公开(公告)号：US10719606B2

公开(公告)日：2020-07-21

申请号：US15903227

申请日：2018-02-23

申请人： Infineon Technologies AG

发明人： Oscar David Sanchez Diaz ,  Jurijus Cizas ,  Jeffrey Kelley ,  Mark Stafford

IPC分类号： G06F21/57 ,  G06F21/51 ,  G06F21/60 ,  G06F21/64 ,  G06F11/14 ,  G06F21/44 ,  G06F9/445

摘要： Dynamic Trust Manager (DTM) having an interface coupled to an embedded system including an Application Processor (AP), boot media, and security processor. The security processor, at a start of a boot sequence of the AP, prevents the AP from proceeding with the boot sequence, verifies bootloader code stored in the boot media via boot media access, and if the bootloader code verification is successful, allows the AP to proceed using the verified bootloader code. The security processor may also be configured to activate an interrupt request of the AP during runtime, request the AP to execute a Security Monitor Driver (SMD) of the embedded system to measure an integrity information of code/data stored in an embedded system memory, receive from the SMD the measured integrity information of code/data, and verify whether the measured integrity information equals a reference integrity information stored in an integrity table of a DTM memory.

公开(公告)号：US20190266331A1

公开(公告)日：2019-08-29

申请号：US15903227

申请日：2018-02-23

申请人： Infineon Technologies AG

发明人： Oscar David Sanchez Diaz ,  Jurijus Cizas ,  Jeffrey Kelley ,  Mark Stafford

IPC分类号： G06F21/57 ,  G06F21/51 ,  G06F21/60 ,  G06F21/44 ,  G06F21/64 ,  G06F11/14

摘要： Dynamic Trust Manager (DTM) having an interface coupled to an embedded system including an Application Processor (AP), boot media, and security processor. The security processor, at a start of a boot sequence of the AP, prevents the AP from proceeding with the boot sequence, verifies bootloader code stored in the boot media via boot media access, and if the bootloader code verification is successful, allows the AP to proceed using the verified bootloader code. The security processor may also be configured to activate an interrupt request of the AP during runtime, request the AP to execute a Security Monitor Driver (SMD) of the embedded system to measure an integrity information of code/data stored in an embedded system memory, receive from the SMD the measured integrity information of code/data, and verify whether the measured integrity information equals a reference integrity information stored in an integrity table of a DTM memory.