Security architecture system, cryptographic operation method for security architecture system, and computing device
AssigneePhytium Technology Co., Ltd.
InventorsYufeng Guo, Zhuo Ma, Yanzhao Feng, Ming Zhang, Qingshan Zhu, Qiaoqiao Hu
Life of this patent
Estimating the term…
Abstract
A security architecture system includes one or more subsystems, a hardware cryptographic engine, and a controller. At least one of the one or more subsystems has access authority to the hardware cryptographic engine; and the controller is configured to instruct a subsystem having access authority to access the hardware cryptographic engine via an access interface to control the hardware cryptographic engine to perform a cryptographic operation.
Claims11
A security architecture system comprising:
- a rich execution environment subsystem (REE);
- a trusted execution environment subsystem (TEE);
- a secure element subsystem (SE);
- a hardware cryptographic engine, wherein the SE has access authority to the hardware cryptographic engine via a first dedicated hardware access interface that physically connects the SE and the hardware cryptographic engine, wherein the REE or the TEE subsystem has access authority to the hardware cryptographic engine via a second dedicated hardware access interface, and wherein a root key is stored in the SE and the root key is used to generate a key, the REE, TEE and SE being on one device;
- and
- a controller configured to instruct the SE to control the hardware cryptographic engine to perform a cryptographic operation based on the key.
A cryptographic operation method for a security architecture system including a rich execution environment subsystem (REE), a trusted execution environment subsystem (TEE), and a secure element subsystem (SE), the method comprising:
- instructing, by a controller, the SE having exclusive access authority to a hardware cryptographic engine via a first dedicated hardware access interface that physically connects the secure element subsystem and the hardware cryptographic engine, wherein neither of the REE or the TEE has access authority to the hardware cryptographic engine via a second dedicated hardware access interface, and wherein a root key is stored in the SE and the root key is used to generate a key the REE, TEE and SE being on one device;
- and
- controlling, at the SE and in response to the instruction from the controller, the hardware cryptographic engine to perform a cryptographic operation based on the key.
A computer device including a security architecture system, the security architecture system comprising:
- a rich execution environment subsystem (REE);
- a trusted execution environment subsystem TEE);
- a secure element subsystem (SE);
- a hardware cryptographic engine, wherein the SE has exclusive access authority to the hardware cryptographic engine via a first dedicated hardware access interface that physically connects the SE and the hardware cryptographic engine, wherein neither of the REE or the TEE has access authority to the hardware cryptographic engine via a second dedicated hardware access interface, and wherein a root key is stored in the SE and the root key is used to generate a key;
- and
- a controller configured to instruct the SE to control the hardware cryptographic engine to perform a cryptographic operation based on the key.
Dependencies are inferred from the claim text.