KR20230110161A - Electronic device for operating security device and operating method thereof - Google Patents

Abstract

Various embodiments of the present invention relate to an apparatus and method for operating a security device in an electronic device. According to various embodiments, an electronic device includes an application processor, a communication processor, a security subsystem for processing security functions, an authority assignment device for allocating access rights of the security subsystem, and a processor key management device for providing a processor key to the security subsystem based on a processor to which access rights of the security subsystem are assigned in the rights allocation device. Data related to the processor may be initialized based on the return of the access authority of the system. Other embodiments may also be possible.

Description

Electronic device for operating a security device and its operating method {ELECTRONIC DEVICE FOR OPERATING SECURITY DEVICE AND OPERATING METHOD THEREOF}

Various embodiments of the present disclosure relate to an electronic device for operating a security device and an operating method thereof.

Electronic devices may provide various functions due to the development of information communication technology and semiconductor technology. For example, the various functions may include at least one of a call function, a message function, a broadcasting function, a wireless Internet function, a camera function, an electronic payment function, a user authentication function, or a music playback function.

Personal information stored in the electronic device is increasing as the functions that users use through the electronic device become more diverse. For example, personal information stored in an electronic device may include information requiring security settings, such as payment information, authentication information, and/or information related to credentials.

An electronic device may include a security device such as a security subsystem to enhance security of the electronic device. For example, when an application processor (AP) and a communication processor (CP) are physically separated, the electronic device may include a first security subsystem for the application processor and a second security subsystem for the communication processor. The first security subsystem for the application processor and the second security subsystem for the communication processor may perform the same function. For example, the physically separated application processor and communication processor may include a state composed of different chips.

When an electronic device uses a plurality of security subsystems that perform the same function to enhance security of the electronic device, internal space of the electronic device may be required to place the security subsystems. In addition, the unit cost of the electronic device may increase and power consumption may increase due to the use of a plurality of security subsystems.

Various embodiments of the present disclosure disclose an apparatus and method for sharing one security device (eg, a security subsystem) by a plurality of processors (eg, an application processor and a communication processor) in an electronic device.

According to various embodiments, an electronic device includes an application processor, a communication processor, a security subsystem that processes a security function related to the application processor or the communication processor, a rights assignment device that assigns access rights of the security subsystem to the application processor or the communication processor, and a processor key management device that provides a first key related to the application processor or a second key related to the communication processor to the security subsystem based on the application processor or the communication processor to which the rights allocation device has been assigned access rights of the security subsystem, the security subsystem comprising: , The security function related to the application processor or the communication processor may be processed using the first key or the second key provided from the processor key management device based on the assignment of access rights of the security subsystem to the application processor or the communication processor in the rights assignment device, and data related to the application processor or the communication processor may be initialized based on the return of the access rights of the security subsystem assigned to the application processor or the communication processor.

According to various embodiments of the present disclosure, a method of operating an electronic device including an application processor and a communication processor includes assigning an access right of a security subsystem for processing a security function related to the application processor or the communication processor to the application processor or the communication processor, obtaining a key related to the application processor or the communication processor when the access right of the security subsystem is assigned to the application processor or the communication processor, and processing the security function related to the application processor or the communication processor through the security subsystem based on the key related to the application processor or the communication processor. and initializing data related to the application processor or the communication processor based on the return of the access authority of the security subsystem assigned to the application processor or the communication processor.

According to various embodiments of the present disclosure, a plurality of processors (eg, an application processor and a communication processor) in an electronic device share one security device (eg, a security subsystem), thereby reducing a physical area for arranging a security device, and reducing unit cost and/or power consumption of the electronic device by the security device.

According to various embodiments, stability for use of the security device may be secured by managing the time at which at least one processor among a plurality of processors sharing the security device in the electronic device occupies the security device.

1 is a block diagram of an electronic device in a network environment, according to various embodiments.
2A is a block diagram of an electronic device for providing a security function according to various embodiments.
2B is a block diagram of a security device according to various embodiments.
3 is a block diagram of an electronic device for providing security functions according to various embodiments.
4A is an example of allocating an access authority of a security device to a first processor in an electronic device according to various embodiments of the present disclosure.
4B is an example of allocating access authority of a security device to a first processor in an electronic device according to various embodiments.
5 is a flowchart for allocating access rights of a security device in an electronic device according to various embodiments.
6 is a flowchart for allocating access rights of a security device based on a first rights allocation method in an electronic device according to various embodiments.
7 is an example for allocating access rights of a security device based on a first rights allocation method in an electronic device according to various embodiments.
8 is a flowchart for allocating access rights of a security device based on a permission request time point in an electronic device according to various embodiments.
9 is an example of allocating access rights of a security device based on a permission request time point in an electronic device according to various embodiments.
10 is a flowchart for allocating access rights of a security device based on rights allocation priority in an electronic device according to various embodiments.
11 is an example for allocating access rights of a security device based on rights allocation priority in an electronic device according to various embodiments.
12 is another example of allocating access rights of a security device based on rights allocation priority in an electronic device according to various embodiments.
13 is a flowchart for requesting access authority of a security device in an electronic device according to various embodiments.
14 is a flowchart for returning an access right of a security device in an electronic device according to various embodiments.
15A is an example of requesting an access authority of a security device in an electronic device according to various embodiments.
15B is an example for requesting an access right of a security device in an electronic device according to various embodiments.
16A is an example for returning an access right of a security device in an electronic device according to various embodiments.
16B is an example for returning the access authority of a security device in an electronic device according to various embodiments.
17 is a flowchart for performing a security function through a security device in an electronic device according to various embodiments.

Hereinafter, various embodiments will be described in detail with reference to the accompanying drawings.

1 is a block diagram of an electronic device 101 within a network environment 100, according to various embodiments. Referring to FIG. 1 , in a network environment 100, an electronic device 101 may communicate with the electronic device 102 through a first network 198 (eg, a short-distance wireless communication network) or a second network 199 (eg, a long-distance wireless communication network) to communicate with at least one of the electronic device 104 and the server 108. According to an embodiment, the electronic device 101 may communicate with the electronic device 104 through the server 108 . According to an embodiment, the electronic device 101 includes a processor 120, a memory 130, an input module 150, a sound output module 155, a display module 160, an audio module 170, a sensor module 176, an interface 177, a connection terminal 178, a haptic module 179, a camera module 180, a power management module 188, a battery 189, and a communication module 1. 90), a subscriber identification module 196, or an antenna module 197. In some embodiments, in the electronic device 101, at least one of these components (eg, the connection terminal 178) may be omitted or one or more other components may be added. In some embodiments, some of these components (eg, sensor module 176, camera module 180, or antenna module 197) may be integrated into one component (eg, display module 160).

The processor 120 may, for example, execute software (eg, program 140) to control at least one other component (eg, hardware or software component) of the electronic device 101 connected to the processor 120, and may perform various data processing or calculations. According to one embodiment, as at least part of data processing or operation, processor 120 may store commands or data received from other components (e.g., sensor module 176 or communication module 190) in volatile memory 132, process the commands or data stored in volatile memory 132, and store resultant data in non-volatile memory 134. According to one embodiment, the processor 120 may include a main processor 121 (eg, a central processing unit or an application processor) or a secondary processor 123 (eg, a graphics processing unit, a neural processing unit (NPU), an image signal processor, a sensor hub processor, or a communication processor) that may operate independently or together with the main processor 121. For example, when the electronic device 101 includes the main processor 121 and the auxiliary processor 123, the auxiliary processor 123 may use less power than the main processor 121 or may be set to be specialized for a designated function. The secondary processor 123 may be implemented separately from or as part of the main processor 121 .

The auxiliary processor 123 functions related to at least one of the components of the electronic device 101 (eg, the display module 160, the sensor module 176, or the communication module 190) along with the main processor 121 while the main processor 121 is in an active (eg, application execution) state or instead of the main processor 121 while the main processor 121 is in an inactive (eg, sleep) state. Alternatively, at least some of the states may be controlled. According to one embodiment, the auxiliary processor 123 (eg, an image signal processor or a communication processor) may be implemented as a part of other functionally related components (eg, the camera module 180 or the communication module 190). According to an embodiment, the auxiliary processor 123 (eg, a neural network processing device) may include a hardware structure specialized for processing an artificial intelligence model. AI models can be created through machine learning. Such learning may be performed, for example, in the electronic device 101 itself where the artificial intelligence model is performed, or may be performed through a separate server (eg, the server 108). The learning algorithm may include, for example, supervised learning, unsupervised learning, semi-supervised learning, or reinforcement learning, but is not limited to the above examples. The artificial intelligence model may include a plurality of artificial neural network layers. The artificial neural network may be one of a deep neural network (DNN), a convolutional neural network (CNN), a recurrent neural network (RNN), a restricted boltzmann machine (RBM), a deep belief network (DBN), a bidirectional recurrent deep neural network (BRDNN), deep Q-networks, or a combination of two or more, but is not limited to the above examples. The artificial intelligence model may include, in addition or alternatively, software structures in addition to hardware structures.

The memory 130 may store various data used by at least one component (eg, the processor 120 or the sensor module 176) of the electronic device 101 . The data may include, for example, input data or output data for software (eg, program 140) and commands related thereto. The memory 130 may include volatile memory 132 or non-volatile memory 134 .

The program 140 may be stored as software in the memory 130 and may include, for example, an operating system 142 , middleware 144 , or an application 146 .

The input module 150 may receive a command or data to be used for a component (eg, the processor 120) of the electronic device 101 from an outside of the electronic device 101 (eg, a user). The input module 150 may include, for example, a microphone, a mouse, a keyboard, a key (eg, a button), or a digital pen (eg, a stylus pen).

