Data processing device, method for executing an application and computer program product
AssigneeNXP B.V.
InventorThomas E. F. Wille
Life of this patent
Estimating the term…
Abstract
There is disclosed a data processing device for executing an application, the data processing device comprising a processing unit for controlling access to at least one user interface comprised in the data processing device, and a secure element for facilitating secure execution of the application, wherein executing the application comprises receiving input data from and/or sending output data to the user interface, and wherein the secure element is arranged to cause the processing unit to restrict the access to the user interface during execution of the application. Furthermore, a corresponding method for executing an application and a corresponding computer program product are disclosed.
Claims13
A data processing device configured to execute an application, the data processing device comprising:
- a processing unit comprising a user interface access controller that is configured to control access to both a user input interface and a user output interface, wherein the access to the user input interface is restricted by setting at least one control register in the processing unit to a value indicative of a secure access mode, and the processing unit further comprises a plurality of TrustZone control registers, each TrustZone control register configured to control a respective TrustZone function;
- a secure element configured to control the user interface access controller in the secure access mode, wherein the secure element is further configured to load a user interface access control program into the processing unit before switching the user interface application controller to the secure access mode and cause the user interface access controller in the processing unit to restrict access to the user input interface and the user output interface during execution of the application in the secure access mode, a security driver function resides in the secure element, and the secure element further comprises a TrustZone control unit configured to control the plurality of TrustZone control registers in the processing unit in the secure access mode.
A method for executing an application in a data processing device comprising a user interface access controller, the method comprising:
- controlling access, with the user interface access controller, to both a user input interface and a user output interface, comprised in the data processing;
- controlling the user interface access controller in a secure access mode, with a secure element;
- restricting access to the user input interface by setting at least one control register in a processing unit to a value indicative of a secure access mode device, wherein the processing unit comprises a plurality of TrustZone control registers, each TrustZone control register configured to control a respective TrustZone function;
- loading, with the secure element, a user interface access control program into the processing unit before switching the user interface application controller to the secure access mode;
- causing the user interface access controller in the processing unit to restrict the access to the user input interface and the user output interface during execution of the application in the secure access mode, wherein a security driver function resides in the secure element, and the secure element further comprises a TrustZone control unit configured to control the plurality of TrustZone control registers in the processing unit in the secure access mode;
- and
- receiving input data from the user input interface and sending output data to the user output interface.
A non-transitory computer readable medium comprising a program of instructions to carry out a method for executing an application in a data processing device comprising a user interface access controller, the non-transitory computer readable medium comprising:
- instructions for controlling access, with the user interface access controller, to both a user input interface and a user output interface, comprised in the data processing device;
- instructions for controlling the user interface access controller in a secure access mode, with a secure element;
- instructions for restricting access to the user input interface by setting at least one control register in a processing unit to a value indicative of a secure access mode, wherein the processing unit comprises a plurality of TrustZone control registers, each TrustZone control register configured to control a respective TrustZone function;
- instructions for loading, with the secure element, a user interface access control program into the processing unit before switching the user interface application controller to the secure access mode;
- instructions for causing the user interface access controller in the processing unit to restrict the access to the user input interface and the user output interface during execution of the application in the secure access mode, wherein a security driver function resides in the secure element, and the secure element further comprises a TrustZone control unit configured to control the plurality of TrustZone control registers in the processing unit in the secure access mode;
- and
- instructions for receiving input data from the user input interface and sending output data to the user output interface.
Dependencies are inferred from the claim text.