Methods and apparatus for secure processor collaboration in a multi-processor system

An apparatus, comprising:

• a plurality of processors capable of being operatively coupled to a main memory includes a plurality of sandboxes, each processor including an associated local memory, being operable to request at least some data from the main memory for use in the local memory, and being associated with one or more of the sandboxes, each processor having at least one of the sandboxes associated therewith;
• and
• at least one main processor operable to at least one of permit or deny access by the processors to data within the respective sandboxes, control access by the processors to data within the processors, and to permit or deny access by the processors to data within the respective sandboxes, wherein:
• the plurality of processors are each operable to enter a plurality of programmable modes, including:
• (i) a normal mode of operation in which requests initiated by others of the processors for data transfers into or out of the given processor are serviced, subject to the access controlled by the main processing unit;
• and (ii) a secure mode of operation in which no requests initiated by others of the processors for data transfers into or out of the given processor that has entered the secure mode are serviced, but such transfers initiated by the given processor are serviced subject to the access controlled by the main processing unit,
• the main processing unit is operable to establish a special secure relationship between one processor that has entered the secure mode of operation and a further processor that has entered the normal mode of operation, in which the main processing unit excludes access to the at least one sandbox of the further processor by the other processors, even when such other processors are in the secure mode of operation, but permits access to data in the at least one sandbox of the main memory that is associated with the further processor by the one processor that is in the secure mode, and
• the main processor is operable to monitor data within all processors except the one processor in the secure mode of operation.

In a multi-processor system including a plurality of processors capable of being operatively coupled to a main memory that includes a plurality of sandboxes, each processor including an associated local memory, at least one main processor operable to control access by the processors to data within the main memory and within the processors, and each processor having at least one of the sandboxes associated therewith, a method comprising:

• permitting each of the plurality of processors to enter a plurality of programmable modes, including:
• (i) a normal mode of operation in which requests initiated by others of the processors for data transfers into or out of the given processor are serviced, subject to the access controlled by the main processing unit;
• and (ii) a secure mode of operation in which no requests initiated by others of the processors for data transfers into or out of the given processor are serviced, but such transfers initiated by the given processor are serviced, subject to the access controlled by the main processing unit;
• and
• using the main processing unit to establish a special secure relationship between one processor that has entered the secure mode of operation and a further processor that has entered the normal mode of operation, in which the main processing unit excludes access to data in a sandbox of the main memory that is associated with the further processor by others of the processors, even when such other processors are in the secure mode of operation, but permits access to the data in the sandbox of the main memory that is associated with the further processor by the one processor that is in the secure mode,
• wherein the main processor monitors data within all processors except the one processor in the secure mode of operation.

In a multi-processor system including a plurality of processors capable of being operatively coupled to a shared memory that includes a plurality of sandboxes, and each processor including an associated local memory, and at least one main processor operable to control access by the processors to data within the shared memory and within the processors, and each processor having at least one of the sandboxes associated therewith, a method comprising:

• permitting each of the plurality of processors to enter a plurality of programmable modes, including:
• (i) a normal mode of operation in which requests initiated by others of the processors for data transfers into or out of the given processor are serviced, subject to the access controlled by the main processing unit;
• and (ii) a secure mode of operation in which no requests initiated by others of the processors for data transfers into or out of the given processor are serviced, but such transfers initiated by the given processor are serviced;
• establishing a special secure relationship between one processor that has entered the secure mode of operation and a further processor that has entered the normal mode of operation, by excluding access to data within a sandbox of the shared memory that is associated with the one further processor by others of the processors, even when such other processors are in the secure mode of operation, but permitting access to the data in the sandbox of the main memory that is associated with the further processor by the at least one processor that is in the secure mode;
• and
• permitting access to data within the shared memory associated with the one processor by the further processor,
• wherein the main processor monitors data within all processors except the one processor in the secure mode of operation.

A computer-readable, non-transitory storage medium containing a computer-executable program capable of causing a processor of the computer to carry out actions, the processor being part of a multi-processor system including a plurality of processors capable of being operatively coupled to a main memory that includes a plurality of sandboxes, each processor including an associated local memory, at least one main processor operable to control access by the processors to data within the main memory and within the processors, and each processor having at least one of the sandboxes associated therewith, a method comprising:

• permitting each of the plurality of processors to enter a plurality of programmable modes, including:
• (i) a normal mode of operation in which requests initiated by others of the processors for data transfers into or out of the given processor are serviced, subject to the access controlled by the main processing unit;
• and (ii) a secure mode of operation in which no requests initiated by others of the processors for data transfers into or out of the given processor are serviced, but such transfers initiated by the given processor are serviced, subject to the access controlled by the main processing unit;
• and
• using the main processing unit to establish a special secure relationship between one processor that has entered the secure mode of operation and a further processor that has entered the normal mode of operation, in which the main processing unit excludes access to data in a sandbox of the main memory that is associated with the further processor by others of the processors, even when such other processors are in the secure mode of operation, but permits access to the data in the sandbox of the main memory that is associated with the further processor by the one processor that is in the secure mode,
• wherein the main processor monitors data within all processors except the one processor in the secure mode of operation.

A computer-readable, non-transitory storage medium containing a computer-executable program capable of causing a processor of the computer to carry out actions, the processor being part of a multi-processor system including a plurality of processors capable of being operatively coupled to a shared memory that includes a plurality of sandboxes, and each processor including an associated local memory, and at least one main processor operable to control access by the processors to data within the shared memory and within the processors, and each processor having at least one of the sandboxes associated therewith, a method comprising:

• permitting each of the plurality of processors to enter a plurality of programmable modes, including:
• (i) a normal mode of operation in which requests initiated by others of the processors for data transfers into or out of the given processor are serviced, subject to the access controlled by the main processing unit;
• and (ii) a secure mode of operation in which no requests initiated by others of the processors for data transfers into or out of the given processor are serviced, but such transfers initiated by the given processor are serviced;
• establishing a special secure relationship between one processor that has entered the secure mode of operation and a further processor that has entered the normal mode of operation, by excluding access to data within a sandbox of the shared memory that is associated with the one further processor by others of the processors, even when such other processors are in the secure mode of operation, but permitting access to the data in the sandbox of the main memory that is associated with the further processor by the at least one processor that is in the secure mode;
• and
• permitting access to data within the shared memory associated with the one processor by the further processor,
• wherein the main processor monitors data within all processors except the one processor in the secure mode of operation.