The sound output module 155 may output sound signals to the outside of the electronic device 101 . The sound output module 155 may include, for example, a speaker or a receiver. The speaker can be used for general purposes such as multimedia playback or recording playback. A receiver may be used to receive an incoming call. According to one embodiment, the receiver may be implemented separately from the speaker or as part of it.

The display module 160 can visually provide information to the outside of the electronic device 101 (eg, a user). The display module 160 may include, for example, a display, a hologram device, or a projector and a control circuit for controlling the device. According to an embodiment, the display module 160 may include a touch sensor configured to detect a touch or a pressure sensor configured to measure the strength of a force generated by a touch.

The audio module 170 may convert sound into an electrical signal or vice versa. According to an embodiment, the audio module 170 may acquire sound through the input module 150, output sound through the sound output module 155, or an external electronic device (e.g., electronic device 102) (e.g., speaker or headphone) connected directly or wirelessly to the electronic device 101.

The sensor module 176 may detect an operating state (eg, power or temperature) of the electronic device 101 or an external environmental state (eg, a user state), and generate an electrical signal or data value corresponding to the detected state. According to one embodiment, the sensor module 176 may include, for example, a gesture sensor, a gyro sensor, an air pressure sensor, a magnetic sensor, an acceleration sensor, a grip sensor, a proximity sensor, a color sensor, an infrared (IR) sensor, a bio sensor, a temperature sensor, a humidity sensor, or an illuminance sensor.

The interface 177 may support one or more designated protocols that may be used to directly or wirelessly connect the electronic device 101 to an external electronic device (eg, the electronic device 102). According to one embodiment, the interface 177 may include, for example, a high definition multimedia interface (HDMI), a universal serial bus (USB) interface, an SD card interface, or an audio interface.

The connection terminal 178 may include a connector through which the electronic device 101 may be physically connected to an external electronic device (eg, the electronic device 102). According to one embodiment, the connection terminal 178 may include, for example, an HDMI connector, a USB connector, an SD card connector, or an audio connector (eg, a headphone connector).

The haptic module 179 may convert electrical signals into mechanical stimuli (eg, vibration or movement) or electrical stimuli that a user may perceive through tactile or kinesthetic senses. According to one embodiment, the haptic module 179 may include, for example, a motor, a piezoelectric element, or an electrical stimulation device.

The camera module 180 may capture still images and moving images. According to one embodiment, the camera module 180 may include one or more lenses, image sensors, image signal processors, or flashes.

The power management module 188 may manage power supplied to the electronic device 101 . According to one embodiment, the power management module 188 may be implemented as at least part of a power management integrated circuit (PMIC), for example.

The battery 189 may supply power to at least one component of the electronic device 101 . According to one embodiment, the battery 189 may include, for example, a non-rechargeable primary cell, a rechargeable secondary cell, or a fuel cell.

The communication module 190 may support establishment of a direct (e.g., wired) communication channel or wireless communication channel between the electronic device 101 and an external electronic device (e.g., the electronic device 102, the electronic device 104, or the server 108), and communication through the established communication channel. The communication module 190 may include one or more communication processors that operate independently of the processor 120 (eg, an application processor) and support direct (eg, wired) communication or wireless communication. According to an embodiment, the communication module 190 may include a wireless communication module 192 (eg, a cellular communication module, a short-range wireless communication module, or a global navigation satellite system (GNSS) communication module) or a wired communication module 194 (eg, a local area network (LAN) communication module or a power line communication module). A corresponding communication module among these communication modules may communicate with the external electronic device 104 through a first network 198 (eg, a short-range communication network such as Bluetooth, wireless fidelity (Wi-Fi) direct, or an infrared data association (IrDA)) or a second network 199 (eg, a legacy cellular network, a 5G network, a next-generation communication network, the Internet, or a long-distance communication network such as a computer network (eg, a LAN or a WAN)). These various types of communication modules may be integrated as one component (eg, a single chip) or implemented as a plurality of separate components (eg, multiple chips). The wireless communication module 192 may identify or authenticate the electronic device 101 within a communication network such as the first network 198 or the second network 199 using subscriber information (eg, International Mobile Subscriber Identifier (IMSI)) stored in the subscriber identification module 196.

The wireless communication module 192 may support a 5G network after a 4G network and a next-generation communication technology, for example, NR access technology (new radio access technology). NR access technology can support high-speed transmission of high-capacity data (enhanced mobile broadband (eMBB)), minimization of terminal power and access to multiple terminals (massive machine type communications (mMTC)), or high reliability and low latency (URLLC (ultra-reliable and low-latency communications)). The wireless communication module 192 may support a high frequency band (eg, mmWave band) in order to achieve a high data throughput, for example. The wireless communication module 192 may support various technologies for securing performance in a high frequency band, such as beamforming, massive multiple-input and multiple-output (MIMO), full dimensional MIMO (FD-MIMO), an array antenna, analog beam-forming, or a large scale antenna. The wireless communication module 192 may support various requirements defined for the electronic device 101, an external electronic device (eg, the electronic device 104), or a network system (eg, the second network 199). According to an embodiment, the wireless communication module 192 may support peak data rate (e.g., 20 Gbps or more) for realizing eMBB, loss coverage (e.g., 164 dB or less) for realizing mMTC, or U-plane latency (e.g., 0.5 ms or less for downlink (DL) and uplink (UL), or 1 ms or less for round trip) for realizing URLLC. According to various embodiments, the subscriber identification module 196 may include a plurality of subscriber identification modules. For example, a plurality of subscriber identification modules may store different subscriber information.

The antenna module 197 may transmit or receive signals or power to the outside (eg, an external electronic device). According to an embodiment, the antenna module 197 may include an antenna including a radiator formed of a conductor or a conductive pattern formed on a substrate (eg, PCB). According to one embodiment, the antenna module 197 may include a plurality of antennas (eg, an array antenna). In this case, at least one antenna suitable for a communication scheme used in a communication network such as the first network 198 or the second network 199 may be selected from a plurality of antennas by, for example, the communication module 190. A signal or power may be transmitted or received between the communication module 190 and an external electronic device through at least one selected antenna. According to some embodiments, other components (eg, a radio frequency integrated circuit (RFIC)) may be additionally formed as a part of the antenna module 197 in addition to the radiator.

According to various embodiments, the antenna module 197 may form a high-frequency (eg, mmWave) antenna module. According to an embodiment, a high-frequency (eg mmWave) antenna module may include a printed circuit board, an RFIC disposed on or adjacent to a first surface (eg, a bottom surface) of the printed circuit board and capable of supporting a designated high-frequency band (eg, mmWave band), and a plurality of antennas (eg, an array antenna) disposed on or adjacent to a second surface (eg, a top surface or side surface) of the printed circuit board and capable of transmitting or receiving signals in a designated high-frequency band. For example, the plurality of antennas may include a patch array antenna and/or a dipole array antenna.

At least some of the components are connected to each other through a communication method between peripheral devices (eg, a bus, general purpose input and output (GPIO), serial peripheral interface (SPI), or mobile industry processor interface (MIPI)) and signals (eg, commands or data). Can be exchanged with each other.

According to an embodiment, commands or data may be transmitted or received between the electronic device 101 and the external electronic device 104 through the server 108 connected to the second network 199 . Each of the external electronic devices 102 or 104 may be the same as or different from the electronic device 101 . According to an embodiment, all or part of operations executed in the electronic device 101 may be executed in one or more external electronic devices among the external electronic devices 102 , 104 , or 108 . For example, when the electronic device 101 needs to automatically perform a certain function or service or in response to a request from a user or another device, the electronic device 101 may request one or more external electronic devices to perform the function or at least part of the service, instead of or in addition to executing the function or service by itself. One or more external electronic devices receiving the request may execute at least a part of the requested function or service or an additional function or service related to the request, and deliver the execution result to the electronic device 101 . The electronic device 101 may provide the result as at least part of a response to the request as it is or after additional processing. To this end, for example, cloud computing, distributed computing, mobile edge computing (MEC), or client-server computing technology may be used. The electronic device 101 may provide an ultra-low latency service using, for example, distributed computing or mobile edge computing. In another embodiment, the external electronic device 104 may include an internet of things (IoT) device. Server 108 may be an intelligent server using machine learning and/or neural networks. According to one embodiment, the external electronic device 104 or server 108 may be included in the second network 199 . The electronic device 101 may be applied to intelligent services (eg, smart home, smart city, smart car, or health care) based on 5G communication technology and IoT-related technology.

Electronic devices according to various embodiments disclosed in this document may be devices of various types. The electronic device may include, for example, a portable communication device (eg, a smart phone), a computer device, a portable multimedia device, a portable medical device, a camera, a wearable device, or a home appliance. An electronic device according to an embodiment of the present document is not limited to the aforementioned devices.

Various embodiments of this document and terms used therein are not intended to limit the technical features described in this document to specific embodiments, but should be understood to include various modifications, equivalents, or substitutes of the embodiments. In connection with the description of the drawings, like reference numbers may be used for like or related elements. The singular form of a noun corresponding to an item may include one item or a plurality of items, unless the relevant context clearly dictates otherwise. In this document, each of the phrases such as "A or B", "at least one of A and B", "at least one of A or B", "A, B or C", "at least one of A, B and C", and "at least one of A, B, or C" may include any one of the items listed together in the corresponding phrase, or all possible combinations thereof. Terms such as "first", "second", or "first" or "secondary" may be used simply to distinguish a corresponding component from other corresponding components, and do not limit the corresponding components in other respects (e.g., importance or order). When a (e.g., a first) component is referred to as “coupled” or “connected” to another (e.g., a second) component, with or without the terms “functionally” or “communicatively,” it means that the component may be connected to the other component directly (e.g., by wire), wirelessly, or through a third component.

