledged

Transcript of Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication...

Page 1: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Experimental Investigation of Microwave Vulnerabilities in CMOS Inverters

Agis A. Iliadis, and Kyechong KimElectrical and Computer Engineering Department University of Maryland, College Park, MD 20742

CollaborationT. Firestone, J. Rodgers, J. Kim, N. Goldsman

AcknowledgementsSupport from AFOSR-MURI is gratefully acknowledged

Page 2: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Introduction

• In this part of the work we focus on pulsed microwave interference effects on single CMOS inverters, the fundamental building block of logic ICs, consisting of an NMOS and a PMOS transistor. The inverters were designed in our group and fabricated in the AMI-1.5µm MOSIS line, both as discrete elements and as clusters of two, three, and four. Typical device geometries were: NMOS (W/L=3.2/1.6um) and PMOS (W/L=9.6/1.6), packaged and unpackaged. Here we focus on single elements.

• Our previous presentation on individual NMOSFETs showed that injected pulsed microwave power significantly affected output voltage levels between 1 and 4 GHz.Effects resulted in significant increase in drain current, development of DC offset currents at zero drain bias, reduction in breakdown voltages, substantial changes in the operational small and large signal parameters, bit flipping, and loss of saturation.The power effects were observed to be suppressed at higher frequencies.

• In this part of the work we have isolated serious vulnerabilities, that result from:• The onset of the Parasitic Bipolar Action effect (latch-up) • The degradation of inverter parameters and characteristics, including gain, switching

capability, operational point, current/voltage offsets, power dissipation, noise margins, shifts at inflection point, peak output current instability, and

• An important new “bit-flip” error for pulses occurring at Vt state of inverter.

Page 3: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

CMOS Inverter Gates

• Parameters affected:• Electronic: Affects

points of intersection of the I-V lines, transfer characteristic of gate, response time, noise margins, power dissipation, gain, large and small signal performance, and power supply rails.

• Physical: Gate oxides, junction boundaries, metallizations.

VIN (V)

VO (V

)

I O (m

A)

VINIf

IOmax

VIHVILVTN VDD - |VTP|VOL

VOH

VO (V)

I D

DC1GHz 24dBm IDN

IDP

Inverter Load Characteristics

Inverter Voltage & Current Transfer Characteristics

VIN VO

VDD

GND

IDP

IDN

NMOS

PMOS

Page 4: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Inverter Test Set-up for Time Domain Output

VDD

R=180KΩ

Bias-T

Vinput

R=470ΩVRF

Amp

VPulse

VO

• Inverter with PMOS W/L = 9.6µm/1.6µm NMOS W/L=3.2µm/1.6µm.

• RF pulse parameters: period 800ns, width: 10ms, frequency: 1.23 ~ 4GHz, power: 0dBm ~ 28.9dBm.

Page 5: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Pulsed RF Injection at Inverter Input: 1.23 GHz

012345

0 1 2 3 4 5Time (µ s)

VO

(V)

RF EnvelopeOutputOutput Latched

Latch-up

• Pulse width 800ns, period 10ms.

•At 20 dBm and 1.23 GHz no Latch-up is observed.

• At 22.45dBm and frequency 1.23GHz, with input state low (0V), output of inverter (1) shows gradual decrease with repeated pulses until complete latch-up is observed (1.24V).

• Input logic state high (5V DC). The output DC level increases as RF power increases. At 23.25dBm, the CMOS inverter experiences latch-up of output to 1.24V. Device bias (VDD) needs to be reset to get normal operation again.

00.5

11.5

22.5

0 1 2 3 4 5Time (µ s)

VO

(V)

RF EnvelopeOutputOutput Latched

Latch-up

Page 6: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Pulsed RF Injection at Inverter Input: 4 GHz

012345

0 1 2 3 4 5Time (µ s)

VO

(V)

RF EnvelopeOutput (25.9dBm)Output Latched(28.9dBm)

Latch-up

• Input logic state low (0V DC): Output (25.9dBm) flips to ~1/2VOH. At 4GHz increased RF power 28.9dBm is needed to cause latch-up.

• Input logic state high (5V DC): at 4GHz, the CMOS inverter experiences latch-up at higher power (26.1dBm).

-0.20.30.81.31.82.32.8

0 1 2 3 4 5Time (µ s)

VO

(V)

RF EnvelopeOutputOutput Latched

Latch-up(26.1dBm)

Page 7: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Parasitic Bipolar Transistor Action in CMOS inverters

p+ ppnn n+

N-well

P -substrate

SiO2 SiO2

Q1Q2

VDDGND

VIN

VOUT

R1

R2

• If external applied voltages exceed VLU or if enough charge exists in the n or p wells, then Q1, Q2 bipolars turn on causing significant currents (mA) to flow in the parasitic bipolar transistor loop, thus incapacitating the channel path.

