# US 11,113,399 B2 · Electronic apparatus and control method of electronic apparatus > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,113,399 B2 - Document ID: US11113399B2 - Status: Granted - Kind: B2 - Application number: 16/539,908 - Filed: 2019-08-13 - Published: 2020-09-17 - Granted: 2021-09-07 - Earliest claimed: 2019-03-12 - Assignees: Toshiba Memory Corporation - Applicants: Toshiba Memory Corporation - Inventors: Naoko Yamada; Yuki Kanbe - Web page: https://patentgrep.com/patent/US11113399B2 ## CPC - G06F 21/572: {Secure firmware programming, e.g. of basic input output system [BIOS]} - G06F 21/34: involving the use of external additional devices, e.g. dongles or smart cards - G06F 21/575: {Secure boot} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - G06F 21/79: in semiconductor storage media, e.g. directly-addressable memories - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract According to one embodiment, an electronic apparatus includes a first processor, a second processor with a security capability higher than a security capability of the first processor, a first nonvolatile memory to store a program which is to be executed by the first processor, and a volatile second memory to store the program and data that is to be referred to by the first processor while the first processor executes the program. The second processor is configured to authenticate a rewrite command requesting to change the data in the second memory and selectively execute the rewrite command based on the authentication. ## Claims ### Claim 1 An electronic apparatus comprising: a first hardware processor; a second hardware processor with a security capability higher than a security capability of the first hardware processor; a first hardware memory that is nonvolatile and configured to store a program which is to be executed by the first hardware processor, the first hardware memory including a first region configured to store the program and a second region configured to store log data of the electronic apparatus; a second hardware memory that is volatile and configured to store the program, data that is to be referred to by the first hardware processor while the first hardware processor executes the program, and control data indicating whether to permit the log data to be read from the second region; and a command execution circuit configured to set a specific region of the second hardware memory as an access prohibition region before a rewrite command is executed, the rewrite command requesting to change data in the second hardware memory, the rewrite command including a command configured to change a value of the control data stored in the second hardware memory into a value indicating that the log data is permitted to be read from the second region, the specific region of the second hardware memory including a region configured to store security information of the first hardware processor, wherein the second hardware processor is configured to authenticate the rewrite command, selectively execute the rewrite command based on the authentication, and execute the rewrite command if the authentication succeeds. ### Claim 2 (depends on 1) The electronic apparatus according to claim 1, wherein the second hardware processor is configured to perform secure booting processing. ### Claim 3 (depends on 1) The electronic apparatus according to claim 1, wherein an initial value of the control data is configured to indicate that the log data is not permitted to be read from the second region. ### Claim 4 (depends on 1) The electronic apparatus according to claim 1, wherein the control data includes data indicating whether to permit use of an interface for outputting the log data. ### Claim 5 (depends on 1) The electronic apparatus according to claim 1, wherein the first hardware memory includes a first region configured to store the program and a second region configured to store log data of the electronic apparatus, the program stored in the first region not permitting the log data to be read from the first hardware memory, wherein the second hardware memory includes a third region configured to store the program read from the first region, wherein the rewrite command includes a command configured to change at least a part of the program stored in the third region to permit the log data to be read from the second region, wherein the second hardware processor is configured to execute the rewrite command if the authentication succeeds. ### Claim 6 (depends on 5) The electronic apparatus according to claim 5, wherein the rewrite command includes a command configured to change at least a part of the program stored in the third region to permit use of an interface for outputting the log data. ### Claim 7 (depends on 1) The electronic apparatus according to claim 1, wherein the rewrite command includes a command configured to change data of a register that is to be referred to by the first hardware processor while the first hardware processor executes the program. ### Claim 8 A control method, comprising: storing, in a first hardware memory that is nonvolatile, a program to be executed by a first hardware processor, wherein the first hardware memory includes a first region configured to store the program and a second region configured to store log data of the electronic apparatus; storing, in a second hardware memory that is volatile, the program and data that is to be referred to by the first hardware processor while the first hardware processor executes the program and control data indicating whether to permit the log data to be read from the second region; setting, by a command execution circuit, a specific region of the second hardware memory as an access prohibition region before a rewrite command is executed, wherein the specific region of the second hardware memory includes a region configured to store security information of the first hardware processor; authenticating, by a second hardware processor with a security capability higher than a security capability of the first hardware processor, the rewrite command requesting to change the data in the second hardware memory, wherein the rewrite command includes a command configured to change a value of the control data stored in the second hardware memory into a value indicating that the log data is permitted to be read from the second region; and selectively executing, by the second hardware processor, the rewrite command based on the authentication; executing, by the second hardware processor, the rewrite command if the authentication succeeds. ### Claim 9 (depends on 8) The method according to claim 8, further comprising: performing, by the second hardware processor, secure booting processing. ### Claim 10 (depends on 8) The method according to claim 8, wherein an initial value of the control data is configured to indicate that the log data is not permitted to be read from the second region. ### Claim 11 (depends on 8) The method according to claim 8, wherein the control data includes data indicating whether to permit use of an interface for outputting the log data. ### Claim 12 (depends on 8) The method according to claim 8, wherein the first hardware memory includes a first region configured to store the program and a second region configured to store log data of the electronic apparatus, the program stored in the first region not permitting the log data to be read from the first hardware memory, wherein the second hardware memory includes a third region configured to store the program read from the first region, and wherein the rewrite command includes a command configured to change at least a part of the program stored in the third region to permit the log data to be read from the second region, the method further comprising: executing, by the second hardware processor, the rewrite command if the authentication succeeds. ### Claim 13 (depends on 12) The method according to claim 12, wherein the rewrite command includes a command configured to change at least a part of the program stored in the third region to permit use of an interface for outputting the log data. ### Claim 14 (depends on 8) The method according to claim 8, wherein the rewrite command includes a command configured to change data of a register that is to be referred to by the first hardware processor while the first hardware processor executes the program.