公开(公告)号：US20170041290A1

公开(公告)日：2017-02-09

申请号：US15048531

申请日：2016-02-19

Applicant: Samsung Electronics Co., Ltd.

Inventor： Peng NING ,  Stephen E. MCLAUGHLIN ,  Michael C. GRACE ,  Ahmed M. AZAB ,  Rohan BHUTKAR ,  Wenbo SHEN ,  Xun CHEN ,  Yong CHOI ,  Ken CHEN

IPC: H04L29/06 ,  G07C5/08 ,  H04W12/10 ,  G06F13/40 ,  H04L9/32 ,  G07C5/02 ,  G06F13/10

CPC classification number: H04L63/0209 ,  G06F13/102 ,  G06F13/4068 ,  G07C5/008 ,  G07C5/02 ,  G07C5/08 ,  H04L9/3247 ,  H04L63/0823 ,  H04L63/101 ,  H04L67/12 ,  H04W12/08 ,  H04W12/10

Abstract: An apparatus and method of an attachment device for interfacing with an on-board diagnostic system of a vehicle is provided. The device includes an application processor configured to receive input from a terminal, control processing of the input by the on-board diagnostic system, transmit a result of the processing of the input by the on-board diagnostic system to the terminal, and a secure element interposed in the communication path between the application processor and the on-board diagnostic system, the secure element configured to filter the input of an on-board diagnostic operation that is untrusted.

Abstract translation: 提供了一种用于与车载车载诊断系统进行接口的附接装置的装置和方法。 该设备包括：应用处理器，被配置为从终端接收输入，对车载诊断系统的输入进行控制处理，将车载诊断系统的输入处理结果发送到终端;以及安全 插入在应用处理器和车载诊断系统之间的通信路径中的元件，安全元件被配置为过滤不可信任的车载诊断操作的输入。

公开(公告)号：US20190228149A1

公开(公告)日：2019-07-25

申请号：US16367530

申请日：2019-03-28

Applicant: Samsung Electronics Co., Ltd.

Inventor： James GLEESON ,  Ahmed AZAB ,  Wenbo SHEN ,  Rohan BHUTKAR

IPC: G06F21/55 ,  G06F21/57 ,  G06F21/12

Abstract: An apparatus and a method for protecting kernel control-flow integrity using static binary instrumentation are provided. The method includes configuring a compiler to reserve a register in a processor, compiling source code into a binary based on the configured compiler, and modifying the binary to prevent exploits using the reserved register, wherein the reserved register stores a first encryption key for encrypting and decrypting return addresses. The reserved register stores an encryption key that is used to encrypt and decrypt return addresses to prevent control flow exploits.

公开(公告)号：US20170140148A1

公开(公告)日：2017-05-18

申请号：US15340447

申请日：2016-11-01

Applicant: Samsung Electronics Co., Ltd.

Inventor： James GLEESON ,  Ahmed AZAB ,  Wenbo SHEN ,  Rohan BHUTKAR

IPC: G06F21/55 ,  G06F21/12 ,  G06F21/57

CPC classification number: G06F21/556 ,  G06F8/41 ,  G06F21/125 ,  G06F21/57 ,  G06F2221/033

Abstract: An apparatus and a method for protecting kernel control-flow integrity using static binary instrumentation are provided. The method includes configuring a compiler to reserve a register in a processor, compiling source code into a binary based on the configured compiler, and modifying the binary to prevent exploits using the reserved register, wherein the reserved register stores a first encryption key for encrypting and decrypting return addresses. The reserved register stores an encryption key that is used to encrypt and decrypt return addresses to prevent control flow exploits.

公开(公告)号：US20170098070A1

公开(公告)日：2017-04-06

申请号：US15048534

申请日：2016-02-19

Applicant: Samsung Electronics Co., Ltd.

Inventor： Peng NING ,  Stephen E. MCLAUGHLIN ,  Michael C. GRACE ,  Ahmed M. AZAB ,  Rohan BHUTKAR ,  Wenbo SHEN ,  Xun CHEN ,  Yong CHOI ,  Ken CHEN

IPC: G06F21/51 ,  G06F21/60

CPC classification number: G06F21/51 ,  G06F21/57 ,  G06F21/602 ,  G06F21/64 ,  G06F21/85 ,  G06F2221/034 ,  G07C5/0808

Abstract: An apparatus and method of a hardware isolated secure element protecting a plurality of mission critical subsystems are provided. The method includes performing an actuation operation received across an unsecure path that modifies the state of a mission critical subsystem, performing a diagnostic operation received across the unsecure path that requests state information of the mission critical subsystem, storing information used to determine which of the diagnostic operation and the actuation operation received across the unsecure path are performed, and flashing an execution image of an electronic control unit when the execution image of the electronic control unit is received across the unsecure path.