Apparatuses and methods for decrypting encrypted data and locating the decrypted data in a memory space used for execution
    1.
    发明授权
    Apparatuses and methods for decrypting encrypted data and locating the decrypted data in a memory space used for execution 有权
    用于解密加密数据并将解密的数据定位在用于执行的存储器空间中的装置和方法

    公开(公告)号:US07747870B2

    公开(公告)日:2010-06-29

    申请号:US11790399

    申请日:2007-04-25

    IPC分类号: G06F9/00

    摘要: An encrypted-data decrypting apparatus that provides enhanced security protection for programs and data while they are in the processes of decryption to execution after having been encrypted. When a decrypted partial program needs to be loaded into the shared memory M, the controlling unit 11 loads it into an area indicated by the memory location information. According to the memory location information, a plurality of partial programs are sequentially loaded into an area so that one partial program gets overwritten by another; therefore, none of the partial programs exists in the memory for a long time, and thus there is less possibility of having the partial programs referred to illegitimately. In addition, since every time some data is decrypted, the decryption support program authenticating unit 13 confirms authenticity of the decryption support program P, it is possible to prevent having illegitimate references in which the decryption support program is abused.

    摘要翻译: 一种加密数据解密装置,当它们在被加密之后处于解密到执行的过程中时,为程序和数据提供增强的安全保护。 当解密的部分程序需要加载到共享存储器M中时,控制单元11将其加载到由存储器位置信息指示的区域中。 根据存储器位置信息,多个部分程序被顺序地加载到一个区域中,使得一个部分程序被另一部分程序重写; 因此,部分程序中的任何一个都不存在于存储器中很长一段时间,因此部分程序被非法地引用的可能性较小。 此外,由于每次解密一些数据时,解密支持程序认证单元13确认解密支持程序P的真实性,所以可以防止具有解密支持程序被滥用的非法参照。

    Apparatuses and methods for decrypting encrypted data and locating the decrypted data in a memory space used for execution
    2.
    发明授权
    Apparatuses and methods for decrypting encrypted data and locating the decrypted data in a memory space used for execution 有权
    用于解密加密数据并将解密的数据定位在用于执行的存储器空间中的装置和方法

    公开(公告)号:US07228423B2

    公开(公告)日:2007-06-05

    申请号:US10630674

    申请日:2003-07-31

    IPC分类号: G06F9/24

    摘要: An encrypted-data decrypting apparatus that provides enhanced security protection for programs and data while they are in the processes of decryption to execution after having been encrypted. When a decrypted partial program needs to be loaded into the shared memory M, the controlling unit 11 loads it into an area indicated by the memory location information. According to the memory location information, a plurality of partial programs are sequentially loaded into an area so that one partial program gets overwritten by another; therefore, none of the partial programs exists in the memory for a long time, and thus there is less possibility of having the partial programs referred to illegitimately. In addition, since every time some data is decrypted, the decryption support program authenticating unit 13 confirms authenticity of the decryption support program P, it is possible to prevent having illegitimate references in which the decryption support program is abused.

    摘要翻译: 一种加密数据解密装置,当它们在被加密之后处于解密到执行的过程中时,为程序和数据提供增强的安全保护。 当解密的部分程序需要被加载到共享存储器M中时,控制单元11将其加载到由存储器位置信息指示的区域中。 根据存储器位置信息,多个部分程序被顺序地加载到一个区域中,使得一个部分程序被另一部分程序重写; 因此,部分程序中的任何一个都不存在于存储器中很长一段时间,因此部分程序被非法地引用的可能性较小。 此外,由于每次解密一些数据时,解密支持程序认证单元13确认解密支持程序P的真实性,所以可以防止具有解密支持程序被滥用的非法参照。

    Data processing apparatus
    3.
    发明授权
    Data processing apparatus 有权
    数据处理装置

    公开(公告)号:US07788487B2

    公开(公告)日:2010-08-31

    申请号:US10580818

    申请日:2004-11-26

    IPC分类号: H04L29/06 G06F7/04 G06F13/00

    摘要: In a data processing apparatus that switches between a secure mode and a normal mode during execution, the secure mode allowing access to secure resources to be protected, the normal mode not allowing access to the secure resources, when the secure resources increase in the secure mode, the load on a protection mechanism for protecting the resources becomes large. Thus, there is a demand for data processing apparatuses that are able to reduce secure resources.The present invention relates to a data processing apparatus that stores therein a secure program including one or more processing procedures which use secure resources and a call instruction for calling a normal program to be executed in a normal mode. While executing the secure program, the data processing apparatus calls the normal program with the call instruction and operates according to the called normal program.