•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic β can become very important.

• This new path of conduction will virtually stop CMOS action rendering the inverter inoperable.

• These bipolar currents can become high enough to damage permanently, especially if VDD is not well regulated.

Page 8: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Inverter Test Set-up for I-V Characteristics

Bias-T

VRF

HP 4145B

• Inverter with PMOS W/L = 9.6µm/1.6µm NMOS W/L=3.2µm/1.6µm.

• RF condition : Frequency : 800MHz -3GHz. Power: 0 - 24dBm.

Page 9: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Inverter IO-VIN transfer characteristic with power at 1GHz

-0.05

0

0.05

0.1

0.15

0.2

0.25

-5 0 5 10VIN (V)

I (m

A)

DC1GHz 0dBm1GHz 15dBm1GHz 24dBm

IO-VIN transfer characteristic shows large current increase with power level.

NMOS and PMOS devices can not be turned ON or OFF due to excess charge in channel.

Power dissipation on “stand-by” ON or OFF state becomes excessive.

Max current point shift is observed.

Power dissipation at “stand-by”:

(a) at DC: negligible power dissipation at ON and OFF state. (b) at 1GHz 15dBm power dissipation= 0.14µW(ON state) and 0.015µW (OFF), Asymmetric response (c) at 1GHz 24dBm power dissipation =20.9µW (ON) and 31.9µW (OFF) state.

Page 10: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Inverter IO-VIN Transfer Characteristic with Frequency at 24dBm

-0.050

0.050.1

0.150.2

0.250.3

-5 0 5 10VIN (V)

I (m

A)

DC800MHz1GHz2GHz3GHz

Power effect is suppressed with increasing frequency. still degradation in inverter characteristics has been observed.

Shift of Iomax observed

Page 11: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

IOmax Change with RF Power and Frequency

00.020.040.060.08

0.10.120.14

0 5 10 15 20 25

P(f) dBm

∆I m

ax (m

A)

1GHz2GHz3GHz

•∆IOmax = IOmax(RF) –IOmax(DC)

• Huge increases in IOmax are observed with power level.

• Inverter suffers large dynamic power dissipation (on switching), in addition to “stand-by”dissipation.

Page 12: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Inverter Transfer Characteristics with Power at 1GHz

0123456

0 1 2 3 4 5VIN (V)

VO

(V)

DC1GHz 0dBm1GHz 15dBm1GHz 24dBm

Noise Margin degradation :

DC: NMH=VOH – VIH = (5 – 2.9)V=2.1V, NML= VIL – VOL = (2.3-0)V =2.3V.

1GHz 15dBm: NMH=(5-3.4)V=1.6V, NML=VIL-VOL=(2.1-0)=2.1V.

1GHz 24dBm: NMH=0.97V, NML=1.81V.

Gain degradation:

DC: 11.985 V/V

1GHz 15dBm: 5.776V/V

1GHz 24dBm: 2.08V/V

Page 13: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Inverter Transfer Characteristics with RF frequency at 24dBm

0

1

2

3

4

5

0 1 2 3 4 5VIN (V)

VO

(V)

DC800MHz1GHz2GHz3GHz

Power effect suppressed with increasing frequency

Page 14: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Inflection Point Shift with RF Power and Frequency

0

0.1

0.2

0.3

0.4

0.5

0 5 10 15 20 25

P(f) dBm

∆V

INIf (V

)

1GHz2GHz3GHz

• Inflection point shift increases with power level.

•∆VINIf = VINIf(RF) –VINIf(DC).

• Slope of transfer curve changes degrading gain severely

Page 15: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Inverter Load-line I-V Characteristics Input Low (VIN=0V): 1GHz 24dBm

-0.10

0.10.20.30.40.50.60.7

0 1 2 3 4 5VO (V)

I P (m

A)

-0.100.10.20.30.40.50.60.7

I N (m

A)

1GHz 24dBmDC

• Change in bias point results in both N and P MOS transistors “ON”changing the effective “on” resistance and capacitance and affecting switching speed and increasing propagation delays.

Page 16: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Inverter Load-line I-V Characteristic Input Intermmediate (VIN=3.1V): 1GHz 24dBm

0

0.05

0.1

0.15

0.2

0.25

0.3

0 1 2 3 4 5VO (V)

I P (m

A)

0

0.05

0.1

0.15

0.2

0.25

0.3

I N (m

A)

DC1GHz 24dBm Effects are more

pronounced

Page 17: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Inverter Load-line I-V Characteristics Input High:1GHz 24dBm

-0.1

0

0.1

0.2

0.3

0.4

0.5

0 1 2 3 4 5VO (V)

IP (m

A)

-0.1

0

0.1

0.2

0.3

0.4

0.5

IN (m

A)

DC1GHz 24dBm

• Inverter can not be turned OFF or ON at RF power levels above 15dBm (1GHz).

