Management of data processing security in a secondary processor
    1.
    发明授权
    Management of data processing security in a secondary processor 有权
    二次处理器中数据处理安全性的管理

    公开(公告)号:US08959304B2

    公开(公告)日:2015-02-17

    申请号:US13777338

    申请日:2013-02-26

    Applicant: ARM Limited

    CPC classification number: G06F12/145

    Abstract: A data processing apparatus comprises a primary processor, a secondary processor configured to perform secure data processing operations and non-secure data processing operations and a memory configured to store secure data used by the secondary processor when performing the secure data processing operations and configured to store non-secure data used by the secondary processor when performing the non-secure data processing operations, wherein the secure data cannot be accessed by the non-secure data processing operations, wherein the secondary processor comprises a memory management unit configured to administer accesses to the memory from the secondary processor, the memory management unit configured to perform translations between virtual memory addresses used by the secondary processor and physical memory addresses used by the memory, wherein the translations are configured in dependence on a page table base address, the page table base address identifying a storage location in the memory of a set of descriptors defining the translations, wherein the page table base address is defined by the primary processor and cannot be amended by the secondary processor.

    Abstract translation: 数据处理装置包括主处理器,被配置为执行安全数据处理操作和非安全数据处理操作的辅助处理器,以及被配置为在执行安全数据处理操作时存储由辅助处理器使用的安全数据的存储器,并且被配置为存储 在执行非安全数据处理操作时由辅助处理器使用的非安全数据,其中所述安全数据不能被所述非安全数据处理操作访问,其中所述辅助处理器包括存储器管理单元,所述存储器管理单元被配置为管理对 来自二级处理器的存储器,所述存储器管理单元被配置为在所述辅助处理器使用的虚拟存储器地址和所述存储器使用的物理存储器地址之间执行转换,其中,所述转换根据页表基地址,所述页表基 地址识别存储位置 定义翻译的一组描述符的存储器,其中页表基地址由主处理器定义并且不能被辅助处理器修改。

Patent Agency Ranking