-
公开(公告)号:US12058255B2
公开(公告)日:2024-08-06
申请号:US17553481
申请日:2021-12-16
Inventor: Julien Couvrand , William Orlando
IPC: H04L9/08
CPC classification number: H04L9/0894
Abstract: The present description concerns an electronic system including one or a plurality of first microprocessors, a second microprocessor for securely managing first encryption keys of the first microprocessors, the second microprocessor being configured to communicate with each first microprocessor and including a first non-volatile memory having at least one second key stored therein, and for each first microprocessor, a second non-volatile memory external to the second microprocessor and containing the first keys of the first microprocessor encrypted with the second key.
-
公开(公告)号:US11340798B2
公开(公告)日:2022-05-24
申请号:US16898921
申请日:2020-06-11
Inventor: William Orlando , Julien Couvrand , Pierre Guillemin
Abstract: A method includes receiving, by a first microprocessor, a request of modification of a content of a first memory of the first microprocessor, the first memory being accessible only by the first microprocessor. The method includes accessing, by the first microprocessor, first data associated with the request and a signature generated from the first data with an asymmetric cipher algorithm. The first data and the signature are available in a second memory of a second microprocessor, and the first data is representative of a modification to be applied to the content of the first memory. The modification is representative of a modification of a set of services exposed by the first microprocessor. The method includes verifying, by the first microprocessor, authenticity of the first data based on the signature; and modifying the content of the first memory according to the first data, the modifying being conditioned by the verifying.
-
3.
公开(公告)号:US11113384B2
公开(公告)日:2021-09-07
申请号:US15847827
申请日:2017-12-19
Applicant: STMicroelectronics (Rousset) SAS
Inventor: Pierre Guillemin , William Orlando
Abstract: A hardware monitor circuit includes an electronic control circuit coupled to a processing unit. The electronic control circuit generates multi-bit protection codes and directs operations of the hardware monitor circuit. A bus interface is coupled to an address bus of the processing unit, and the bus interface passes signals associated with a stack structure of the processing unit. The stack structure is arranged to store the multi-bit protection codes in an internal memory coupled to the processing unit. Comparators in the hardware monitor circuit are arranged to accept values from the internal memory and gating logic coupled to the comparators is arranged to generate an error signal when it detects that an address on the address bus read via the bus interface is equal to an address stored in the internal memory. Upon generating the error signal, the processing unit is placed in a secure mode.
-
公开(公告)号:US10108530B2
公开(公告)日:2018-10-23
申请号:US15270323
申请日:2016-09-20
Applicant: STMICROELECTRONICS (ROUSSET) SAS
Inventor: Lydie Terras , William Orlando
IPC: G06F11/36 , G06F9/30 , G06F9/38 , G06F21/64 , G06F9/00 , G06F21/52 , G06F11/28 , G06F21/44 , G06F9/48 , G06F11/10
Abstract: Synchronization points are inserted into a program code to be monitored, and are associated with different branches resulting from execution of an indirect branch instruction. The synchronization points can be accessed by the monitored program code for the purpose of identifying which branch to use during execution of the indirect branch instruction of the monitored program code.
-
公开(公告)号:US20180181748A1
公开(公告)日:2018-06-28
申请号:US15847827
申请日:2017-12-19
Applicant: STMicroelectronics (Rousset) SAS
Inventor: Pierre Guillemin , William Orlando
IPC: G06F21/52
CPC classification number: G06F21/52 , G06F2221/2123 , G06F2221/2153
Abstract: A hardware monitor circuit includes an electronic control circuit coupled to a processing unit. The electronic control circuit generates multi-bit protection codes and directs operations of the hardware monitor circuit. A bus interface is coupled to an address bus of the processing unit, and the bus interface passes signals associated with a stack structure of the processing unit. The stack structure is arranged to store the multi-bit protection codes in at least one internal memory coupled to the processing unit. A plurality of comparators in the hardware monitor circuit are arranged to accept values from the at least one internal memory and gating logic coupled to the plurality of comparators is arranged to generate an error signal when it detects that an address on the address bus read via the bus interface is equal to an address stored in the at least one internal memory. Upon generating the error signal, the processing unit is placed in a secure mode.
