Data processing device and method for monitoring correct operation of a data processing device

A method for monitoring a correct operation of a data processing device, the method comprising:

• inserting instructions for changing a subsystem state from an authorized state to an unauthorized state before a partial operating sequence is monitored, wherein the authorized state corresponds to a correct return address of a program which controls the partial operating sequence, and the unauthorized state corresponds to an incorrect return address of the program;
• inserting instructions for resetting the subsystem state from the unauthorized state to the authorized state;
• inserting instructions for evaluating the subsystem state after the partial operating sequence is monitored into a program which controls the partial operating sequence;
• and executing the partial operating sequence.

A data processing device comprising:

• a processor;
• a subsystem which is configured to assume an authorized state and an unauthorized state;
• a sequence controller;
• a modification device configured to modify a return address;
• a return address memory configured to store the return address;
• and an evaluation unit configured to evaluate a state of the subsystem, wherein the sequence controller is configured to:
• store a correct return address for a partial operating sequence in the return address memory before the partial operating sequence is executed by the processor, engage the modification device to change the correct return address to an incorrect return address so that, when a state of the subsystem is being evaluated by the evaluation unit, an unauthorized state is detected, engage the modification device to reverse the change in the return address after the partial operating sequence has been executed by the processor to change the subsystem state from the unauthorized state to the authorized state, and evaluate the state of the subsystem in the evaluation unit, wherein the authorized state corresponds to the correct return address of a program which controls the partial operating sequence, and the unauthorized state corresponds to the incorrect return address of the program.

A data processing device comprising:

• a processor;
• a subsystem which is configured to assume an authorized state and an unauthorized state;
• a modification means for modifying a return address;
• an evaluation unit for evaluating a state of the subsystem;
• and a sequence controlling means for storing a correct return address for a partial operating sequence in a return address memory before the partial operating sequence is executed by the processor, the sequence controlling means is also for engaging the modification means to change the correct return address to an incorrect return address so that, when a state of the subsystem is being evaluated by the evaluation unit, an unauthorized state is detected, the sequence controlling means is also for engaging the modification means to reverse the change in the return address after the partial operating sequence has been executed by the processor to change the subsystem state from the unauthorized state to the authorized state, and the sequence controlling means is also for evaluating the state of the subsystem in the evaluation unit, wherein the authorized state corresponds to the correct return address of a program which controls the partial operating sequence, and the unauthorized state corresponds to the incorrect return address of the program.

A data processing device comprising:

• means for changing a subsystem from an authorized state to an unauthorized state before a partial operating sequence is executed, the unauthorized state not interfering with the execution of the partial operating sequence as long as the state of the subsystem is not being evaluated, wherein the authorized state corresponds to a correct return address of a program which controls the partial operating sequence, and the unauthorized state corresponds to an incorrect return address of the program;
• means for executing the partial operating sequence;
• means for resetting the subsystem state from the unauthorized state to the authorized state after the partial operating sequence has been executed;
• and means for evaluating the subsystem state.