公开(公告)号：WO2019070195A1

公开(公告)日：2019-04-11

申请号：PCT/SG2018/050493

申请日：2018-09-28

Applicant: HUAWEI INTERNATIONAL PTE. LTD.

Inventor： DAI, Ting ,  WU, Yongzheng ,  LI, Tieyan

IPC: G06F21/79 ,  G06F21/55 ,  H04L9/00 ,  G06F12/14

CPC classification number: G06F21/79 ,  G06F12/145 ,  G06F21/556 ,  G06F2212/1052 ,  H04L9/004 ,  H04L2209/12

Abstract: A computer implemented method (200) for preventing rowhammer attack in a computing device is disclosed. The device has memory which includes a plurality of untrusted memory portions and a plurality of trusted memory portions, the plurality of untrusted memory portions and trusted memory portions being distributed within the memory. The method comprises: determining (202) respective trusted memory portions that are arranged physically contiguous to respective at least one untrusted memory portion to provide an identified set of trusted memory portions, the respective untrusted memory portions being accessible to perform the attack on the respective trusted memory portions; determining (204) trusted memory portions in the identified set of trusted memory portions that are movable to a different memory location in the memory; moving (206) the movable trusted memory portions to an available memory location in the memory to form a block of trusted memory portions; generating (208) at least one memory guard portion; and configuring (210) the memory guard portion to be arranged at an end of the block of trusted memory portions that is physically contiguous to an untrusted memory portion. The memory guard portion prevents electrical-interaction between the block of trusted memory portions and the untrusted memory portion to prevent the attack.

公开(公告)号：WO2017078624A1

公开(公告)日：2017-05-11

申请号：PCT/SG2016/050539

申请日：2016-11-03

Applicant: HUAWEI INTERNATIONAL PTE. LTD.

Inventor： WU, Yongzheng ,  WEN, Xuejun

IPC: G06F21/51 ,  G06F21/62 ,  G06F21/64

CPC classification number: G06F21/51 ,  G06F21/629 ,  G06F21/64 ,  G06F2221/2141

Abstract: This document discloses a system and method for managing installation of an application package (APK) in a device whereby the APK requires the device to grant specific high-risk permissions to the application upon installation.

Abstract translation: 该文件公开了一种用于管理设备中的应用程序包（APK）的安装的系统和方法，由此APK需要设备在安装时向应用程序授予特定的高风险许可。

公开(公告)号：WO2018156085A1

公开(公告)日：2018-08-30

申请号：PCT/SG2018/050086

申请日：2018-02-26

Applicant: HUAWEI INTERNATIONAL PTE. LTD.

Inventor： DAI, Ting ,  WU, Yongzheng

IPC: G06F21/54 ,  G06F21/51

Abstract: This document describes a device and method for a device to reinforce the control flow integrity of a software application as the application is being executed on the device.

公开(公告)号：WO2017171634A1

公开(公告)日：2017-10-05

申请号：PCT/SG2017/050102

申请日：2017-03-03

Applicant: HUAWEI INTERNATIONAL PTE. LTD.

Inventor： WU, Yongzheng ,  WEN, Xuejun ,  FANG, Chengfang ,  LI, Tieyan

IPC: G06F21/70

Abstract: This document discloses a system and method for verifying system integrity of an electronic device. The electronic device includes a verifier module provided within a secure environment of the electronic device and a scanner module provided within a normal environment of the electronic device whereby the secure environment comprises hardware that is isolated from the hardware in the normal environment, i.e. these two environments are hardware isolated.

Abstract translation: 该文件公开了用于验证电子设备的系统完整性的系统和方法。 电子设备包括设置在电子设备的安全环境内的验证者模块和设置在电子设备的正常环境内的扫描仪模块，由此安全环境包括在正常环境中与硬件隔离的硬件，即，这两个环境 是硬件隔离的。