KR102160916B1 - 안전한 도메인과 덜 안전한 도메인을 이용한 데이터 처리 장치 및 방법 - Google Patents

안전한 도메인과 덜 안전한 도메인을 이용한 데이터 처리 장치 및 방법 Download PDF

Info

Publication number
KR102160916B1
KR102160916B1 KR1020157008994A KR20157008994A KR102160916B1 KR 102160916 B1 KR102160916 B1 KR 102160916B1 KR 1020157008994 A KR1020157008994 A KR 1020157008994A KR 20157008994 A KR20157008994 A KR 20157008994A KR 102160916 B1 KR102160916 B1 KR 102160916B1
Authority
KR
South Korea
Prior art keywords
domain
secure
target
control flow
command
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
KR1020157008994A
Other languages
English (en)
Korean (ko)
Other versions
KR20150064069A (ko
Inventor
토마스 크리스토퍼 그로커트
리차드 로이 그리센드와이트
Original Assignee
에이알엠 리미티드
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from GB1220769.2A external-priority patent/GB2501343A/en
Application filed by 에이알엠 리미티드 filed Critical 에이알엠 리미티드
Publication of KR20150064069A publication Critical patent/KR20150064069A/ko
Application granted granted Critical
Publication of KR102160916B1 publication Critical patent/KR102160916B1/ko
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
    • G06F12/14—Protection against unauthorised use of memory or access to memory
    • G06F12/1458—Protection against unauthorised use of memory or access to memory by checking the subject access rights
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/629—Protecting access to data via a platform, e.g. using keys or access control rules to features or functions of an application
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/54—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by adding security routines or objects to programs
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/55—Detecting local intrusion or implementing counter-measures
    • G06F21/554—Detecting local intrusion or implementing counter-measures involving event detection and direct action
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/74—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/30—Arrangements for executing machine instructions, e.g. instruction decode
    • G06F9/30003—Arrangements for executing specific machine instructions
    • G06F9/30072—Arrangements for executing specific machine instructions to perform conditional operations, e.g. using predicates or guards
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2105—Dual mode as a secondary aspect

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Mathematical Physics (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Storage Device Security (AREA)
KR1020157008994A 2012-10-01 2013-08-07 안전한 도메인과 덜 안전한 도메인을 이용한 데이터 처리 장치 및 방법 Active KR102160916B1 (ko)

Applications Claiming Priority (5)

Application Number Priority Date Filing Date Title
GB1217531.1 2012-10-01
GB201217531A GB201217531D0 (en) 2012-10-01 2012-10-01 ARMv7-M Asset Protection Proposal
GB1220769.2A GB2501343A (en) 2012-02-08 2012-11-19 Data processing apparatus and method using secure domain and less secure domain
GB1220769.2 2012-11-19
PCT/GB2013/052105 WO2014053802A1 (en) 2012-10-01 2013-08-07 Data processing apparatus and method using secure domain and less secure domain

Publications (2)

Publication Number Publication Date
KR20150064069A KR20150064069A (ko) 2015-06-10
KR102160916B1 true KR102160916B1 (ko) 2020-09-29

Family

ID=47225487

Family Applications (2)

Application Number Title Priority Date Filing Date
KR1020157008994A Active KR102160916B1 (ko) 2012-10-01 2013-08-07 안전한 도메인과 덜 안전한 도메인을 이용한 데이터 처리 장치 및 방법
KR1020157009802A Active KR102186675B1 (ko) 2012-10-01 2013-09-17 데이터 프로세서에서의 상이한 연산의 도메인간 전환을 위한 안전 메카니즘

Family Applications After (1)

Application Number Title Priority Date Filing Date
KR1020157009802A Active KR102186675B1 (ko) 2012-10-01 2013-09-17 데이터 프로세서에서의 상이한 연산의 도메인간 전환을 위한 안전 메카니즘

Country Status (12)

Country Link
US (1) US9122890B2 (enExample)
EP (2) EP2888691B1 (enExample)
JP (1) JP6272875B2 (enExample)
KR (2) KR102160916B1 (enExample)
CN (1) CN104756129B (enExample)
AR (1) AR092752A1 (enExample)
GB (2) GB201217531D0 (enExample)
IL (2) IL237180B (enExample)
IN (1) IN2015DN01188A (enExample)
MY (2) MY176723A (enExample)
TW (1) TWI607342B (enExample)
WO (2) WO2014053802A1 (enExample)