The term "module" used in various embodiments of this document may include units implemented in hardware, software, or firmware, and may be used interchangeably with terms such as, for example, logic, logical blocks, components, or circuits. A module may be an integral part or the smallest unit of a part or part thereof that performs one or more functions. For example, according to one embodiment, the module may be implemented in the form of an application-specific integrated circuit (ASIC).

Various embodiments of this document may be implemented as software (eg, program 140) including one or more instructions stored in a storage medium (eg, internal memory 136 or external memory 138) readable by a machine (eg, electronic device 101). For example, a processor (eg, the processor 120 ) of a device (eg, the electronic device 101 ) may call at least one command among one or more instructions stored from a storage medium and execute it. This enables the device to be operated to perform at least one function according to the at least one command invoked. The one or more instructions may include code generated by a compiler or code executable by an interpreter. The device-readable storage medium may be provided in the form of a non-transitory storage medium. Here, 'non-temporary' only means that the storage medium is a tangible device and does not contain a signal (e.g., electromagnetic wave), and this term does not distinguish between the case where data is semi-permanently stored in the storage medium and the case where it is temporarily stored.

According to one embodiment, the method according to various embodiments disclosed in this document may be included and provided in a computer program product. Computer program products may be traded between sellers and buyers as commodities. A computer program product may be distributed in the form of a device-readable storage medium (eg, compact disc read only memory (CD-ROM)), or may be distributed (eg, downloaded or uploaded) online, through an application store (eg, Play Store ^TM ) or directly between two user devices (eg, smartphones). In the case of online distribution, at least part of the computer program product may be temporarily stored or temporarily created in a device-readable storage medium such as a manufacturer's server, an application store server, or a relay server's memory.

According to various embodiments, each component (eg, module or program) of the above-described components may include a single object or a plurality of entities, and some of the plurality of entities may be separately disposed in other components. According to various embodiments, one or more components or operations among the aforementioned corresponding components may be omitted, or one or more other components or operations may be added. Alternatively or additionally, a plurality of components (eg modules or programs) may be integrated into a single component. In this case, the integrated component may perform one or more functions of each of the plurality of components identically or similarly to those performed by a corresponding component of the plurality of components prior to the integration. According to various embodiments, the actions performed by a module, program, or other component may be executed sequentially, in parallel, iteratively, or heuristically, or one or more of the actions may be executed in a different order, may be omitted, or one or more other actions may be added.

2A is a block diagram of an electronic device 101 for providing security functions according to various embodiments. 2B is a block diagram of a security device (eg, security subsystem 230) according to various embodiments. In the following description, the electronic device 101 is a security device for executing a security function and may include a security subsystem 230 . However, the security device is not limited to the security subsystem 230 and may include other devices for executing security functions of the electronic device 101 .

According to various embodiments referring to FIGS. 2A and 2B , the electronic device 101 may include a first processor 200, a second processor 210, an authority assignment device 220, and/or a security subsystem 230. According to one embodiment, the first processor 200 may be substantially the same as the processor 120 or the main processor 121 of FIG. 1 , or may include the processor 120 or the main processor 121 . The second processor 210 may be substantially the same as the processor 120 or the auxiliary processor 123 (eg, a communication processor) of FIG. 1 , or may include the processor 120 or the auxiliary processor 123 . According to one embodiment, the first processor 200 and/or the second processor 210 may be operatively, functionally and/or electrically connected to the rights assignment device 220 and/or the security subsystem 230. According to one embodiment, the first processor 200 and the second processor 210 may be physically or hardwarely separated. According to one embodiment, the first processor 200, the second processor 210, the rights assignment device 220 and/or the security subsystem 230 may be included in one package. According to one embodiment, the first processor 200, the second processor 210, the authority assignment device 220, and/or the security subsystem 230 may be included in a plurality of packages (eg, a processor package).

According to various embodiments, the first processor 200 may control at least one component (eg, the second processor 210) of the electronic device 101 operably, functionally, and/or electrically connected to the first processor 200 and/or process (or calculate) various data. For example, the first processor 200 may include an application processor (AP). For example, the first processor 200 may include a memory (not shown). For example, the memory of the first processor 200 may include a flash memory.

According to an embodiment, the first processor 200 may transmit a request signal related to the access authority of the security subsystem 230 to the authority allocation device 220 when there is at least one job related to the security function. When the access authority of the security subsystem 230 is allocated from the authority assignment device 220, the first processor 200 may perform a security function related to at least one task through the security subsystem 230. For example, the first processor 200 may store a security function execution result (eg, an encryption key) provided from the security subsystem 230 in the memory of the first processor 200 . For example, the security function may include at least one of generating a signature of job-related data, checking the signature of job-related data, authenticating the job, generating a certificate of job-related data, inspecting a certificate of job-related data, encrypting job-related data, decrypting job-related data, or generating an encryption key related to the job. According to an embodiment, when at least one task corresponding to a request signal related to access rights is completed through the security subsystem 230, the first processor 200 returns (or returns) the access rights to the security subsystem 230. For example, the first processor 200 may transmit a request signal related to the return of access rights to the rights assignment device 220 .

According to various embodiments, the second processor 210 may process (or calculate) data related to communication of the electronic device 101 . According to an embodiment, the second processor 210 may include one communication processor or may include a plurality of communication processors divided in terms of hardware or software. For example, a plurality of communication processors may support network communication related to different types of radio access technology (RAT). For example, the second processor 210 may include a memory (not shown). For example, the memory of the second processor 210 may include a flash memory.

According to an embodiment, the second processor 210 may transmit a request signal related to the access authority of the security subsystem 230 to the authority allocation device 220 when there is at least one job related to the security function. When the access authority of the security subsystem 230 is allocated from the authority assignment device 220, the second processor 210 may perform a security function related to at least one task through the security subsystem 230. For example, the second processor 210 may store a security function execution result (eg, encrypted data) provided from the security subsystem 230 in the memory of the second processor 210 . For example, the security function may include at least one of generating a signature of job-related data, checking the signature of job-related data, authenticating the job, generating a certificate of job-related data, inspecting a certificate of job-related data, encrypting job-related data, decrypting job-related data, or generating an encryption key related to the job. For example, data related to work may include international mobile equipment identity (IMEI), mobile equipment identifier (MEID), DS IMEI, network lock (network lock) information, subscriber identity module (SIM) lock information, IMEI CERT information, regional information, operator information, review operator information, NCK, SPCK, MCK, PIN (personal identification number) information, network lock password, password, operator network information, network information, MCC/MCK whitelist, CDMA information, or RF It may include at least one of band information.

According to one embodiment, when the second processor 210 completes at least one task corresponding to the request signal related to the access right through the security subsystem 230, the access right to the security subsystem 230 may be returned (or returned). For example, the second processor 210 may transmit a request signal related to the return of access rights to the rights assignment device 220 .

According to an embodiment, the second processor 210 may return (or return) access rights to the security subsystem 230 when it is determined that the occupation time of the security subsystem 230 exceeds a specified reference time. For example, when the access authority of the security subsystem 230 is allocated from the authority allocation unit 220, the second processor 210 may drive a timer that runs for a specified reference time. When the timer runs out, the second processor 210 may return (or return) access rights to the security subsystem 230 regardless of whether at least one task is completed. For example, the timer may include a timer instruction executed by the second processor 210, a timer program, and/or a timer implemented by hardware included in the second processor 210. For example, if at least one task is not completed based on a specified reference time, the second processor 210 may transmit a request signal related to the access right of the security subsystem 230 to the right assigning device 220 . When the second processor 210 is assigned the access authority of the security subsystem 230 from the authority assignment unit 220, the security function related to at least one previously uncompleted task can be performed through the security subsystem 230 with priority. For example, the designated reference time may include a maximum time for processing data to be processed by the second processor 210 . For example, since the size (or maximum size) of data processed by the second processor 210 is predictable, the maximum time for processing data can be predicted based on the size of data processed by the second processor 210.

According to various embodiments, the authority assignment device 220 may manage access rights to the security subsystem 230 . According to an embodiment, the authority assignment device 220 may allocate the access authority for the security subsystem 230 to the first processor 200 or the second processor 210 . According to one embodiment, the authority allocation device 220 may be physically or hardware separated from the first processor 200 and the second processor 210 . According to one embodiment, the authority assignment device 220 may include a memory (not shown). For example, the memory of the authority assignment device 220 may include random access memory (RAM).

According to an embodiment, when the first permission assignment method (eg, semaphore method) is used, the permission assignment device 220 may alternately allocate access rights to the security subsystem 230 to the first processor 200 or the second processor 210. For example, the authority assignment device 220 continuously receives a plurality of request signals for the access authority of the security subsystem 230 from the first processor 200, and when receiving a request signal for the access authority of the security subsystem 230 from the second processor 210, the plurality of request signals received from the first processor 200 may be determined as one request signal. The authority assignment device 220 may allocate the access authority of the security subsystem 230 to the first processor 200 based on the request signal of the first processor 200 . When the first processor 200 returns the access right of the security subsystem 230 , the authority assignment device 220 may allocate the access authority of the security subsystem 230 to the second processor 210 . For example, information related to the request signal for the access authority of the security subsystem 230 received by the authority allocation unit 220 may be stored in the memory of the authority allocation unit 220 .

