Display of a verification image to confirm security
AssigneeArm Limited
InventorsRobert Brown, Donald Felton, James Ian McNiven
Life of this patent
Estimating the term…
Abstract
A handheld device 300 generates a verification image to indicate that the device is operating in a secure domain. The verification image is generated in dependence upon secure data stored within a secure region 324 of a memory 310 and user input data captured from a user input device 314, 316, 320. The secure data may be data defining a three-dimensional object. The user image data may be captured from accelerometers 314 defining a viewpoint of the secret three-dimensional object.
Claims19
A data processing apparatus comprising:
- processing circuitry configured to operate in a selectable one of a secure domain and a non-secure domain;
- a memory coupled to said processing circuitry and configured to store user defined secure image data, said user defined secure image data being accessible to said processing circuitry when operating in said secure domain and being non-accessible to said processing circuitry when operating in said non-secure domain;
- a user input device coupled to said processing circuitry and configured to receive user input data;
- a camera and camera driving software, said camera and camera driving software being arranged such that operation of said camera occurs within said secure domain, said user defined secure image data comprising a photo taken by said camera;
- and
- a display coupled to said processing circuitry and configured to display an image generated by said processing circuitry;
- wherein
- said processing circuitry is configured to operate in said secure domain to read (1) said user defined secure image data from said memory and (2) said user input data from said user input device;
- said processing circuitry is configured to generate a verification image from both said user defined secure image data and said user input data by applying a secure transformation determined by said user input data to said user defined secure image data;
- before said processing circuitry operates in said secure domain to generate said verification image, said user input device is configured such that said user input data cannot be read when said processing circuitry is operating in said non-secure domain;
- and
- said display is configured to display said verification image to a user to indicate that said processing circuitry is operating in said secure domain.
A data processing apparatus comprising:
- processing means for operating in a selectable one of a secure domain and a non-secure domain;
- memory means for storing user defined secure image data and coupled to said processing means, said user defined secure image data accessible to said processing means when operating in said secure domain and non-accessible to said processing means when operating in said non-secure domain;
- user input means for receiving user input data and coupled to said processing means;
- camera means and camera driving software means for taking a photo, said camera means and camera driving software means being arranged such that operation of said camera means occurs within said secure domain, said user defined secure image data comprising a photo taken by said camera means;
- and
- display means for displaying an image generated by said processing means;
- wherein
- said processing means is configured to operate in said secure domain to read (1) said user defined secure image data from said memory means and (2) said user input data from said user input means;
- said processing means is configured to generate a verification image from both said user defined secure image data and said user input data by applying a secure transformation determined by said user input data to said user defined secure image data;
- before said processing means operates in said secure domain to generate said verification image, said user input means is configured such that said user input data cannot be read when said processing means is operating in said non-secure domain;
- and
- said display means is configured to display said verification image to a user to indicate that said processing means is operating in said secure domain.
A method of indicating that processing circuitry is operating in a secure domain, said method comprising the steps of:
- operating processing circuitry in a selectable one of a secure domain and a non-secure domain;
- operating a camera and camera driving software in said secure domain to capture user defined secure image data comprising a photo taken by said camera;
- storing said user defined secure image data, said user defined secure image data being accessible to said processing circuitry when operating in said secure domain and being non-accessible to said processing circuitry when operating in said non-secure domain;
- receiving user input data;
- when said processing circuitry is operating in said secure domain, reading (1) said user defined secure image data and (2) said user input data and generating a verification image from both said secure data and said user input data by applying a secure transformation determined by said user input data to said secure image data;
- before said processing circuitry operates in said secure domain to generate said verification image, said user input data is made non-readable when said processing circuitry is operating in said non-secure domain;
- and
- displaying said verification image to a user to indicate that said processing circuitry is operating in said secure domain.
Dependencies are inferred from the claim text.