Families Citing this family (23)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20160314296A1 (en) * 2013-12-17 2016-10-27 Sequitur Labs ,Inc. Method and System for Dynamic Runtime Selection and Modification of Conditional Expressions in Computations
US9703733B2 (en) 2014-06-27 2017-07-11 Intel Corporation Instructions and logic to interrupt and resume paging in a secure enclave page cache
CN105988713B (zh) * 2015-01-29 2019-01-08 深圳市硅格半导体有限公司 存储装置及存储方法
US9747218B2 (en) 2015-03-20 2017-08-29 Mill Computing, Inc. CPU security mechanisms employing thread-specific protection domains
US9870466B2 (en) * 2015-09-26 2018-01-16 Mcafee, Inc. Hardware-enforced code paths
CN111651202B (zh) * 2016-04-26 2023-09-22 中科寒武纪科技股份有限公司 一种用于执行向量逻辑运算的装置
US20180004946A1 (en) * 2016-07-01 2018-01-04 Intel Corporation Regulating control transfers for execute-only code execution
US10650156B2 (en) 2017-04-26 2020-05-12 International Business Machines Corporation Environmental security controls to prevent unauthorized access to files, programs, and objects
GB2562102B (en) * 2017-05-05 2019-09-04 Advanced Risc Mach Ltd An apparatus and method for managing use of capabilities
CN109754062B (zh) * 2017-11-07 2024-05-14 上海寒武纪信息科技有限公司 卷积扩展指令的执行方法以及相关产品
US11182507B2 (en) * 2018-08-30 2021-11-23 Micron Technology, Inc. Domain crossing in executing instructions in computer processors
US10942863B2 (en) 2018-08-30 2021-03-09 Micron Technology, Inc. Security configurations in page table entries for execution domains using a sandbox application operation
US11914726B2 (en) 2018-08-30 2024-02-27 Micron Technology, Inc. Access control for processor registers based on execution domains
GB2577878B (en) * 2018-10-08 2020-11-11 Advanced Risc Mach Ltd Transition disable indicator
CN111353595A (zh) * 2018-12-20 2020-06-30 上海寒武纪信息科技有限公司 运算方法、装置及相关产品
CN111339060B (zh) * 2018-12-19 2024-03-12 上海寒武纪信息科技有限公司 运算方法、装置、计算机设备和存储介质
CN111400341B (zh) * 2019-01-02 2022-12-09 上海寒武纪信息科技有限公司 标量查找指令处理方法、装置及相关产品
GB2589897B (en) 2019-12-11 2022-03-23 Advanced Risc Mach Ltd Domain transition disable configuration parameter
GB2589895B (en) * 2019-12-11 2022-03-16 Advanced Risc Mach Ltd Intermodal calling branch instruction
GB2589896B (en) * 2019-12-11 2022-07-27 Advanced Risc Mach Ltd An apparatus and method for handling exceptions
CN115114134B (zh) * 2021-03-17 2025-04-04 浙江大华技术股份有限公司 一种软件诊断系统加载方法及其系统、设备、存储介质
CN114936166B (zh) * 2022-06-22 2025-01-28 云合智网(上海)技术有限公司 SAI Thrift自动化测试框架的构建方法
CN119906585B (zh) * 2025-03-31 2025-06-24 北京国都互联科技有限公司 数据安全传输方法及系统

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040139346A1 (en) * 2002-11-18 2004-07-15 Arm Limited Exception handling control in a secure processing system
US20040168047A1 (en) * 2003-02-24 2004-08-26 Matsushita Electric Industrial Co., Ltd. Processor and compiler for creating program for the processor
US20080216175A1 (en) 2006-05-18 2008-09-04 Vmware, Inc. Computational system including mechanisms for tracking taint
US20100031360A1 (en) 2008-07-31 2010-02-04 Arvind Seshadri Systems and methods for preventing unauthorized modification of an operating system

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4087856A (en) * 1976-06-30 1978-05-02 International Business Machines Corporation Location dependence for assuring the security of system-control operations
GB0226875D0 (en) * 2002-11-18 2002-12-24 Advanced Risc Mach Ltd Control of access to a memory by a device
GB0226874D0 (en) * 2002-11-18 2002-12-24 Advanced Risc Mach Ltd Switching between secure and non-secure processing modes
EP1828884B1 (en) * 2004-12-14 2010-08-25 Silicon Hive B.V. Programmable signal processing circuit and method of de-interleaving
US8136091B2 (en) * 2007-01-31 2012-03-13 Microsoft Corporation Architectural support for software-based protection
GB2448149B (en) * 2007-04-03 2011-05-18 Advanced Risc Mach Ltd Protected function calling
GB2482701C (en) * 2010-08-11 2018-12-26 Advanced Risc Mach Ltd Illegal mode change handling
US9798873B2 (en) * 2011-08-04 2017-10-24 Elwha Llc Processor operable to ensure code integrity