According to an embodiment, the authority assignment device 220 may allocate the access authority to the security subsystem 230 to the first processor 200 or the second processor 210 based on the timing (or request order) of the first processor 200 and/or the second processor 210 requesting access authority to the security subsystem 230. For example, when the second permission assignment method (eg, the queue method) is used and priorities are not set for the processors 200 and/or 210, the permission assignment device 220 may allocate the access permission to the security subsystem 230 to the first processor 200 or the second processor 210 based on the request time (or order of request) of the access permission to the security subsystem 230. For example, the access right to the security subsystem 230 may be preferentially assigned to the processor 200 or 210 at which the access right to the security subsystem 230 is requested.

According to an embodiment, the authority assignment device 220 may preferentially allocate access rights to the security subsystem 230 to the first processor 200 or the second processor 210 based on the priorities of the first processor 200 and the second processor 210. For example, the authority assignment device 220 may store a request signal for the access authority of the security subsystem 230 in a buffer. For example, when the second permission assignment method (eg, the queue method) is used and permission assignment priority is set for the first processor 200, the first processor 200 among the request signals stored in the buffer. Based on at least one request signal received from the processor 200, the permission to access the security subsystem 230 may be preferentially assigned to the first processor 200. Upon processing at least one request signal received from the first processor 200 among the request signals stored in the buffer, the authority assignment device 220 may allocate access rights to the security subsystem 230 to the second processor 210 based on the at least one request signal received from the second processor 210. For example, when the second permission assignment method (eg, the queue method) is used and the permission assignment priority is set in the second processor 210, the second processor 210 among the request signals stored in the buffer. Based on at least one request signal received from the processor 210, the permission to access the security subsystem 230 may be preferentially assigned to the second processor 210. When processing at least one request signal received from the second processor 210 among the request signals stored in the buffer, the authority assignment device 220 may allocate access rights to the security subsystem 230 to the first processor 200 based on the at least one request signal received from the first processor 200.

According to an embodiment, the authority assignment device 220 may provide the security subsystem 230 with information related to a processor to which an access authority for the security subsystem 230 is assigned. For example, when the access authority for the security subsystem 230 is assigned to the first processor 200, the authority assignment device 220 may provide information related to the first processor 200 to which the access authority for the security subsystem 230 is assigned to the security subsystem 230. For example, when the authority assignment unit 220 assigns the access authority to the security subsystem 230 to the second processor 210, the security subsystem 230 may provide information related to the second processor 210 to which access authority to the security subsystem 230 is assigned. For example, the information related to the processor to which the access right to the security subsystem 230 is assigned may include a key of the processor (eg, the first processor 200 or the second processor 210) to which the access right to the security subsystem 230 is assigned and/or instruction information related to key selection of the processor to which the access right to the security subsystem 230 is assigned.

According to an embodiment, when receiving a request signal related to the return of the access right of the security subsystem 230 from the first processor 200 or the second processor 210, the rights assignment device 220 may retrieve the access right of the security subsystem 230 to the first processor 200 or the second processor 210. For example, when receiving a request signal related to the return of the access authority of the security subsystem 230 from the first processor 200 or the second processor 210, the authority assignment unit 220 may control the security subsystem 230 to delete data related to the processor to which the access authority of the security subsystem 230 has been assigned. For example, when receiving a request signal related to the return of the access right of the security subsystem 230 from the first processor 200 or the second processor 210, the authority assignment device 220 may provide an initialization request signal to the security subsystem 230. For example, when the authority assignment device 220 determines that the security subsystem 230 has completed deleting data related to the processor to which the access authority of the security subsystem 230 has been assigned, it can be determined that the access authority to the security subsystem 230 has been revoked. For example, deletion of data related to a processor to which access rights of the security subsystem 230 have been assigned can be confirmed (or monitored) based on a finite state machine (FSM) (not shown) of the rights assignment device 220. For example, the finite state machine of the rights assignment device 220 may include a finite state machine included in the rights assignment device 220 . For example, the finite state machine (FSM) of the authority assignment device 220 is in a first state (e.g., lock state) when data related to a processor to which an access authority is assigned is processed and/or stored through the security subsystem 230. For example, the finite state machine (FSM) of the authority assignment unit 220 may be set to a second state (eg, free state) when data related to a processor to which an access authority has been assigned is deleted in the security subsystem 230. For example, the processor to which the access authority of the security subsystem 230 has been assigned may include a processor that transmits a request signal related to the return of the access authority of the security subsystem 230 . As an example, the data related to the processor is data generated and/or processed by the processor using the security subsystem 230, and may include data related to at least one of encrypted data, encrypted operation value, decrypted data, decrypted operation value, signature, certificate, or encryption key.

According to one embodiment, the rights assignment unit 220 may include a plurality of finite state machines (FSMs). For example, the plurality of finite state machines (FSMs) may include a first FSM indicating whether data related to the processor to which the access right of the security subsystem 230 is assigned is stored, a second FSM indicating the type of processor to which the access right of the security subsystem 230 is assigned, and a third FSM indicating at least one request related to the access right of the security subsystem 230. For example, the type and/or number of finite state machines (FSMs) included in the rights assignment device 220 are not limited thereto.

According to various embodiments, the security subsystem 230 may perform a security function related to the first processor 200 or the second processor 210 . According to an embodiment, the security subsystem 230 performs authentication related to a task processed by the first processor 200 or the second processor 210 to which access rights to the security subsystem 230 are assigned by the authority assigning unit 220, generation of a certificate of task-related data, inspection of a certificate of task-related data, generation of a signature of task-related data, inspection of a signature of task-related data, encryption of task-related data, decryption of task-related data, or task-related encryption key. It may perform at least one of the security functions such as creation. The security subsystem 230 may provide a processing result of the security function to the first processor 200 or the second processor 210 . According to one embodiment, the security subsystem 230 may be physically or hardware separated from the first processor 200 and the second processor 210 . According to one embodiment, security subsystem 230 may include a memory (not shown). In one example, the memory of security subsystem 230 may include RAM. For example, the memory of the security subsystem 230 may store data related to a processor processed in the security subsystem 230 . As an example, the processor-related data is data generated and/or processed by the processors 200 and/or 210 using the security subsystem 230, and may include data related to at least one of encrypted data, encrypted operation values, decrypted data, decrypted operation values, signatures, certificates, and encryption keys.

According to an embodiment, the security subsystem 230 may delete data related to the processor to which the access authority of the security subsystem 230 has been assigned when receiving an initialization request signal from the authority assignment device 220 . For example, the security subsystem 230 may delete information related to the previous processor 200 or 210 (eg, information related to a processor key) existing in an internal memory (eg, static RAM (SRAM)) of the security subsystem 230 and/or a register path.

According to one embodiment, the security subsystem 230 may include a bus 231, a key generation module 232, a processor key management module 233, a key management module 234, and/or an encryption module 235, as shown in FIG. 2B. For example, the bus 231 may include a circuit for exchanging information (eg, control messages and/or data) between components included in the security subsystem 230 (eg, the key generation module 232, the processor key management module 233, the key management module 234, and/or the encryption module 235). For example, the key generation module 232 may generate a random key to perform security functions of the security subsystem 230 . For example, the key generation module 232 may include a true random number generator (TRNG). For example, the processor key management module 233 may manage a key of the first processor 200 and a key of the second processor 210 accessible to the security subsystem 230 . For example, the key management module 234 may generate a security key for performing a security function based on the random key generated by the key generation module 232 and the key of the processor to which the access authority of the security subsystem 230 provided from the processor key management module 233 is assigned. For example, the encryption module 235 may encrypt or decrypt data received from a processor to which access authority of the security subsystem 230 is assigned based on the security key generated by the key management module 234 . For example, the encryption module 235 may perform at least one of a cryptographic operation, a hash operation, or a key derivation function (KDF) operation based on the security key generated by the key management module 234 .

According to one embodiment, the processor key management module 233 may include a processor key selection module 241 , a first processor key management module 242 and a second processor key management module 243 . For example, the first processor key management module 242 may include a circuit for storing and managing a key of the first processor 200 . For example, the second processor key management module 243 may include a circuit for storing and managing a key of the second processor 210 . For example, the first processor key management module 242 and the second processor key management module 243 may be physically or hardwarely separated. For example, the first processor key management module 242 and the second processor key management module 243 may be included in one package. For example, the first processor key management module 242 and/or the second processor key management module 243 may include a memory (e.g., read only memory (ROM)) for storing the key of the first processor 200 and/or the key of the second processor 210. For example, the first processor key management module 242 and/or the second processor key management module 243 may be configured with a memory (e.g., ROM) that stores the key of the first processor 200 and/or the key of the second processor 210. For example, the key of the first processor 200 is a root key of the first processor 200 and may include one time programmable (OTP) or eFuse related to the first processor 200 . For example, the key of the first processor 200 may include a key generated based on the root key of the first processor 200 (derived key). For example, the key of the second processor 210 is a root key of the second processor 210, and may include an OTP or eFuse related to the second processor 210. For example, the key of the second processor 210 may include a key generated based on the root key of the second processor 210 (derived key). For example, the root key of the processor 200 and/or 210 is a unique value of the processor set during the manufacturing process of the electronic device 101 and may include a fixed value.

For example, the processor key selection module 241 may select a key of the processor 200 or 210 to which access authority to the security subsystem 230 is assigned by the authority assignment unit 220 and provide the selected key to the key management module 234 (or the security subsystem 230). For example, the processor key selection module 241 may provide the key of the first processor 200 to the key management module 234 (or the security subsystem 230) when the access authority to the security subsystem 230 is assigned to the first processor 200 by the authority assignment unit 220. For example, the processor key selection module 241 may provide the key of the second processor 210 to the key management module 234 (or the security subsystem 230) when the access authority to the security subsystem 230 is assigned to the second processor 210 by the authority assignment unit 220. For example, the processor key selection module 241 may identify the processor 200 or 210 to which the access authority to the security subsystem 230 is assigned based on the information related to the processor to which the access authority to the security subsystem 230 is assigned received from the authority assignment unit 220. For example, the processor key selection module 241 may include a multiplexer.

