Method for securing runtime execution flow
AssigneeNXP USA, Inc.
InventorsLawrence Loren CASE, Aditi Dinesh SHAH
Life of this patent
Estimating the term…
Abstract
A runtime security system, including: a shared core configured to execute processes having varying levels of trustworthiness configured to receive security services requests; an execution monitor configured to monitor the execution of the shared core further comprising a timer, a policy table, and an execution monitor state machine; secure assets including cryptographic keys; and immutable security service functions configured to enable access to the secure assets in response to secure services requests; wherein the execution monitor is configured to: detect that the shared core has received a secure boot request; verify that the secure boot request is valid; allow the shared core to securely boot when the secure boot request valid.
Claims20
A runtime security system, comprising:
- a shared core configured to execute processes having varying levels of trustworthiness configured to receive security services requests;
- an execution monitor configured to monitor the execution of the shared core further comprising a timer, a policy table, and an execution monitor state machine;
- secure assets including cryptographic keys;
- and
- immutable security service functions configured to enable access to the secure assets in response to secure services requests,
- wherein the execution monitor is configured to:
- detect that the shared core has received a secure boot request;
- verify that the secure boot request is valid;
- and
- allow the shared core to securely boot when the secure boot request valid.
A runtime security system, comprising:
- a shared core configured to execute processes having varying levels of trustworthiness configured to receive non-maskable security services requests;
- an execution monitor configured to monitor the execution of the shared core further comprising a timer, a policy table, and an execution monitor state machine;
- secure assets including cryptographic keys;
- and
- immutable security service functions configured to enable access to the secure assets in response to non-maskable secure services requests,
- wherein the execution monitor is configured to:
- detect that the shared core has received a non-maskable secure services request;
- verify that an instruction related to the non-maskable secure services request is valid;
- and
- setting the privilege level of the instruction based upon a policy evaluation using the policy table.
A method of monitoring a shared core configured to perform functions having varying levels of trustworthiness by an execution monitor, wherein the execution monitor includes a timer, a policy table, and an execution monitor state machine, comprising:
- receiving a secure boot request by a shared core;
- detecting, by the execution monitor, that the shared core has received a secure boot request;
- verifying that the secure boot request is valid;
- and
- allowing the shared core to securely boot when the secure boot request valid.
Dependencies are inferred from the claim text.