• In deep sub-micron VLSI chips, where dimensions are severely scaled down, this increase in current at “stand-by” state will cause additional IR voltage drops in the interconnects from power rail to the device and the device contacts themselves, resulting in catastrophic failure with “hard errors” shutting down neighboring devices and it presents a new serious reliability problem.

Page 18: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

1GHz 24dBm Pulsed RF(Pulse Width: 1.5ms/ Period: 2s)

-0.50

0.51

1.52

2.53

3.54

0 1 2 3 4 5VIN (V)

I O (m

A)

• Relative importance of thermal effects with respect to excess charges:

• Comparison of pulsed and CW measurement

• Different period/width pulses: period 200ms-2s width 1.5ms-500ms

Page 19: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

1GHz 24dBm Pulsed RF(Pulse Width: 1.5ms/ Period: 500ms)

-1

0

1

2

3

4

0 1 2 3 4 5

VIN (V)

I O (m

A)

Page 20: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

1GHz 24dBm Pulsed RF(Pulse Width: 1.5ms/ Period: 200ms)

0

1

2

3

4

0 1 2 3 4 5VIN (V)

I O (m

A)

Page 21: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Incremental Current Change∆IO vsVIN

1GHz 24dBm Pulses

-100-80-60-40-20

0204060

1 1.5 2 2.5 3 3.5

VIN (V)

∆ IO

(µA

)

1.5ms / 4s1.5ms / 2s1.5ms / 500ms1.5ms / 200ms200ms / 2s500ms / 2s

width / period Avg. power94.2µW188.4µW173.56µW1.884mW25.12mW62.80mW

•∆IO=IO(Pulsed)-IO(CW)

• The plot of ∆IO vs VIN from all the previous measurements shows both positive and negative values. The positive values show that current due to CW is less than that due to pulses which points to a small contribution of thermal effects due to CW.

•The negative values show that the thermal contribution is not significant for the VIN range, although at higher average pulse power some thermal effects may be in operation.

•The pulse and CW effects are predominantly due to excess charges in CMOS device.

Page 22: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

3GHz 24dBm Pulsed RF(Pulse Width: 1.5ms/ Period: 2s)

00.5

11.5

22.5

33.5

0 1 2 3 4 5VIN (V)

I O (m

A)

Page 23: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Voltage Transfer Characteristic at CW and Pulsed Injection

-10123456

0 1 2 3 4 5VIN (V)

VO

(V)

“Bit flip” error at Vt

Device are observed to flip from high to low for pulses at Vt

This is an important vulnerability as it introduces “soft” errors without permanent operational changes.

1GHz 24dBmPulse Width: 1.5ms/ Period: 500ms

Page 24: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

1GHz 24dBm Pulsed RF(Pulse Width: 1.5ms/ Period: 500ms)

-10123456

0 1 2 3 4 5VIN (V)

VO

(V)

-10123456

I O (m

A)

DCCW RFPulsed RFDC I-V

Page 25: Experimental Investigation of Microwave Vulnerabilities in ...•Depending on inverter fabrication parameters (junction and well doping, Si resistivity) the parasitic βcan become

Summary

• CMOS inverters under pulsed RF measurements, experience severe latch-up due to excess charges turning on the parasitic bipolar action in the p-substrate-n-well CMOS structure, for power levels at or above 22.45dBm.

• Inverter characteristics showed significant degradation in the voltage and current transfer characteristics, the inverter operational point, the inverter gain, the input output voltages (VOH, VOL, VIL, VIH), the noise margins and substantial power dissipation increases due to output current increase at “on” and “off” states and dynamic power dissipation increases at the intermediate state.

• Comparison between pulsed and CW measurements showed little contribution from thermal effects.• A new “bit flip” error under pulsed measurements was observed to happen when VIN approaches the

threshold voltage of the devices, and a pulse occurs. The output then flips from Hi to Lo. • The observed substantial increase in output current at “stand-by” results in additional IR voltage

drops in deep sub-micron VLSI chips, giving catastrophic failures with “hard errors” and shutting down neighboring devices. This is expected to present a new serious reliability problem and will be investigated further on deep submicron devices.

• Continuing and future work will evaluate the effects with different size (W/L) inverters, examine the effects of asymmetrical response of the devices, examine multiple inverter clusters to evaluate propagation of events, evaluate small signal parameters and switching characteristics for propagation delays and switching speed, in order to improve the inverter design to harden against pulses. Experimental results will be incorporated in model (N. Goldsman). Next step includes differential amplifier studies and guard protection using nanocomposites.