公开(公告)号：US10564997B2

公开(公告)日：2020-02-18

申请号：US15683889

申请日：2017-08-23

Applicant: SAMSUNG ELECTRONICS CO., LTD.

Inventor： Sung-Min Hong ,  Woo-Hyung Chun ,  Young-Seok Kim ,  Sung-Jae Lee ,  Eun-Ok Jo

IPC: G06F9/455 ,  G06F9/48 ,  G06F9/50 ,  G06F21/53 ,  G06F12/1009 ,  G06F13/16

Abstract: A computing system includes a processor that operates a plurality of virtual machines in which a plurality of operating systems are respectively executed. The processor executes a hypervisor that groups the plurality of virtual machines into a normal virtual machine group and a privilege virtual machine group, and that controls hardware accesses requested by the normal virtual machine group and the privilege virtual machine group. The processor executes a normal application in the normal virtual machine group, and executes a secure application in the privilege virtual machine group.

公开(公告)号：US10657274B2

公开(公告)日：2020-05-19

申请号：US15170132

申请日：2016-06-01

Applicant: Samsung Electronics Co., Ltd.

Inventor： Kyong-Ho Cho ,  Woo-Hyung Chun ,  Dong-Jin Park ,  Seong-Min Jo ,  Jin-Sung Yang

IPC: G06F21/00 ,  G06F21/62 ,  G06F3/06 ,  G06F12/14

Abstract: Provided are semiconductor devices. A semiconductor device includes processors performing an operation using data stored in a memory; and a memory protector dividing the memory into a first window area and a second window area. The first window area including a first fragment page, which is of a first size. The second window area including a second fragment page, which is of a second size, wherein the second size is smaller than the first size. The memory protector configured to protect the first fragment page and the second fragment page from being accessed by the processors.

公开(公告)号：US10068110B2

公开(公告)日：2018-09-04

申请号：US14674869

申请日：2015-03-31

Applicant: SAMSUNG ELECTRONICS CO., LTD.

Inventor： Woo-Hyung Chun ,  Min-Je Jun ,  Sim-Ji Lee ,  Eui-Cheol Lim ,  Seong-Min Jo ,  Sung-Min Hong

IPC: G06F12/00 ,  G06F21/79 ,  G06F12/14 ,  G06F3/06

Abstract: A semiconductor device includes a first processing unit configured to perform a calculation by using data stored in a memory; and a memory path controller configured to communicate with the first processing unit and control the memory for the first processing unit to perform the calculation, wherein the memory path controller includes an address region control unit configured to divide an address space of the memory to include a secure address and a non-secure address and permit the first processing unit to access the secure address or the non-secure address, and a first content firewall unit connected with the address region control unit and configured to prevent the first processing unit from writing secure contents in the non-secure address.