3 is a block diagram of an electronic device 101 for providing security functions according to various embodiments. In the following description, the electronic device 101 is a security device for executing a security function, and may include a security subsystem 310 . However, the security device is not limited to the security subsystem 310 and may include other devices for executing security functions of the electronic device 101 .

According to various embodiments of the present disclosure with reference to FIG. 3 , the electronic device 101 may include a first processor 200, a second processor 210, an authority assignment device 220, a processor key management device 300, and/or a security subsystem 310. According to one embodiment, the first processor 200 may be substantially the same as the processor 120 or the main processor 121 of FIG. 1 , or may include the processor 120 or the main processor 121 . The second processor 210 may be substantially the same as the processor 120 or the auxiliary processor 123 (eg, a communication processor) of FIG. 1 , or may include the processor 120 or the auxiliary processor 123 . According to an embodiment, the first processor 200 and/or the second processor 210 may be operatively, functionally and/or electrically connected to the rights assignment device 220, the processor key management device 300 and/or the security subsystem 310. According to one embodiment, the first processor 200 and the second processor 210 may be physically or hardwarely separated. According to one embodiment, the first processor 200, the second processor 210, the authority assignment device 220, the processor key management device 300 and / or the security subsystem 310 may be included in one package. According to an embodiment, the first processor 200, the second processor 210, the authority assignment device 220, the processor key management device 300, and/or the security subsystem 310 may be included in a plurality of packages (eg, a processor package). According to one embodiment, the first processor 200, the second processor 210, and the rights assignment device 220 of FIG. 3 operate in the same way as the first processor 200, the second processor 210, and the rights assignment device 220 of FIG.

According to various embodiments, the processor key management device 300 may manage a key of the first processor 200 and a key of the second processor 210 accessible to the security subsystem 310 . According to one embodiment, the processor key management device 300 may include a processor key selection module 302 , a first processor key management module 304 and a second processor key management module 306 . For example, the first processor key management module 302 may include a circuit for storing and managing a key of the first processor 200 . For example, the second processor key management module 304 may include a circuit for storing and managing a key of the second processor 210 . For example, the first processor key management module 302 and the second processor key management module 304 may be physically or hardwarely separated. For example, the first processor key management module 302 and the second processor key management module 304 may be included in one package. For example, the first processor key management module 302 and/or the second processor key management module 304 may include a memory (e.g., ROM) for storing the key of the first processor 200 and/or the key of the second processor 210. As an example, the first processor key management module 302 and / or the second processor key management module 304 stores the key of the first processor 200 and / or the key of the second processor 210. It may be configured with a memory (eg, ROM). For example, the key of the first processor 200 is a root key of the first processor 200, and may include an OTP or eFuse related to the first processor 200. For example, the key of the first processor 200 may include a key generated based on the root key of the first processor 200 (derived key). For example, the key of the second processor 210 is a root key of the second processor 210, and may include an OTP or eFuse related to the second processor 210. For example, the key of the second processor 210 may include a key generated based on the root key of the second processor 210 (derived key). For example, the root key of the processor 200 and/or 210 is a unique value of the processor set during the production process of the electronic device 101 and may include a fixed value.

For example, the processor key selection module 302 selects the key of the processor 200 or 210 to which the access authority to the security subsystem 310 is assigned by the authority assignment unit 220 and provides the selected key to the security subsystem 310. For example, the processor key selection module 302 may provide the key of the first processor 200 to the security subsystem 310 when the access authority to the security subsystem 310 is assigned to the first processor 200 by the authority assignment unit 220. For example, the processor key selection module 302 may provide the key of the second processor 210 to the security subsystem 310 when the access authority to the security subsystem 310 is assigned to the second processor 210 by the authority assignment unit 220. For example, the processor key selection module 302 may identify the processor 200 or 210 to which the access authority to the security subsystem 310 is assigned based on the information related to the processor to which the access authority to the security subsystem 310 is assigned received from the authority assignment unit 220. As an example, the processor key selection module 302 may include a multiplexer.

According to various embodiments, the security subsystem 310 may perform a security function related to the first processor 200 or the second processor 210 . According to an embodiment, the security subsystem 310 performs authentication related to a task processed by the first processor 200 or the second processor 210 to which access rights to the security subsystem 310 are assigned by the authority assignment unit 220, generation of a signature of data related to the task, inspection of the signature of data related to the task, generation of a certificate of the data related to the task, inspection of a certificate of data related to the task, encryption of task-related data, decryption of data related to the task, or encryption key related to the task. It may perform at least one of the security functions such as creation. The security subsystem 310 may provide processing results of the security function to the first processor 200 or the second processor 210 . According to an embodiment, the security subsystem 310 may be physically or hardware separated from the first processor 200 and the second processor 210 . According to one embodiment, the security subsystem 310 may include a memory (not shown). In one example, the memory of security subsystem 310 may include RAM. For example, the memory of the security subsystem 310 may store data related to a processor processed in the security subsystem 310 . As an example, the data related to the processor is data generated and/or processed by the processor 200 and/or 210 using the security subsystem 310, and may include data related to at least one of encrypted data, encrypted operation value, decrypted data, decrypted operation value, signature, certificate, or encryption key.

According to an embodiment, the security subsystem 310 may delete data related to a processor to which the access authority of the security subsystem 310 has been assigned when receiving an initialization request signal from the authority assignment device 220 . For example, the security subsystem 310 may delete information related to the previous processor 200 or 210 (eg, information related to a processor key) existing in an internal memory (eg, static RAM (SRAM)) and/or a register path of the security subsystem 310.

According to various embodiments, the authority assignment device 220 isolates the first processor 200 and the second processor 210 to reinforce the security of the electronic device 101 by controlling the security subsystem 230 or 310 to delete data related to the processor to which the access authority was previously assigned in order to recover the access authority to the security subsystem 230 or 310.

According to various embodiments, an electronic device (eg, the electronic device 101 of FIGS. 1, 2A, or 3) may include an application processor (eg, the main processor 121 of FIG. 1 or the first processor 200 of FIG. 2A or 3) and a communication processor (eg, the auxiliary processor 123 of FIG. 1 or the second processor 210 of FIG. 2A or 3) and a security function related to the application processor or the communication processor. A security subsystem (eg, the security subsystem 230 or 310 of FIG. 2A or 3), a rights assignment device for assigning access rights of the security subsystem to the application processor or the communication processor (eg, rights assignment device 220 of FIG. 2A or 3), and a first key related to the application processor or a second key related to the communication processor, based on the application processor or the communication processor to which the rights assignment device has been assigned access rights of the security subsystem, the security subsystem and a processor key management device (e.g., the processor key management module 233 of FIG. 2B or the processor key management device 300 of FIG. 3) provided by the security subsystem, wherein the security subsystem processes a security function related to the application processor or the communication processor using the first key or the second key provided from the processor key management device based on the allocation of access rights of the security subsystem from the permission assignment device to the application processor or the communication processor, and the security assigned to the application processor or the communication processor. Data related to the application processor or the communication processor may be initialized based on the return of the access authority of the subsystem.

According to various embodiments, the authority assignment device, upon receiving a plurality of request signals related to the access authority of the security subsystem from the application processor and the communication processor, alternately allocates the access authority of the security subsystem to the application processor or the communication processor.

According to various embodiments of the present disclosure, the authority assigning apparatus may allocate the access authority of the security subsystem to the application processor based on the reception time of the request signal when receiving at least one request signal related to the access authority of the security subsystem from the communication processor after continuously receiving a plurality of request signals related to the access authority of the security subsystem from the application processor, and may allocate the access authority of the security subsystem to the communication processor when the access authority of the security subsystem is retrieved from the application processor.

According to various embodiments, when receiving a request signal related to the access authority of the security subsystem from the application processor and/or the communication processor, the authority assignment device may allocate the access authority of the security subsystem to the application processor or the communication processor based on a time point at which the access request is received.

According to various embodiments, the authority assignment device, when receiving a plurality of request signals related to the access authority of the security subsystem from the application processor and the communication processor, identifies a processor for which the priority of the access authority of the security subsystem is set, allocates the access authority of the security subsystem to the application processor when priority is set to the application processor, and determines that processing of at least one task corresponding to the request signal related to the access authority of the security subsystem received from the application processor has been completed. You can assign system access rights.

According to various embodiments, the authority assignment device, when receiving a plurality of request signals related to the access authority of the security subsystem from the application processor and the communication processor, identifies a processor for which the priority of the access authority of the security subsystem is set, allocates the access authority of the security subsystem to the communication processor when priority is set to the communication processor, and determines that processing of at least one task corresponding to the request signal related to the access authority of the security subsystem received from the communication processor has been completed. You can assign system access rights.

According to various embodiments, the communication processor may return the access authority to the security subsystem regardless of the completion of processing by the security function related to the communication processor when a specified reference time has elapsed based on the time point at which the access authority of the security subsystem is allocated from the authority allocation device.

According to various embodiments of the present disclosure, when the access authority of the security subsystem is allocated from the authority assignment device, the communication processor may check whether there is a security function whose processing has not been completed based on the specified reference time in a state in which the access authority of the security subsystem has been previously allocated, and if there is a security function whose processing has not been completed, the communication processor may process the security function whose processing has not been completed through the security subsystem.

According to various embodiments, the security subsystem may delete data related to the security function of the security function of the application processor and the first key when receiving information related to the return of the access right of the security subsystem allocated to the application processor from the authority allocation device, and delete data related to the second key and security function of the communication processor when receiving information related to the return of the access authority of the security subsystem allocated to the communication processor from the authority allocation unit.

