公开(公告)号：US20180260280A1

公开(公告)日：2018-09-13

申请号：US15456870

申请日：2017-03-13

Applicant: Infineon Technologies AG

Inventor： Boyko Traykov ,  Veit Kleeberger ,  Rafael Zalman

IPC: G06F11/14

CPC classification number: G06F11/1441 ,  G06F11/1438 ,  G06F11/2221 ,  G06F11/2284

Abstract: A microcontroller system includes a processing unit, a first peripheral having a first set of registers, and an assurance module. The first peripheral is configured to receive a first reset signal that resets the first set of registers to a first actual reset value, which is expected to be a first expected value. The assurance module is configured to calculate a first signature value, which is based on the first actual reset value, in response to the first reset signal. The processing unit is configured to perform a first comparison between the calculated first signature value and a pre-determined first signature value to determine whether the microcontroller system is in a trusted safety state. The first comparison is performed in response to the first reset signal, and the pre-determined first signature value is based on the first expected value.

公开(公告)号：US10372545B2

公开(公告)日：2019-08-06

申请号：US15456870

申请日：2017-03-13

Applicant: Infineon Technologies AG

Inventor： Boyko Traykov ,  Veit Kleeberger ,  Rafael Zalman

IPC: G06F11/00 ,  G06F11/14 ,  G06F11/22

Abstract: A microcontroller system includes a processing unit, a first peripheral having a first set of registers, and an assurance module. The first peripheral is configured to receive a first reset signal that resets the first set of registers to a first actual reset value, which is expected to be a first expected value. The assurance module is configured to calculate a first signature value, which is based on the first actual reset value, in response to the first reset signal. The processing unit is configured to perform a first comparison between the calculated first signature value and a pre-determined first signature value to determine whether the microcontroller system is in a trusted safety state. The first comparison is performed in response to the first reset signal, and the pre-determined first signature value is based on the first expected value.