    摘要翻译: 在执行期间在安全模式和正常模式之间切换的数据处理装置中,当安全模式下的安全资源增加时,安全模式允许访问保护资源以被保护,正常模式不允许访问安全资源 用于保护资源的保护机制的负担变大。 因此,需要能够减少安全资源的数据处理装置。 数据处理装置本发明涉及一种数据处理装置,其中存储有一个或多个使用安全资源的处理过程的安全程序和用于调用在正常模式下执行的正常程序的呼叫指令。 在执行安全程序时,数据处理装置利用呼叫指令调用正常程序,并根据所调用的正常程序进行操作。

    Data processing apparatus
    5.
    发明申请
    Data processing apparatus 有权
    数据处理装置

    公开(公告)号:US20070113079A1

    公开(公告)日:2007-05-17

    申请号:US10580818

    申请日:2004-11-26

    IPC分类号: H04L9/00

    摘要: In a data processing apparatus that switches between a secure mode and a normal mode during execution, the secure mode allowing access to secure resources to be protected, the normal mode not allowing access to the secure resources, when the secure resources increase in the secure mode, the load on a protection mechanism for protecting the resources becomes large. Thus, there is a demand for data processing apparatuses that are able to reduce secure resources. The present invention relates to a data processing apparatus that stores therein a secure program including one or more processing procedures which use secure resources and a call instruction for calling a normal program to be executed in a normal mode. While executing the secure program, the data processing apparatus calls the normal program with the call instruction and operates according to the called normal program.

    摘要翻译: 在执行期间在安全模式和正常模式之间切换的数据处理装置中,当安全模式下的安全资源增加时,安全模式允许访问保护资源以被保护,正常模式不允许访问安全资源 用于保护资源的保护机制的负担变大。 因此,需要能够减少安全资源的数据处理装置。 数据处理装置本发明涉及一种数据处理装置,其中存储有一个或多个使用安全资源的处理过程的安全程序和用于调用在正常模式下执行的正常程序的呼叫指令。 在执行安全程序时,数据处理装置利用呼叫指令调用正常程序,并根据所调用的正常程序进行操作。

    Data conversion system for protecting software against analysis and tampering
    6.
    发明授权
    Data conversion system for protecting software against analysis and tampering 有权
    数据转换系统,用于保护软件免受分析和篡改

    公开(公告)号:US07444520B2

    公开(公告)日:2008-10-28

    申请号:US10856941

    申请日:2004-06-01

    IPC分类号: G06F9/00

    CPC分类号: G06F21/14

    摘要: An execution system including a loader which (i) causes an error in a program which has been started within a range in which the caused error is correctable based on an error correcting code, and (ii) loads the program, in which the error is caused, into a main memory. Further, the execution system includes a processor which simultaneously corrects the error and executes the program.

    摘要翻译: 一种执行系统,包括:(i)在基于纠错码的所述错误可修正的范围内已经启动的程序中导致错误的加载程序,以及(ii)加载错误是 造成,进入主要记忆。 此外,执行系统包括同时校正错误并执行程序的处理器。

    Secure processing device, method and program
    8.
    发明授权
    Secure processing device, method and program 有权
    安全处理设备,方法和程序

    公开(公告)号:US07650515B2

    公开(公告)日:2010-01-19

    申请号:US12160281

    申请日:2007-02-02

    IPC分类号: G06F11/30 G06F12/14

    CPC分类号: H04L9/3236 H04L2209/603

    摘要: A secure processing device having a power saving mode, which is used for built-in apparatuses, calculates a hash value of secure data that needs to be saved when switching to the power saving mode, stores the calculated hash value in a protection storage unit whose data is not lost even in the power saving mode, encrypts the secure data and stores the encrypted data in an external memory when switching to the power saving mode. When switching back to the normal power mode, the secure processing device decrypts the encrypted data, calculates a hash value of the decrypted data and compares the hash value with the hash value stored in the protection storage unit. The decrypted data is restored to the protection storage unit when the hash values are identical, but discarded together with the encrypted data stored in the external memory when the hash values are not identical.

    摘要翻译: 具有省电模式的安全处理装置,用于内置装置,计算切换到省电模式时需要保存的安全数据的哈希值,将计算出的散列值存储在保护存储部中, 即使在省电模式下数据也不会丢失,在切换到省电模式时,加密安全数据并将加密数据存储在外部存储器中。 当切换回正常功率模式时,安全处理装置解密加密数据,计算解密数据的散列值,并将哈希值与存储在保护存储单元中的散列值进行比较。 当哈希值相同时,解密的数据被恢复到保护存储单元,但是当哈希值不相同时,被解密的数据与存储在外部存储器中的加密数据一起被丢弃。

    Secure Processing Device and Secure Processing System
    10.
    发明申请
    Secure Processing Device and Secure Processing System 审中-公开
    安全处理设备和安全处理系统

    公开(公告)号:US20080168562A1

    公开(公告)日:2008-07-10

    申请号:US11885051

    申请日:2006-02-23

    IPC分类号: G06F21/22

    CPC分类号: G06F21/14

    摘要: A program storage unit 111 stores a plurality of protected programs. The disabled-program list storage unit 117 stores information of disabled protected programs. An execution program selection unit 112 selects one of the protected programs that is not disabled, with reference a disabled-program list. If malicious analysis is detected before the protected program is executed or during the execution of the protected program, a malicious analysis detection unit 116 stops the execution of the protected program, and a disabled-program update unit 118 enters the disabled program into the disabled-program list.

    摘要翻译: 程序存储单元111存储多个受保护程序。 禁用程序列表存储单元117存储禁用保护程序的信息。 执行程序选择单元112参考禁用程序列表来选择未禁用的受保护程序之一。 如果在受保护程序被执行之前或在执行受保护程序期间检测到恶意分析,恶意分析检测单元116停止执行受保护程序,并且禁用程序更新单元118将禁用的程序输入到禁用程序, 程序列表。