According to various embodiments of the present disclosure, when the access right of the security subsystem is assigned to the application processor, information related to the assignment of access rights to the application processor may be provided to the security subsystem, and when the access rights of the security subsystem are assigned to the communication processor, information related to the assignment of access rights to the communication processor may be provided to the security subsystem.

According to various embodiments, the communication processor may return the access authority of the security subsystem when processing of the security function related to the communication processor is completed before the specified reference time elapses.

According to various embodiments, when the access authority of the security subsystem is assigned to the application processor, the authority assignment device may provide information related to the allocation of access authority to the application processor to the processor key management unit, and the processor key management apparatus may transmit the first key related to the application processor to the security subsystem based on the information related to the allocation of access authority to the application processor.

According to various embodiments, when the access authority of the security subsystem is assigned to the communication processor, the authority allocation device provides information related to the allocation of access authority to the communication processor to the processor key management unit, and the processor key management unit transmits the second key related to the communication processor to the security subsystem based on the information related to the allocation of access authority to the communication processor.

4A is an example of allocating access rights of a security device (eg, the security subsystem 230) to a first processor in an electronic device according to various embodiments.

According to various embodiments of the present disclosure with reference to FIG. 4A, when there is at least one job related to a security function, the first processor 200 of the electronic device 101 may transmit a request signal related to the access authority of the security subsystem 230 to the authority allocation device 220 (operation 401). As an example, the request signal related to access rights may include information related to the first processor 200 requesting access rights (eg, identification information) and/or a first value indicating a request for access rights (eg '1').

According to various embodiments, the authority assignment device 220 may allocate the access authority of the security subsystem 230 to the first processor 200 based on the request signal related to the access authority of the security subsystem 230 received from the first processor 200. The authority allocation device 220 may transmit a signal (eg, an ACK signal) related to the allocation of access authority to the security subsystem 230 to the first processor 200 (operation 403). For example, the signal related to the assignment of access rights may include information (eg, identification information) related to the processor (eg, the first processor 200) that has assigned the access rights. According to an embodiment, the authority assignment device 220 may allocate the access authority of the security subsystem 230 to the first processor 200 when there is no processor assigned the access authority of the security subsystem 230. According to an embodiment, the authority assignment device 220 may check whether the access authority of the security subsystem 230 is recovered when there is a processor assigned the access authority of the security subsystem 230 . When the access authority of the security subsystem 230 is recovered, the authority assignment device 220 may allocate the access authority of the security subsystem 230 to the first processor 200 . For example, when a plurality of request signals for the access rights of the security subsystem 230 are received, the rights assignment device 220 may allocate the access rights of the security subsystem 230 to the first processor 200 based on at least one of a rights assignment method, a request time of access rights, or priority of access rights.

According to various embodiments, when the access authority of the security subsystem 230 is assigned to the first processor 200, the authority allocation device 220 may transmit information related to the allocation of access authority to the first processor 200 (eg, instruction information related to key selection of the first processor 200) to the security subsystem 230 (operation 405). According to an embodiment, the security subsystem 230 may obtain the key of the first processor 200 based on information related to the assignment of access rights to the first processor 200 (eg, instruction information related to key selection of the first processor 200) received from the rights assignment device 220. For example, the key of the first processor 200 may be acquired from the first processor key management module 242 through the processor key selection module 241 included in the processor key management module 233 of FIG. 2B.

According to various embodiments, when the access authority of the security subsystem 230 is allocated from the authority assignment device 220, the first processor 200 may perform a security function through the security subsystem 230 (operation 407). According to an embodiment, the security subsystem 230 may process the security function of the first processor 200 based on the key of the first processor 200 . For example, the security function may include at least one of functions for encrypting a file system related to the first processor 200, encrypting a random access memory (RAM) related to the first processor 200, generating an encryption signature of important data (eg, payment data) related to the first processor 200, checking a signature, or generating an encryption key.

According to various embodiments, when processing of at least one task related to the security function is completed, the first processor 200 may request the return (or return) of the access right to the security subsystem 230 (operation 409). According to an embodiment, when processing of at least one task related to the security function is completed, the first processor 200 transmits a request signal related to return of access rights to the security subsystem 230 to the rights assignment device 220. As an example, the request signal related to the return of the access right may include information (eg, identification information) related to the first processor 200 returning the access right and/or a second value different from the first value to indicate the return of the access right (eg '0').

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the first processor 200 to the security subsystem 230 based on a request for return (or return) of the access authority of the security subsystem 230 from the first processor 200. The authority assignment device 220 may transmit information related to return (or return) of the access authority of the security subsystem 230 (eg, authority return notification information) to the first processor 200 (operation 411).

According to various embodiments, the authority assignment device 220 may control the security subsystem 230 to delete data related to the first processor 200 based on the return of the access authority of the first processor 200 to the security subsystem 230 (operation 413). According to an embodiment, when the access right of the security subsystem 230 is retrieved from the first processor 200, the authority assignment device 220 may provide an initialization request signal to the security subsystem 230 (operation 413).

According to various embodiments, the security subsystem 230 may initialize the security subsystem 230 based on the initialization request signal received from the authority assignment device 220 (operation 415). According to an embodiment, the security subsystem 230 may delete information related to the first processor 200 existing in an internal memory and/or a registration path of the security subsystem 230 through initialization of the security subsystem 230. For example, the information related to the first processor 200 may include a key of the first processor 200 and/or operation information based on the key of the first processor 200 .

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the first processor 200 to the security subsystem 230 irrespective of a request for return (or return) of the access authority of the security subsystem 230 from the first processor 200. According to an embodiment, when the authority assignment device 220 determines that the occupation time of the security subsystem 230 of the first processor 200 exceeds a specified reference time, the access authority of the first processor 200 to the security subsystem 230 may be recovered. Based on the recovery of the access right of the first processor 200 to the security subsystem 230, the authority assignment device 220 may transmit information related to return (or return) of the access authority of the security subsystem 230 (eg, authority return notification information) to the first processor 200 (operation 411). For example, operation 409 of FIG. 4A may be omitted.

4B is an example for allocating access rights of a security device (eg, the security subsystem 310) to a first processor in an electronic device according to various embodiments.

According to various embodiments of the present disclosure with reference to FIG. 4B, when there is at least one job related to a security function, the first processor 200 of the electronic device 101 may transmit a request signal related to the access authority of the security subsystem 310 to the authority allocation device 220 (operation 421).

According to various embodiments, the authority assignment device 220 may allocate the access authority of the security subsystem 310 to the first processor 200 based on the request signal related to the access authority of the security subsystem 310 received from the first processor 200. The authority allocation device 220 may transmit a signal (eg, an ACK signal) related to the allocation of access authority to the security subsystem 310 to the first processor 200 (operation 423). For example, the signal related to the assignment of access rights may include information (eg, identification information) related to the processor (eg, the first processor 200) that has assigned the access rights. For example, operations 421 and 423 of FIG. 4B may include operations corresponding to (or identical to) operations 401 and 403 of FIG. 4A .

According to various embodiments, when the access authority of the security subsystem 310 is allocated to the first processor 200, the authority assignment device 220 may transmit information related to the allocation of access authority to the first processor 200 (eg, instruction information related to key selection of the first processor 200) to the processor key management apparatus 300 (operation 425).

According to various embodiments, the processor key management device 300 may select the key of the first processor 200 based on information related to assigning access rights to the first processor 200 received from the permission assignment device 220 (eg, instruction information related to key selection of the first processor 200). The processor key management device 300 may provide information related to the key of the first processor 200 (or the key of the first processor 200) to the security subsystem 310 (operation 427). As an example, the key of the first processor 200 may be obtained from the first processor key management module 304 by the processor key selection module 302 of FIG. 3 .

According to various embodiments, when the access authority of the security subsystem 310 is allocated from the authority assignment device 220, the first processor 200 may perform a security function through the security subsystem 310 (operation 429). According to an embodiment, the security subsystem 310 may process the security function of the first processor 200 based on the key of the first processor 200 obtained from the processor key management device 300 . For example, the security function may include at least one of encryption of a file system related to the first processor 200, encryption of RAM related to the first processor 200, encryption of important data (e.g., payment data) related to the first processor 200, signature generation, signature inspection, or encryption key generation functions.

According to various embodiments, when processing of at least one task related to the security function is completed, the first processor 200 may request the return (or return) of the access right to the security subsystem 310 (operation 431). According to an embodiment, when processing of at least one task related to the security function is completed, the first processor 200 transmits a request signal related to return of the access right to the security subsystem 310 to the right assignment device 220.

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the first processor 200 to the security subsystem 310 based on the return request of the access authority of the security subsystem 310 from the first processor 200. The authority assignment device 220 may transmit information related to return of the access authority of the security subsystem 310 (eg, authority return notification information) to the first processor 200 (operation 433).

According to various embodiments, the authority assignment device 220 may control the security subsystem 310 to delete data related to the first processor 200 based on the return of the access authority of the first processor 200 to the security subsystem 310 (operation 435). According to an embodiment, when receiving a request signal related to the return of the access right of the security subsystem 310 from the first processor 200, the authority assignment device 220 may provide an initialization request signal to the security subsystem 310 (operation 435).

According to various embodiments, the security subsystem 310 may initialize the security subsystem 310 based on the initialization request signal received from the authority assignment device 220 (operation 437). According to an embodiment, the security subsystem 310 may delete information related to the first processor 200 existing in an internal memory and/or a registration path of the security subsystem 310 through initialization of the security subsystem 310.

