Software protection against fault attacks
AssigneeSanDisk IL Ltd.
InventorsBoris Dolgunov, Arseniy Aharonov, Raphael Slepon Ben-Yaish
Life of this patent
Estimating the term…
Abstract
A method for protecting information in a device includes providing a device with a non-secure hardware domain, a processor having a software-controlled mode of operation, and a secure hardware domain having a secure memory that is inaccessible by the processor when the processor is operating in the software-controlled mode of operation. Data from the non-secure hardware domain is established in the secure hardware domain. Computing operations are executed on the data in the secure hardware domain to produce a result. The secure hardware domain is purged, while retaining the result therein. The result is thereafter returned from the secure hardware domain into the non-secure hardware domain.
Claims8
A method for protecting information in a device, comprising the steps of:
- providing a device with a non-secure hardware domain, a processor having a software-controlled mode of operation, and a secure hardware domain having a secure memory that is inaccessible by said processor when said processor is operating in said software-controlled mode of operation;
- establishing data from the non-secure hardware domain in the secure hardware domain;
- executing computing operations on said data in said secure hardware domain to produce a result;
- purging said secure hardware domain while retaining said result therein;
- and
- thereafter returning said result from said secure hardware domain into said non-secure hardware domain.
A method for protecting information in a device, comprising:
- providing a device with a non-secure hardware domain;
- providing a processor having a software-controlled mode of operation;
- providing a secure hardware domain having a secure memory that is inaccessible by the processor when the processor is operating in the software-controlled mode of operation;
- providing a controller operative to upload data to be protected from the non-secure hardware domain into the secure memory;
- executing, by the controller, computing operations on the data in the secure hardware domain to produce a result;
- deleting, by the controller, information from the secure memory while retaining the result therein;
- and
- unloading, by the controller, the result from the secure hardware domain into the non-secure hardware domain after deleting information from the secure memory while retaining the result therein.
A device comprising:
- a non-secure hardware domain;
- a processor configured to operate in a software-controlled mode of operation;
- a secure hardware domain comprising a secure memory that is inaccessible by the processor when the processor is operating in the software-controller mode of operation;
- and
- a controller configured to upload data to be protected from the non-secure hardware domain into the secure memory, the controller configured to:
- execute computing operations on the data in the secure hardware domain to produce a result;
- delete information from the secure memory while retaining the result therein;
- and
- unload the result from the secure hardware domain into the non-secure hardware domain after deleting information from the secure memory while retaining the result therein.
Dependencies are inferred from the claim text.