公开(公告)号：US20150248357A1

公开(公告)日：2015-09-03

申请号：US14494643

申请日：2014-09-24

Applicant: Advanced Micro Devices, Inc.

Inventor： David A. Kaplan ,  Thomas Roy Woller ,  Ronald Perez

IPC: G06F12/14

CPC classification number: G06F21/602 ,  G06F9/45558 ,  G06F12/1036 ,  G06F12/1408 ,  G06F21/53 ,  G06F2009/4557 ,  G06F2009/45583 ,  G06F2009/45587 ,  G06F2212/402

Abstract: A processor employs a hardware encryption module in the processor's memory access path to cryptographically isolate secure information. In some embodiments, the encryption module is located at a memory controller (e.g. northbridge) of the processor, and each memory access provided to the memory controller indicates whether the access is a secure memory access, indicating the data associated with the memory access is designated for cryptographic protection, or a non-secure memory access. For secure memory accesses, the encryption module performs encryption (for write accesses) or decryption (for read accesses) of the data associated with the memory access.

Abstract translation: 处理器在处理器的存储器访问路径中使用硬件加密模块来加密地隔离安全信息。 在一些实施例中，加密模块位于处理器的存储器控​​制器（例如北桥）处，并且提供给存储器控制器的每个存储器访问指示访问是否是安全存储器访问，指示与存储器访问相关联的数据被指定 用于加密保护或非安全存储器访问。 对于安全存储器访问，加密模块对与存储器访问相关联的数据进行加密（用于写访问）或解密（用于读访问）。

公开(公告)号：US09792448B2

公开(公告)日：2017-10-17

申请号：US14494643

申请日：2014-09-24

Applicant: Advanced Micro Devices, Inc.

Inventor： David A. Kaplan ,  Thomas Roy Woller ,  Ronald Perez

IPC: G06F21/60 ,  G06F12/14 ,  G06F9/455

CPC classification number: G06F21/602 ,  G06F9/45558 ,  G06F12/1036 ,  G06F12/1408 ,  G06F21/53 ,  G06F2009/4557 ,  G06F2009/45583 ,  G06F2009/45587 ,  G06F2212/402

Abstract: A processor employs a hardware encryption module in the processor's memory access path to cryptographically isolate secure information. In some embodiments, the encryption module is located at a memory controller (e.g. northbridge) of the processor, and each memory access provided to the memory controller indicates whether the access is a secure memory access, indicating the data associated with the memory access is designated for cryptographic protection, or a non-secure memory access. For secure memory accesses, the encryption module performs encryption (for write accesses) or decryption (for read accesses) of the data associated with the memory access.