Security device with extended reliability

    公开(公告)号:US11227072B2

    公开(公告)日:2022-01-18

    申请号:US16108505

    申请日:2018-08-22

    Abstract: The present disclosure relates to a security device, a system, and a method for securing a control apparatus. The security device includes a data security unit which is configured to secure data, data communication and information, and includes a first security component inside the data security unit to operate in a first operating mode, and at least one first monitoring unit to operate in a high-availability mode which, said first monitoring unit being configured to detect a fault present in the first security component. The high-availability mode is different from the first operating mode. The security device further includes a second security component which is configured to operate in the high-availability mode and to output a first response signal if a fault is detected by the first monitoring, where the high-availability mode is available independently from the first operating mode.

    Memory protecting unit and method for protecting a memory address space

    公开(公告)号:US10372630B2

    公开(公告)日:2019-08-06

    申请号:US15784403

    申请日:2017-10-16

    Abstract: A memory protector is configured to evaluate access requests referring to a memory address space. The access requests comprise address parameters referring to addresses of the memory address space. The memory protector comprises an address evaluator, an address results combiner, and a data register. The address evaluator is configured to evaluate whether the address parameters refer to address ranges of a set of address ranges and is configured to provide results regarding the address ranges. The address results combiner is configured to combine results provided by the address evaluator depending on access protection groups to which the address ranges are mapped to. The memory protector is configured to provide access grant results based on combinations provided by the address results combiner. The data register is configured to store data concerning the set of address ranges and concerning a mapping of the address ranges to the access protection groups.

    Virtual machine monitor interrupt support for computer processing unit (CPU)

    公开(公告)号:US10248595B2

    公开(公告)日:2019-04-02

    申请号:US15673943

    申请日:2017-08-10

    Abstract: An interrupt interface of a central processing unit (CPU) comprises a bus with a plurality of interfaces to various components of the CPU. These components can include a memory that includes instructions to execute operations of a processor component, a plurality of virtual machines (VMs) and a virtual machine monitor (VMM)/hypervisor configured to execute the plurality of VMs. The processor can receive interrupt requests (interrupt) as service requests in parallel, which can be executed by the VMM or any one or more of the plurality of VMs to execute VM applications on a dedicated instance of a guest operating system for a task. The processor can further determine whether to grant an interrupt request to the VMM and the VMs based on predetermined criteria, including a current task priority, a pending interrupt priority, or an interrupt enable, associated with the current status of each of the component.

    Virtual Machine Monitor Interrupt Support for Computer Processing Unit (CPU)

    公开(公告)号:US20190050356A1

    公开(公告)日:2019-02-14

    申请号:US15673943

    申请日:2017-08-10

    Abstract: An interrupt interface of a central processing unit (CPU) comprises a bus with a plurality of interfaces to various components of the CPU. These components can include a memory that includes instructions to execute operations of a processor component, a plurality of virtual machines (VMs) and a virtual machine monitor (VMM)/hypervisor configured to execute the plurality of VMs. The processor can receive interrupt requests (interrupt) as service requests in parallel, which can be executed by the VMM or any one or more of the plurality of VMs to execute VM applications on a dedicated instance of a guest operating system for a task. The processor can further determine whether to grant an interrupt request to the VMM and the VMs based on predetermined criteria, including a current task priority, a pending interrupt priority, or an interrupt enable, associated with the current status of each of the component.

    Service request interrupt router with shared arbitration unit
    38.
    发明授权
    Service request interrupt router with shared arbitration unit 有权
    具有共享仲裁单元的服务请求中断路由器

    公开(公告)号:US09575912B2

    公开(公告)日:2017-02-21

    申请号:US14247972

    申请日:2014-04-08

    CPC classification number: G06F13/26 G06F13/28 Y02D10/14

    Abstract: A service request interrupt router having Interrupt Control Units (ICUs); and an arbitration unit configured to be shared by the ICUs to arbitrate among Service Request Nodes (SRNs) that have respective service request interrupt signals and that are mapped to the ICUs, to determine for each of the ICUs which of the SRNs has a highest priority.

    Abstract translation: 具有中断控制单元(ICU)的服务请求中断路由器; 以及仲裁单元,被配置为由所述ICU共享以在具有各自的服务请求中断信号且映射到所述ICU的服务请求节点(SRN)之间进行仲裁,以针对每个所述ICU确定所述SRN中哪一个具有最高优先级 。

    BUS SYSTEM AND METHOD OF PROTECTED MEMORY ACCESS
    39.
    发明申请
    BUS SYSTEM AND METHOD OF PROTECTED MEMORY ACCESS 有权
    总线系统和保护存储器访问方法

    公开(公告)号:US20150089175A1

    公开(公告)日:2015-03-26

    申请号:US14494078

    申请日:2014-09-23

    CPC classification number: G06F12/1458 G06F13/28 G06F2212/1052

    Abstract: A bus system includes a functional unit to which a unit identifier is assigned, a memory module for storage of data that has a storage region, and a bus. The functional unit is connected to the memory module via the bus. The storage region is configured such that one or more multiple global authorized identifiers are assigned thereto, so that the functional unit only has reading or writing access to the storage region if the unit identifier assigned to the functional unit corresponds to one of the global authorized identifiers assigned to the storage region.

    Abstract translation: 总线系统包括分配有单元标识符的功能单元,用于存储具有存储区域的数据的存储器模块和总线。 功能单元通过总线连接到存储模块。 存储区域被配置为使得一个或多个多个全局授权标识符被分配给其,使得如果分配给功能单元的单元标识符对应于全局授权标识符之一,则功能单元仅对存储区域具有读取或写入访问 分配到存储区域。

    DMA Integrity Checker
    40.
    发明申请
    DMA Integrity Checker 有权
    DMA完整性检查器

    公开(公告)号:US20140108869A1

    公开(公告)日:2014-04-17

    申请号:US13651775

    申请日:2012-10-15

    CPC classification number: G06F11/1048

    Abstract: Some embodiments relate to a Direct Memory Access (DMA) controller. The DMA controller includes a set of transaction control registers to receive a sequence of transaction control sets that collectively describe a data transfer to be processed by the DMA controller. A bus controller reads and writes to memory while the DMA controller executes a first transaction control set to accomplish part of the data transfer described in the sequence of transaction control sets. An integrity checker determines an actual error detection code based on data or an address actually processed by the DMA controller during execution of the first transaction control set. The integrity checker also selectively flags an error based on whether the actual error detection code is the same as an expected error detection code contained in a second transaction control set of the sequence of transaction control sets.

    Abstract translation: 一些实施例涉及直接存储器访问(DMA)控制器。 DMA控制器包括一组事务控制寄存器,用于接收共同描述要由DMA控制器处理的数据传输的事务控制集合的序列。 总线控制器读取和写入存储器,而DMA控制器执行第一事务控制集以完成事务控制集序列中描述的部分数据传输。 完整性检查器基于在执行第一事务控制集期间由DMA控制器实际处理的数据或地址来确定实际的错误检测码。 完整性检查器还基于实际错误检测码是否与包含在事务控制集合的顺序的第二事务控制集中的期望错误检测码相同来选择性地标记错误。

Patent Agency Ranking