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the first processor 200 to the security subsystem 230 irrespective of a request for return (or return) of the access authority of the security subsystem 230 from the first processor 200. According to an embodiment, when the authority assignment device 220 determines that the occupation time of the security subsystem 230 of the first processor 200 exceeds a specified reference time, the access authority of the first processor 200 to the security subsystem 230 may be recovered. Based on the recovery of the access right of the first processor 200 to the security subsystem 230, the authority assignment device 220 may transmit information related to return (or return) of the access authority of the security subsystem 230 (eg, authority return notification information) to the first processor 200 (operation 433). For example, operation 431 of FIG. 4B may be omitted.

5 is a flowchart 500 for allocating access rights of a security device (eg, the security subsystem 230 or 310) in an electronic device according to various embodiments. In the following embodiments, each operation may be performed sequentially, but not necessarily sequentially. For example, the order of each operation may be changed, or at least two operations may be performed in parallel. As an example, the electronic device of FIG. 5 may be the electronic device 101 of FIG. 1 or 2 .

According to various embodiments of the present disclosure with reference to FIG. 5 , the electronic device (eg, the permission assignment device 220 of FIG. 2 ) checks whether a request signal related to the access permission of the security subsystem 230 or 310 is received from the first processor 200 and/or the second processor 210 in operation 501. As an example, the request signal related to access rights may include information (eg, identification information) related to a processor requesting access rights (eg, the first processor 200 or the second processor 210) and/or a request for access rights. A first value (eg, '1') may be included.

According to various embodiments, the electronic device (eg, the authority assignment device 220) does not receive a request signal related to the access authority of the security subsystem 230 or 310 (eg, 'No' in operation 501).

According to various embodiments, when the electronic device (eg, the authority assignment device 220) receives a request signal related to the access authority of the security subsystem 230 or 310 (eg, 'Yes' in operation 501), in operation 503, it may be determined whether the security subsystem 230 or 310 is being used by the first processor 200 or the second processor 210. According to an embodiment, the authority assignment device 220 may determine that the security subsystem 230 or 310 is in use when there exists a processor (eg, the first processor 200 or the second processor 210) to which the access authority of the security subsystem 230 or 310 is assigned.

According to various embodiments, when the electronic device (eg, the authority assignment unit 220) determines that the security subsystem 230 or 310 is not in use (eg, 'No' in operation 503), the security subsystem 230 accesses the processor (eg, the first processor 200 or the second processor 210) that has transmitted the request signal related to the access authority of the security subsystem 230 or 310 in operation 507. Permissions can be assigned.

According to various embodiments, when the electronic device (eg, the authority assignment device 220) determines that the security subsystem 230 or 310 is in use (eg, 'Yes' in operation 503), in operation 505, it may be determined whether the access authority of the security subsystem 230 or 310 has been revoked. According to an embodiment, the authority assignment unit 220 may control the security subsystem 230 or 310 to delete data related to the processor to which the access authority of the security subsystem 230 or 310 has been allocated, when a request signal related to the return of the access authority is received from a processor to which the access authority of the security subsystem 230 or 310 has been allocated (eg, the first processor 200 or the second processor 210). When the security subsystem 230 or 310 determines that the data related to the processor to which the security subsystem 230 or 310 has been assigned has been deleted, the authority assignment device 220 determines that the access authority of the security subsystem 230 or 310 has been recovered. As an example, the request signal related to the return of the access right may include information (eg, identification information) related to the processor returning the access right (eg, the first processor 200 or the second processor 210) and/or a second value different from the first value (eg '0') to indicate the return of the access right.

According to various embodiments, when the electronic device (eg, the authority assignment device 220) determines that the access authority of the security subsystem 230 or 310 has not been revoked (eg, 'No' in operation 505), in operation 505, it may be determined whether the access authority of the security subsystem 230 or 310 is revoked. According to an embodiment, the authority assignment device 220 may check whether a request signal related to the return of access authority to the security subsystem 230 or 310 is received.

According to various embodiments, when the electronic device (eg, the authority assignment unit 220) determines that the access authority of the security subsystem 230 or 310 has been revoked (eg, 'Yes' in operation 505), in operation 507, the security subsystem 230 or the security subsystem 230 or 310) access rights can be assigned. According to an embodiment, when the plurality of request signals for the access right of the security subsystem 230 or 310 are received, the rights assignment device 220 transmits a request signal related to the access right of the security subsystem 230 or 310 based on at least one of the right allocation method, the request time of the access right, or the priority of the access right to the security subsystem 230 or 31 to the processor (eg, the first processor 200 or the second processor 210) that transmits the request signal related to the access right of the security subsystem 230 or 310 0) access rights can be assigned.

According to various embodiments, the security subsystem 230 or 310 may acquire a key of a processor (eg, the first processor 200 or the second processor 210) to which the access authority of the security subsystem 230 or 310 is assigned based on the control of the authority assignment device 220. According to an embodiment, the security subsystem 230 may obtain the key of the first processor 200 or the key of the second processor 210 from the first processor key management module 242 or the second processor key management module 243 through the key selection module 241 of FIG. 2B. According to an embodiment, the security subsystem 310 may acquire a key (eg, a key of the first processor 200 or a key of the second processor 210) of the processor (eg, the first processor 200 or the second processor 210) to which the access authority of the security subsystem 310 is assigned, from the processor key management device 300 of FIG.

6 is a flowchart 600 for allocating access rights of a security device (eg, the security subsystem 230 or 310) based on a first rights allocation method in an electronic device according to various embodiments. According to an embodiment, the operations of FIG. 6 may be detailed operations of operations 505 and 507 of FIG. 5 . In the following embodiments, each operation may be performed sequentially, but not necessarily sequentially. For example, the order of each operation may be changed, or at least two operations may be performed in parallel. As an example, the electronic device of FIG. 6 may be the electronic device 101 of FIG. 1 or 2 . Hereinafter, at least some components of FIG. 6 may be described with reference to FIG. 7 . 7 is an example for allocating access rights of a security device based on a first rights allocation method in an electronic device according to various embodiments.

According to various embodiments of the present disclosure with reference to FIGS. 6 and 7 , the electronic device (eg, the permission assignment device 220 of FIG. 2 ) checks whether the access permission to the security subsystem 230 or 310 is recovered from the first processor 200 in operation 601. According to an embodiment, the first processor 200 may transmit request signals 702, 704, 706, and 708 related to the access authority of the security subsystem 230 or 310 corresponding to each task to the permission assignment device 220, as shown in FIG. When the authority allocation device 220 determines that the security subsystem 230 or 310 is not in use, the security subsystem 230 or 3 to the first processor 200 based on at least a part (eg, the request signal 702 corresponding to the first task) of the plurality of request signals 702, 704, 706, and 708 received from the first processor 200 (eg, an application processor (AP)). 10) may be assigned access rights (722). The first processor 200 may perform a security function related to the first task through the security subsystem 230 or 310 based on the access authority assigned by the authority allocation device 220 . When it is determined that the performance of the security function related to the first task is completed, the first processor 200 transmits a request signal related to the return of access rights to the security subsystem 230 or 310 to the rights assignment device 220. For example, when receiving a request signal related to the return of access rights to the security subsystem 230 or 310 from the first processor 200, the rights assignment device 220 may transmit a signal requesting deletion of data related to the first processor 200 to the security subsystem 230 or 310. The security subsystem 230 or 310 may delete data related to the first processor 200 based on a signal requesting deletion of data related to the first processor 200 . When the security subsystem 230 or 310 determines that data related to the first processor 200 has been deleted, the authority assignment device 220 determines that the access authority to the security subsystem 230 or 310 has been recovered from the first processor 200. For example, the authority assignment device may check whether deletion of data related to the first processor 200 is completed in the security subsystem 230 or 310 through a finite state machine (FSM). For example, when a request signal related to the return of the access right to the security subsystem 230 or 310 is not received from the first processor 200, the rights assignment device 220 may determine that the access right to the security subsystem 230 or 310 has not been recovered from the first processor 200.

According to various embodiments, when the access right to the security subsystem 230 or 310 is not retrieved from the first processor 200 (eg, 'No' in operation 601), the electronic device (eg, the authority assignment device 220) may terminate an embodiment for allocating the access authority of the security subsystem 230 or 310.

According to various embodiments, when the access authority to the security subsystem 230 or 310 is retrieved from the first processor 200 (eg, 'Yes' in operation 601), the electronic device (eg, the authority assignment unit 220) may check whether there is a permission request from the second processor 210 (eg, a communication processor (CP)) in operation 603. As an example, the request signal related to access rights may include information related to the first processor 200 requesting access rights (eg, identification information) and/or a first value indicating a request for access rights (eg '1').

According to an embodiment, when the authority assignment device 220 assigns the access authority of the security subsystem 230 or 310 to the first processor 200 (722), the first processor 200 and/or the second processor 210 transmits request signals 704, 706, 708, 710 and/or 712) can be stored. For example, information related to the request signals 704, 706, 708, 710, and/or 712 related to the access rights of the security subsystem 230 or 310 may be stored in a memory (not shown) of the rights allocation device 220. For example, information related to the request signals 704, 706, 708, 710 and/or 712 related to the access authority of the security subsystem 230 or 310 may be stored in a memory (not shown) of the first processor 200 and/or a memory (not shown) of the second processor 200. The authority assignment unit 220 transmits request signals 704, 706, 70 related to the access authority of the security subsystem 230 or 310 received from the first processor 200 and/or the second processor 210 in a state in which the access authority of the security subsystem 230 or 310 is allocated to the first processor 200 through the finite state machine (eg, the third FSM) of the authority allocation unit 220. 8, 710 and/or 712). For example, the memory of the first processor 200 may include a memory included in a processor package including the first processor 200 . For example, the memory of the second processor 210 may include a memory included in a processor package including the second processor 210 . For example, the memory of the first processor 200 and the memory of the second processor 200 may include a memory included in one processor package including the first processor 200 and the second processor 210 .

