# US 12,602,465 B2 · Secure debugging > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,602,465 B2 - Document ID: US12602465B2 - Status: Granted - Kind: B2 - Application number: 18/765,561 - Filed: 2024-07-08 - Published: 2024-10-31 - Granted: 2026-04-14 - Earliest claimed: 2020-10-14 - Assignees: Mobileye Vision Technologies Ltd. - Applicants: Mobileye Vision Technologies Ltd. - Inventors: Eran Ben-Avi; Leonid Smolyansky - Web page: https://patentgrep.com/patent/US12602465B2 ## CPC - G06F 21/44: Program or device authentication - G06F 21/51: at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability - G06F 9/445: Program loading or initiating (bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57) - G06F 21/72: in cryptographic circuits - G06F 21/85: interconnection devices, e.g. bus-connected or in-line devices - B60W 50/00: Details of control systems for road vehicle drive control not related to the control of a particular sub-unit {, e.g. process diagnostic or vehicle driver interfaces} - B60W 2050/0083: {Setting, resetting, calibration} - B60W 2420/403: Image sensing, e.g. optical camera - G06F 2221/034: Test or assess a computer or a system - G06F 2221/2103: Challenge-response - G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices - G06F 2221/2143: Clearing memory, e.g. to prevent the data from being stolen - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - B60W: CONJOINT CONTROL OF VEHICLE SUB-UNITS OF DIFFERENT TYPE OR DIFFERENT FUNCTION; CONTROL SYSTEMS SPECIALLY ADAPTED FOR HYBRID VEHICLES; ROAD VEHICLE DRIVE CONTROL SYSTEMS FOR PURPOSES NOT RELATED TO THE CONTROL OF A PARTICULAR SUB-UNIT ## Abstract Disclosed embodiments provide systems and methods that can be used as part of or in combination with autonomous navigation, autonomous driving, or driver assist technology features. As opposed to fully autonomous driving, driver assist technology may refer to any suitable technology to assist drivers in the navigation or control of their vehicles. In various embodiments, the system may include one or more cameras mountable in a vehicle and an associated processor that monitors the environment of the vehicle. In further embodiments, additional types of sensors can be mounted in the vehicle and can be used in the autonomous navigation or driver assist systems. These systems and methods may include the use of a shared cache that is shared by a group of processing units to improve analysis of images captured by the one or more cameras. ## Claims ### Claim 1 An integrated circuit for secure debugging, the integrated circuit comprising: a processing unit; an access control unit; a debug port configured to receive a debug request; and a security unit configured to: receive a debugging initiation request based on a trigger event; determine a debugging enablement, the debugging enablement allowing the secure debugging of the processing unit after the debugging initiation request is received; and prepare at least a part of the integrated circuit for the secure debugging responsive to the determination of the debugging enablement, wherein the preparing comprises validating that programs executed by the processing unit and not related to the secure debugging are terminated prior to the secure debugging; wherein the access control unit is configured to allow the secure debugging of the processing unit responsive to completion of the preparation and upon receiving the debug request via the debug port; and wherein the integrated circuit is configured to execute the secure debugging of the processing unit responsive to the allowance of the secure debugging. ### Claim 2 (depends on 1) The integrated circuit of claim 1, wherein the trigger event comprises a boot process of the integrated circuit. ### Claim 3 (depends on 1) The integrated circuit of claim 1, wherein the trigger event comprises a timeout period after a boot process of the integrated circuit has completed. ### Claim 4 (depends on 1) The integrated circuit of claim 1, wherein the trigger event comprises a signal indicating that secure debugging is needed based on a change of state of the integrated circuit. ### Claim 5 (depends on 4) The integrated circuit of claim 4, wherein the change of state of the integrated circuit comprises at least one of: a predefined behavior of the integrated circuit, a predefined behavior of a first unit that is affected by the integrated circuit, a software update of a second unit that is affected by the integrated circuit, or a new installation of the integrated circuit. ### Claim 6 (depends on 1) The integrated circuit of claim 1, wherein the security unit is configured to validate the debug request for the secure debugging. ### Claim 7 (depends on 6) The integrated circuit of claim 6, wherein the security unit is configured to validate that a debug requestor that generated the debug request is aware of a unique identifier of the processing unit. ### Claim 8 (depends on 1) The integrated circuit of claim 1, wherein the security unit is configured to retrieve boot instructions from a memory unit of the integrated circuit. ### Claim 9 (depends on 8) The integrated circuit of claim 8, wherein the determination of the debugging enablement is responsive to the retrieval of the boot instructions. ### Claim 10 (depends on 8) The integrated circuit of claim 8, wherein the security unit is configured to decrypt encrypted data stored in the memory unit of the integrated circuit, the decryption is based on a unique identifier of the processing unit. ### Claim 11 (depends on 10) The integrated circuit of claim 10, wherein the encrypted data includes debugging instructions. ### Claim 12 (depends on 1) The integrated circuit of claim 1, wherein the security unit is configured to generate a debugging determination indicator responsive to the determination of the debugging enablement, wherein the debugging determination indicator is accessible by the access control unit. ### Claim 13 (depends on 12) The integrated circuit of claim 12, wherein the debugging determination indicator can be changed only by the determination of the debugging enablement. ### Claim 14 (depends on 1) The integrated circuit of claim 1, wherein the security unit is configured to erase sensitive information from a memory unit accessible to the secure debugging. ### Claim 15 A method for a secure debugging of a processing unit of an integrated circuit, the method comprising: receiving a debugging initiation request based on a trigger event; determining a debugging enablement, the debugging enablement allowing the secure debugging of the processing unit after the debugging initiation request is received; preparing at least a part of the integrated circuit for the secure debugging responsive to the determination of the debugging enablement, wherein the preparing comprises validating that programs executed by the processing unit and not related to the secure debugging are terminated prior to the secure debugging; allowing, by an access control unit of the integrated circuit, the secure debugging of the processing unit responsive to completion of the preparation and upon receiving the debug request via a debug port of the integrated circuit; and executing the secure debugging of the processing unit responsive to the allowance of the secure debugging. ### Claim 16 (depends on 15) The method of claim 15, wherein the trigger event comprises a boot process of the integrated circuit. ### Claim 17 (depends on 15) The method of claim 15, wherein the trigger event comprises a timeout period after a boot process of the integrated circuit has completed. ### Claim 18 (depends on 15) The method of claim 15, wherein the trigger event comprises a signal indicating that secure debugging is needed based on a change of state of the integrated circuit. ### Claim 19 (depends on 18) The method of claim 18, wherein the change of state of the integrated circuit comprises at least one of: a predefined behavior of the integrated circuit, a predefined behavior of a first unit that is affected by the integrated circuit, a software update of a second unit that is affected by the integrated circuit, or a new installation of the integrated circuit. ### Claim 20 At least one non-transitory machine-readable storage medium, comprising a plurality of instructions that, responsive to being executed with processor circuitry of a computer-controlled device, cause the computer-controlled device to: receive a debugging initiation request based on a trigger event; determine a debugging enablement, the debugging enablement allowing the secure debugging of the processing unit after the debugging initiation request is received; prepare at least a part of the integrated circuit for the secure debugging responsive to the determination of the debugging enablement, wherein the preparing comprises validating that programs executed by the processing unit and not related to the secure debugging are terminated prior to the secure debugging; allow, by an access control unit of the integrated circuit, the secure debugging of the processing unit responsive to completion of the preparation and upon receiving the debug request via a debug port of the integrated circuit; and execute the secure debugging of the processing unit responsive to the allowance of the secure debugging.