Securing external data storage for a secure element integrated on a system-on-chip

    公开(公告)号:US12169588B2

    公开(公告)日:2024-12-17

    申请号:US17439368

    申请日:2019-08-29

    Applicant: Google LLC

    Abstract: Techniques and apparatuses are described that implement the secure external data storage. A computing system may include a system-on-chip as a main processing complex and one or more secure elements that execute specialized functions related to sensitive information. While the secure element may use an external flash for storage for performance reasons, storing sensitive information on an external flash may expose the sensitive information if the external flash is ever compromised. The disclosed techniques and apparatuses provide an integrated secure element, of a system-on-chip, which leverages a secure channel with a secure flash to manage a cryptographic key for securing sensitive information stored on an unsecured external flash to prevent the exposure of sensitive information.

    MACHINE LEARNING BASED PRIVACY PROCESSING

    公开(公告)号:US20220335945A1

    公开(公告)日:2022-10-20

    申请号:US17638613

    申请日:2020-12-17

    Applicant: Google LLC

    Abstract: Methods, systems, and apparatus, for handling applications in an ambient computing system with a privacy processor. One of the methods includes to remain in a monitoring power state until a controller receives an interrupt indicating that one or more sensor signals are present. The one or more sensor signals are provided as input to a machine learning engine. An inference pass is performed by the machine learning engine to generate an output representing a particular context that is specific to a particular user. It is determined that one or more components of an ambient computing system should be disabled based on the on the particular context for the particular user. In response, the one or more components of the ambient computing system are disabled.

    Secure Transient Buffer Management

    公开(公告)号:US20220067222A1

    公开(公告)日:2022-03-03

    申请号:US17500819

    申请日:2021-10-13

    Applicant: Google LLC

    Abstract: Methods and systems are described that secure application data being maintained in transient data buffers that are located in a memory that is freely accessible to other components, regardless as to whether those components have permission to access the application data. The system includes an application processor, a memory having a portion configured as a transient data buffer, a hardware unit, and a secure processor. The hardware unit accesses the transient data buffer during execution of an application at the application processor. The secure processor is configured to manage encryption of the transient data buffer as part of giving the hardware unit access to the transient data buffer.

    Secure transient buffer management

    公开(公告)号:US11188685B2

    公开(公告)日:2021-11-30

    申请号:US16283539

    申请日:2019-02-22

    Applicant: Google LLC

    Abstract: A system is described that secures application data being maintained in transient data buffers that are located in a memory that is freely accessible to other components of the system, regardless as to whether those components have permission to access the application data. The system includes an application processor, a memory having a portion configured as a transient data buffer, a hardware unit, and a secure processor. The hardware unit accesses the transient data buffer during execution of an application at the application processor. The secure processor is configured to manage encryption of the transient data buffer as part of giving the hardware unit access to the transient data buffer.

    Securing External Data Storage for a Secure Element Integrated on a System-on-Chip

    公开(公告)号:US20220156411A1

    公开(公告)日:2022-05-19

    申请号:US17439368

    申请日:2019-08-29

    Applicant: Google LLC

    Abstract: Techniques and apparatuses are described that implement the secure external data storage. A computing system may include a system-on-chip as a main processing complex and one or more secure elements that execute specialized functions related to sensitive information. While the secure element may use an external flash for storage for performance reasons, storing sensitive information on an external flash may expose the sensitive information if the external flash is ever compromised. The disclosed techniques and apparatuses provide an integrated secure element, of a system-on-chip, which leverages a secure channel with a secure flash to manage a cryptographic key for securing sensitive information stored on an unsecured external flash to prevent the exposure of sensitive information.

    Central and Delegate Security Processors for a Computing Device

    公开(公告)号:US20190073491A1

    公开(公告)日:2019-03-07

    申请号:US15697059

    申请日:2017-09-06

    Applicant: Google LLC

    Abstract: The present disclosure describes use of two security processors for a mobile device. In some aspects, a first security processor device embodied in a security component of an apparatus receives a user input via an input device and transmits a security condition signal to a second security processor device embodied in a System on Chip (SoC) component of the apparatus, causing the SoC component to perform a security operation. In other aspects, the first security processor receives a signal via a sensor device sensing environmental conditions surrounding the apparatus and, in response, transmits a security condition signal to the second security processor, causing the SoC component to perform a security operation. The security operation is directly controlled, maintained, and implemented by the second security processor embodied in the SoC component.

    Secure Transient Buffer Management

    公开(公告)号:US20220198074A1

    公开(公告)日:2022-06-23

    申请号:US17654113

    申请日:2022-03-09

    Applicant: Google LLC

    Abstract: Methods and systems are described that secure application data being maintained in transient data buffers that are located in a memory that is freely accessible to other components, regardless as to whether those components have permission to access the application data. The system includes an application processor, a memory having a portion configured as a transient data buffer, a hardware unit, and a secure processor. The hardware unit accesses the transient data buffer during execution of an application at the application processor. The secure processor is configured to manage encryption of the transient data buffer as part of giving the hardware unit access to the transient data buffer.

    Secure Transient Buffer Management
    10.
    发明申请

    公开(公告)号:US20200272770A1

    公开(公告)日:2020-08-27

    申请号:US16283539

    申请日:2019-02-22

    Applicant: Google LLC

    Abstract: A system is described that secures application data being maintained in transient data buffers that are located in a memory that is freely accessible to other components of the system, regardless as to whether those components have permission to access the application data. The system includes an application processor, a memory having a portion configured as a transient data buffer, a hardware unit, and a secure processor. The hardware unit accesses the transient data buffer during execution of an application at the application processor. The secure processor is configured to manage encryption of the transient data buffer as part of giving the hardware unit access to the transient data buffer.

Patent Agency Ranking