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040139346A1 (en) * 2002-11-18 2004-07-15 Arm Limited Exception handling control in a secure processing system
US20040168047A1 (en) * 2003-02-24 2004-08-26 Matsushita Electric Industrial Co., Ltd. Processor and compiler for creating program for the processor
US20080216175A1 (en) 2006-05-18 2008-09-04 Vmware, Inc. Computational system including mechanisms for tracking taint
US20100031360A1 (en) 2008-07-31 2010-02-04 Arvind Seshadri Systems and methods for preventing unauthorized modification of an operating system

Also Published As

Publication number Publication date
AR092752A1 (es) 2015-04-29
US9122890B2 (en) 2015-09-01
US20140075581A1 (en) 2014-03-13
KR102186675B1 (ko) 2020-12-04
KR20150064069A (ko) 2015-06-10
EP2885738B1 (en) 2016-10-26
IL237280B (en) 2018-04-30
IL237280A0 (en) 2015-04-30
KR20150065735A (ko) 2015-06-15
GB2506501A (en) 2014-04-02
EP2888691B1 (en) 2018-11-21
IN2015DN01188A (enExample) 2015-06-26
TWI607342B (zh) 2017-12-01
IL237180B (en) 2018-06-28
WO2014053802A1 (en) 2014-04-10
GB201313869D0 (en) 2013-09-18
MY176723A (en) 2020-08-19
CN104756129A (zh) 2015-07-01
EP2885738A1 (en) 2015-06-24
GB201217531D0 (en) 2012-11-14
WO2014053806A1 (en) 2014-04-10
JP2015534689A (ja) 2015-12-03
EP2888691A1 (en) 2015-07-01
MY168636A (en) 2018-11-16
CN104756129B (zh) 2017-11-28
TW201415287A (zh) 2014-04-16
JP6272875B2 (ja) 2018-01-31

Similar Documents

Publication Publication Date Title
KR102160916B1 (ko) 안전한 도메인과 덜 안전한 도메인을 이용한 데이터 처리 장치 및 방법
JP6189039B2 (ja) セキュアドメインおよび低セキュアドメインを使用するデータ処理装置および方法
US10210349B2 (en) Data processing apparatus and method using secure domain and less secure domain
KR102075372B1 (ko) 안전한 도메인과 덜 안전한 도메인을 갖는 데이터 처리장치에서의 예외처리
KR102075369B1 (ko) 데이터 처리장치와, 안전한 도메인 및 덜 안전한 도메인 사이에서 전환될 때 데이터 및 프로그램 코드를 안전하지 않은 액세스로부터 보호하는 방법
US11727110B2 (en) Verifying stack pointer
KR102192835B1 (ko) 데이터 처리장치에서의 소프트웨어 라이브러리들의 보안 보호
JP2023505149A (ja) ドメイン遷移無効化構成パラメータ
JP2023511814A (ja) インターモーダル呼び出し分岐命令
CN120077369A (zh) 堆栈指针切换有效性检查

Legal Events

Date Code Title Description
PA0105 International application

Patent event date: 20150408

Patent event code: PA01051R01D

Comment text: International Patent Application

PG1501 Laying open of application
PA0201 Request for examination

Patent event code: PA02012R01D

Patent event date: 20180731

Comment text: Request for Examination of Application

E902 Notification of reason for refusal
PE0902 Notice of grounds for rejection

Comment text: Notification of reason for refusal

Patent event date: 20191202

Patent event code: PE09021S01D

E701 Decision to grant or registration of patent right
PE0701 Decision of registration

Patent event code: PE07011S01D

Comment text: Decision to Grant Registration

Patent event date: 20200630

GRNT Written decision to grant
PR0701 Registration of establishment

Comment text: Registration of Establishment

Patent event date: 20200923

Patent event code: PR07011E01D

PR1002 Payment of registration fee

Payment date: 20200924

End annual number: 3

Start annual number: 1

PG1601 Publication of registration
PR1001 Payment of annual fee

Payment date: 20230828

Start annual number: 4

End annual number: 4

PR1001 Payment of annual fee

Payment date: 20240826

Start annual number: 5

End annual number: 5