US 12,223,043 B2Granted

Electronic apparatus and security protection method

AssigneeHuawei Technologies Co., Ltd.

InventorShilin Pan

Life of this patent

Estimating the term…

Loading patent…

Abstract

An electronic apparatus and a security protection method are disclosed. The electronic apparatus includes a security protection apparatus and a first processor. Security isolation exists between the security protection apparatus and the first processor. The first processor is configured to operate when driven by software, and the software includes an operating system and/or an application. The security protection apparatus is configured to: perform security detection on the software, and when detecting that the software is tampered with, perform a security protection operation on the electronic apparatus. In this way, the electronic apparatus may be monitored in real time during an operating process of the electronic apparatus, to avoid theft or modification of important data such as key data and improve security.

Claims17

Dependent claims

An electronic apparatus, wherein the electronic apparatus comprises security protection circuits and a first processor, and security isolation exists between the security protection circuits and the first processor;

the first processor is configured to operate when driven by software, wherein the software comprises an operating system;
and
the security protection circuits are configured to:
perform security detection on the software, and when detecting that the software is tampered with, perform a security protection operation on the electronic apparatus;
wherein the security protection circuits are further configured to perform periodic security detection on the software based on a time period set by a timer, or perform security detection on the software based on an interrupt event sent by the first processor by:
controlling a hash accelerator comprised in the security protection circuits to obtain the software and perform a hash operation on the software to obtain a reference value;
and
comparing the reference value with a pre-stored hash reference value, and determine, based on a comparison result, whether the software is tampered with.

5 more elements

A security protection method, applied to an electronic apparatus, wherein the method comprises:

operating the electronic apparatus, by a first processor in the electronic apparatus wherein the first processor is driven by software and the software comprises an operating system;
performing, by security protection circuits in the electronic apparatus, security detection on the software, wherein security isolation exists between the security protection circuits and the first processor;
and
performing, by the security protection circuits, a security protection operation on the electronic apparatus when detecting that the software is tampered with;
wherein the operating system comprises a rich execution environment (REE) and a trusted execution environment (TEE) and wherein the security protection operation comprises:
when an operating environment of the first processor is switched from the REE to the TEE, periodically performing the security detection on software that is used to drive the operating environment of the first processor to be switched and software that operates in the TEE;
and
stopping performing the security detection when the operating environment of the first processor is switched from the TEE to the REE.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/902,220Filed 2 Sep 2022 · continuation
Priority: 6 Mar 2020
Published: US 2022/0414216 A129 Dec 2022
Granted: 11 Feb 2025
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/51
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: at application…
G06F 21/56
Detecting local intrusion or implementing counter-measures: computer malware detection or handling, e.g. anti-virus arrangements
G06F 21/52
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: during program…
G06F 21/53
During program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow: by executing in a restricted environment, e.g.…

Family

PCT/CN2020/078092Parent of this continuation · filed 6 Mar 2020
US 2022/0414216 A1Pre-grant publication · published 29 Dec 2022
US 12,223,043 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key