-
公开(公告)号:US11143701B2
公开(公告)日:2021-10-12
申请号:US16909696
申请日:2020-06-23
Applicant: STMicroelectronics (Rousset) SAS
Inventor: Lionel Sinegre , Eric Sagnard , Stephan Courcambeck , William Orlando , Layachi Daineche
IPC: G01R31/00 , G01R31/317 , G06F11/22 , G06F9/4401 , G06F11/36 , G06F21/75 , G06F21/62
Abstract: A method for managing a product includes: placing an integrated circuit in a bootstrap mode with debugging prohibition in response to each reset or power-up of the integrated circuit and in an absence of a reception, on a test access port of the product, of a first command; and placing the integrated circuit in an analysis mode with debugging authorization in response to reception, on the test access port, of the first command following the reset or the power-up of the integrated circuit. Placing the integrated circuit in the analysis mode is maintained at least as long as a second command has not been received on the test access port. Placing the integrated circuit in the bootstrap mode and placing the integrated circuit in the analysis mode are performed in response to a determination that the integrated circuit has never before been placed in the analysis mode with debugging authorization.
-
公开(公告)号:US10705141B2
公开(公告)日:2020-07-07
申请号:US16155953
申请日:2018-10-10
Applicant: STMicroelectronics (Rousset) SAS
Inventor: Lionel Sinegre , Eric Sagnard , Stephan Courcambeck , William Orlando , Layachi Daineche
IPC: G01R31/00 , G01R31/317 , G06F11/22 , G06F9/4401 , G06F11/36 , G06F21/75 , G06F21/62
Abstract: A method for managing a product includes: placing an integrated circuit in a bootstrap mode with debugging prohibition in response to each reset or power-up of the integrated circuit and in an absence of a reception, on a test access port of the product, of a first command; and placing the integrated circuit in an analysis mode with debugging authorization in response to reception, on the test access port, of the first command following the reset or the power-up of the integrated circuit. Placing the integrated circuit in the analysis mode is maintained at least as long as a second command has not been received on the test access port. Placing the integrated circuit in the bootstrap mode and placing the integrated circuit in the analysis mode are performed in response to a determination that the integrated circuit has never before been placed in the analysis mode with debugging authorization.
-
公开(公告)号:US20170242778A1
公开(公告)日:2017-08-24
申请号:US15270323
申请日:2016-09-20
Applicant: STMICROELECTRONICS (ROUSSET) SAS
Inventor: Lydie TERRAS , William Orlando
CPC classification number: G06F11/3644 , G06F9/30043 , G06F9/30058 , G06F9/30181 , G06F9/3844 , G06F9/3867 , G06F9/4887 , G06F11/1004 , G06F11/28 , G06F11/3688 , G06F21/44 , G06F21/52
Abstract: Synchronization points are inserted into a program code to be monitored, and are associated with different branches resulting from execution of an indirect branch instruction. The synchronization points can be accessed by the monitored program code for the purpose of identifying which branch to use during execution of the indirect branch instruction of the monitored program code.
-
公开(公告)号:US20200319247A1
公开(公告)日:2020-10-08
申请号:US16909696
申请日:2020-06-23
Applicant: STMicroelectronics (Rousset) SAS
Inventor: Lionel Sinegre , Eric Sagnard , Stephan Courcambeck , William Orlando , Layachi Daineche
IPC: G01R31/317 , G06F11/22 , G06F9/4401 , G06F11/36 , G06F21/75 , G06F21/62
Abstract: A method for managing a product includes: placing an integrated circuit in a bootstrap mode with debugging prohibition in response to each reset or power-up of the integrated circuit and in an absence of a reception, on a test access port of the product, of a first command; and placing the integrated circuit in an analysis mode with debugging authorization in response to reception, on the test access port, of the first command following the reset or the power-up of the integrated circuit. Placing the integrated circuit in the analysis mode is maintained at least as long as a second command has not been received on the test access port. Placing the integrated circuit in the bootstrap mode and placing the integrated circuit in the analysis mode are performed in response to a determination that the integrated circuit has never before been placed in the analysis mode with debugging authorization.
-
公开(公告)号:US20190107576A1
公开(公告)日:2019-04-11
申请号:US16155953
申请日:2018-10-10
Applicant: STMicroelectronics (Rousset) SAS
Inventor: Lionel Sinegre , Eric Sagnard , Stephan Courcambeck , William Orlando , Layachi Daineche
IPC: G01R31/317 , G06F11/36 , G06F9/4401 , G06F11/22
Abstract: A method for managing a product includes: placing an integrated circuit in a bootstrap mode with debugging prohibition in response to each reset or power-up of the integrated circuit and in an absence of a reception, on a test access port of the product, of a first command; and placing the integrated circuit in an analysis mode with debugging authorization in response to reception, on the test access port, of the first command following the reset or the power-up of the integrated circuit. Placing the integrated circuit in the analysis mode is maintained at least as long as a second command has not been received on the test access port. Placing the integrated circuit in the bootstrap mode and placing the integrated circuit in the analysis mode are performed in response to a determination that the integrated circuit has never before been placed in the analysis mode with debugging authorization.
-
-
-
-
-
-
-
-
-