SECURE ASSET MANAGEMENT SYSTEM
    53.
    发明授权

    公开(公告)号:EP3246845B1

    公开(公告)日:2018-12-05

    申请号:EP16170012.5

    申请日:2016-05-17

    申请人: Inside Secure

    摘要: A data processing system with a trusted execution environment, comprises a host processor (12) having a secure mode for operating in the trusted execution environment and a non-secure mode; and a secure module (10) configured to respond to tokens posted by the host processor in secure mode, wherein each token identifies a secure asset, and source and destination addresses within secure and public address spaces. The secure module includes an internal memory (16) storing secure assets identifiable by the tokens; a memory access circuit (26) connected to read data from the source addresses and write processed data to the destination addresses; and a cryptography engine (18, 20) configured to process the read data using the identified secure assets. The secure module (10') is configured to also respond to tokens posted by the host processor in non-secure mode. The internal memory (16') of the secure module stores a rule (Px) together with each secure asset (Ax), defining permissions as to the address spaces where the memory access circuit may read and write the data. The secure module ignores tokens that do not satisfy the permissions defined for the corresponding assets.

    PROCÉDÉ DE SÉCURISATION DE L' EXÉCUTION D'UN PROGRAMME
    56.
    发明公开
    PROCÉDÉ DE SÉCURISATION DE L' EXÉCUTION D'UN PROGRAMME 审中-公开
    确保程序执行的方法

    公开(公告)号:EP3284206A1

    公开(公告)日:2018-02-21

    申请号:EP16731193.5

    申请日:2016-04-06

    申请人: Inside Secure

    IPC分类号: H04L9/00 G06F21/54 G06F11/28

    摘要: The invention relates to a method of executing a program, the method comprising steps consisting in: executing an operation (SSG) configured to load an arbitrarily chosen value of an initial datum (sq1 ) belonging to a series of ordered data, executing a series of computation operations (SG, SGC, ESG), distributed in the program, comprising operations each configured to compute a current datum (sq1 ) of the series of data (sq1) as a function of a previous datum (sq1 ), executing a final operation configured to compute a final datum (sq1 ) of the series of data as a function of the current datum, and executing an operation (SQCK, SQFC) configured to detect an error of execution of the program by comparing the current datum of the series of data with an expected value, the final datum exhibiting an expected value independent of the number (n) of data in the series of data.