Back to results
US 12,613,809 B2Granted
Computer system and method for system memory encryption and decryption
AssigneeShanghai Zhaoxin Semiconductor Co., Ltd.
InventorsYingbing Guan, Weilin Wang
Life of this patent
Estimating the term…
Abstract
A computer system with data encryption and decryption on system memory is shown. The computer system has a system memory storing data, and a processor coupled to the system memory. The processor has key registers storing multiple keys. Based on the access address on the system memory, the processor selects a target key from the key registers, to apply the target key to perform data encryption and decryption on the system memory.
Claims14
A computer system, comprising:
- a system memory, configured to store data;
- and
- a processor, coupled to the system memory;
- wherein:
- the processor includes key registers storing a plurality of keys;
- the processor selects a target key from the key registers based on an access address on the system memory, to apply the target key to perform data encryption and decryption on the system memory;
- and
- the processor further comprises:
- a first model-specific register, configured to indicate that setting of an encryption-free and decryption-free zone is supported;
- a second model-specific register;
- and
- a third model-specific register and a fourth model-specific register, respectively configured to set a mask and a base address of the encryption-free and decryption-free zone;
- wherein the second model-specific register is configured to lock the second model-specific register itself, and also to lock the third model-specific register and the fourth model-specific register for security of the encryption-free and decryption-free zone.
10 more elements
A method for system memory encryption and decryption, comprising:
- selecting a target key from a plurality of keys based on an access address on a system memory;
- applying the target key to perform data encryption and decryption on the system memory;
- providing a first model-specific register configured to indicate that setting of an encryption-free and decryption-free zone is supported;
- providing a second model-specific register;
- and
- providing a third model-specific register and a fourth model-specific register, respectively configured to set a mask and a base address of the encryption-free and decryption-free zone;
- wherein the second model-specific register is configured to lock the second model-specific register itself, and also to lock the third model-specific register and the fourth model-specific register for security of the encryption-free and decryption-free zone.
4 more elements
Dependencies are inferred from the claim text.