System, Apparatus And Method For Replay Protection For A Platform Component
AssigneeIntel Corporation
InventorsZhenyu Zhu, Mikal Hunsaker, Chai Huat Gan
Life of this patent
Estimating the term…
Abstract
In one embodiment, an apparatus includes: an interface controller to receive a request from an external device coupled to the apparatus to access a flash memory coupled to the apparatus, the request comprising an access request to a replay protection monotonic counter (RPMC) of the flash memory; and a flash controller coupled to the interface controller. In turn, the flash controller includes: an atomic sequencer to arbitrate accesses to the RPMC by a plurality of components; and a mapper to map the access request to a selected counter of the RPMC associated with the external device. Other embodiments are described and claimed.
Claims20
An apparatus comprising:
- an interface controller to receive a request from an external device coupled to the apparatus to access a flash memory coupled to the apparatus, the request comprising an access request to a replay protection monotonic counter (RPMC) of the flash memory;
- and
- a flash controller coupled to the interface controller, the flash controller comprising:
- an atomic sequencer to arbitrate accesses to the RPMC by a plurality of components;
- and
- a mapper to map the access request to a selected counter of the RPMC associated with the external device.
A machine-readable medium having stored thereon instructions, which if performed by a machine cause the machine to perform a method comprising:
- receiving, in a master controller of a system on chip (SoC) of a platform, a first packet comprising a request from a platform component of the platform for a replay protection service to be performed by a replay protection monotonic counter (RPMC) of a non-volatile memory coupled to the SoC;
- parsing the first packet to obtain the request for the replay protection service and sending the request for the replay protection service to a flash controller of the SoC;
- authenticating, in the flash controller, that the platform component is authorized to access the RPMC;
- in response to authenticating that the platform component is authorized to access the RPMC, sending an atomic transaction to the non-volatile memory comprising the request for the replay protection service;
- and
- receiving a status of the request for the replay protection service in the flash controller and sending the status to the platform component.
A system comprising:
- an embedded controller to perform one or more control operations for the system;
- a flash memory to store information persistently, the flash memory having a replay protection circuit comprising a plurality of replay protection monotonic counters (RPMCs);
- and
- a processor coupled to the embedded controller and the flash memory, the processor comprising:
- one or more cores;
- a master controller to receive a request for a replay protection service from the embedded controller;
- and
- a flash controller coupled to the master controller, the flash controller comprising:
- a mapper to authenticate the request for the replay protection service from the embedded controller and, in response to authentication of the request, to map the request to a selected one of the plurality of RPMCs;
- and
- an atomic sequencer to receive the mapped request from mapper and, based on an arbitration between a plurality of requests including the mapped request, send the mapped request to the flash memory.
Dependencies are inferred from the claim text.