According to an embodiment, the permission assignment device 220 has a request signal received from the second processor 210 different from the first processor 200 among the stored request signals 704, 706, 708, 710 and/or 712 while the access permission of the security subsystem 230 or 310 is assigned to the first processor 200 (eg, the request signal 710 corresponding to the fifth task) exists. you can check if it does. As an example, the designated number is the maximum number of request signals related to the access rights of the security subsystem 230 or 310 that can be stored by the rights assignment device 220, and may be set based on the size of the memory (or buffer or queue) related to the rights assignment device 220.

According to various embodiments, the electronic device (eg, the authority assignment device 220) may allocate the access authority of the security subsystem 230 or 310 to the second processor 210 in operation 605 when there is a request for authority from the second processor 210 (eg, 'Yes' in operation 603). According to an embodiment, when the first permission assignment method (eg, semaphore method) is used, the permission assignment device 220 may determine that one of the plurality of request signals 702, 704, 706, and 708 successively received from one processor (for example, the first processor 200) is one request signal. When the authority allocation unit 220 allocates the access authority of the security subsystem 230 or 310 to the first processor 200 at a previous time based on the plurality of request signals 702, 704, 706 and 708 received from the first processor 200, the security subsystem 230 or 310 is based on the request signals 710 and/or 712 of the second processor 210. ) may be assigned to the second processor 210. The second processor 210 may perform a security function related to the fifth task through the security subsystem 230 or 310 based on the access authority allocated from the authority allocation device 220 .

According to an embodiment, the security subsystem 230 or 310 may acquire the key of the second processor 210 to which the access authority of the security subsystem 230 or 310 is assigned based on the control of the authority assignment device 220. For example, the security subsystem 230 may obtain the key of the second processor 210 from the second processor key management module 243 through the key selection module 241 of FIG. 2B. For example, the security subsystem 310 may obtain the key of the second processor 210 from the processor key management device 300 of FIG. 3 .

According to various embodiments, the electronic device (eg, the authority assignment device 220) may allocate the access authority of the security subsystem 230 or 310 to the first processor 210 in operation 607 when the authority request of the second processor 210 does not exist and the authority request of the first processor 200 exists (eg, 'No' in operation 603). According to an embodiment, when the authority assignment device 220 receives only a plurality of request signals 704, 706, and 708 from the first processor 200 while the access authority of the security subsystem 230 or 310 is assigned to the first processor 200, the access of the security subsystem 230 or 310 based on the request signal 704 corresponding to the second task of the first processor 200 Authority may be assigned to the first processor 200 . The first processor 200 may perform a security function related to the second task through the security subsystem 230 or 310 based on the access authority assigned by the authority allocation device 220 .

According to an embodiment, the security subsystem 230 or 310 may acquire the key of the first processor 200 to which the access authority of the security subsystem 230 or 310 is assigned based on the control of the authority assignment device 220. For example, the security subsystem 230 may acquire the key of the first processor 200 from the first processor key management module 242 through the key selection module 241 of FIG. 2B. For example, the security subsystem 310 may obtain the key of the first processor 110 from the processor key management device 300 of FIG. 3 .

According to various embodiments, when the electronic device (eg, the authority assignment device 220) retrieves the access authority of the security subsystem 230 or 310 from the second processor 210, the access authority of the security subsystem 230 or 310 may be allocated to the first processor 200 based on the request signal 704 corresponding to the second task of the first processor 200. The first processor 200 may perform a security function related to the second task through the security subsystem 230 or 310 based on the access authority assigned by the authority allocation device 220 .

8 is a flowchart 800 for allocating access rights of a security device (eg, the security subsystem 230 or 310) based on a permission request time point in an electronic device according to various embodiments. According to an embodiment, the operations of FIG. 8 may be detailed operations of operations 505 and 507 of FIG. 5 . In the following embodiments, each operation may be performed sequentially, but not necessarily sequentially. For example, the order of each operation may be changed, or at least two operations may be performed in parallel. As an example, the electronic device of FIG. 8 may be the electronic device 101 of FIG. 1 or 2 . Hereinafter, at least some components of FIG. 8 may be described with reference to FIG. 9 . 9 is an example of allocating access rights of a security device based on a permission request time point in an electronic device according to various embodiments.

According to various embodiments of the present disclosure with reference to FIGS. 8 and 9 , the electronic device (eg, the permission assignment device 220 of FIG. 2 ) may check in operation 801 whether the access right to the security subsystem 230 or 310 is revoked. According to an embodiment, when receiving a request signal related to the return of the access right to the security subsystem 230 or 310 from the first processor 200 or the second processor 210, the rights assignment unit 220 transmits the request signal related to the return of the access right to the security subsystem 230 or 310 (eg, a signal requesting deletion of data related to the first processor 200 or the second processor 210). may be transmitted to the security subsystem 230 or 310. The security subsystem 230 or 310 may delete data related to the first processor 200 or the second processor 210 based on a signal requesting deletion of data related to the processor (e.g., the first processor 200 or the second processor 210) that has transmitted the request signal related to the return of the access right to the security subsystem 230 or 310. When the security subsystem 230 or 310 determines that data related to the first processor 200 or the second processor 210 has been deleted, the authority assignment device 220 determines that the access authority to the security subsystem 230 or 310 has been revoked. For example, the authority assignment device may check whether deletion of data related to the first processor 200 or the second processor 210 is completed in the security subsystem 230 or 310 through a finite state machine (FSM). According to an embodiment, when the request signal related to the return of the access right to the security subsystem 230 or 310 is not received from the first processor 200 or the second processor 210, the rights assignment device 220 may determine that the access right to the security subsystem 230 or 310 has not been recovered.

According to various embodiments, when the access right to the security subsystem 230 or 310 is not recovered (eg, 'No' in operation 801), the electronic device (eg, the authority assignment device 220) may terminate an embodiment for allocating the access authority of the security subsystem 230 or 310.

According to various embodiments, when the access right to the security subsystem 230 or 310 is retrieved (eg, 'Yes' in operation 801), the electronic device (eg, the authority assignment device 220) may select a processor for allocating the access authority to the security subsystem 230 or 310 based on the authority request timing of the first processor 200 and/or the second processor 210 in operation 803. According to an embodiment, when the authority allocation device 220 allocates the access authority of the security subsystem 230 or 310 to the first processor 200 (eg, AP) or the second processor 210 (eg, CP), the request signals 902 and 90 related to the access authority of the specified number of security subsystems 230 or 310 received from the first processor 200 and/or the second processor 210 4, 906, 908, 910 and/or 912). For example, information related to request signals 902, 904, 906, 908, 910, and/or 912 related to access rights of the security subsystem 230 or 310 may be stored in a memory (not shown) of the rights allocation device 220. The authority assignment unit 220 assigns the second processor 210 at which the access authority request time point (eg, 902) is the earliest among the request signals 902, 904, 906, 908, 910, and/or 912 related to the access authority of the specified number of security subsystems 230 or 310 received from the first processor 200 and/or the second processor 210. 0 or 310) can be selected as the processor for assigning access rights.

According to various embodiments, the electronic device (e.g., the authority assignment device 220) may allocate the access authority of the security subsystem 230 or 310 to a processor selected to allocate access authority to the security subsystem 230 or 310 in operation 805. According to one embodiment, when the second permission assignment method (eg, queue method) is used and the priorities of the first processor 200 and the second processor 210 are not set, the permission assignment device 220 sequentially allocates the access permission of the security subsystem 230 or 310 to the first processor 200 or the second processor 210 based on the request time of the access permission of the security subsystem 230 or 310. there is For example, as shown in FIG. 9 , when the second processor 210 requests permission at the earliest, the access right of the security subsystem 230 or 310 may be allocated to the second processor 210 based on the request signal 902 of the second processor 210. The second processor 210 may perform a security function related to a task corresponding to the request signal 902 through the security subsystem 230 or 310 based on the access authority allocated from the authority allocation device 220 .

According to various embodiments, the security subsystem 230 or 310 may acquire a key of a processor (eg, the first processor 200 or the second processor 210) to which the access authority of the security subsystem 230 or 310 is assigned based on the control of the authority assignment device 220. According to an embodiment, the key of the processor (e.g., the first processor 200 or the second processor 210) to which the access authority of the security subsystem 230 or 310 is assigned may be obtained from the first processor key management module 242 or the second processor key management module 243 included in the security subsystem 230, as shown in FIG. 2B. According to one embodiment, the key of the processor (e.g., the first processor 200 or the second processor 210) to which the access authority of the security subsystem 230 or 310 is assigned may be obtained from the security subsystem 310 and the separate processor key management device 300, as shown in FIG.

According to various embodiments, when the electronic device (eg, the authority assignment device 220) retrieves the access authority of the security subsystem 230 or 310 from the second processor 210, the access authority of the security subsystem 230 or 310 may be allocated to the first processor 200 based on the request signal 904 of the first processor 200. The first processor 200 may perform a security function related to a task corresponding to the request signal 904 through the security subsystem 230 or 310 based on the access authority allocated from the authority allocation device 220 .

10 is a flowchart 1000 for allocating access rights of a security device (eg, the security subsystem 230 or 310) based on the priority of rights allocation in an electronic device according to various embodiments. According to an embodiment, the operations of FIG. 10 may be detailed operations of operations 505 and 507 of FIG. 5 . In the following embodiments, each operation may be performed sequentially, but not necessarily sequentially. For example, the order of each operation may be changed, or at least two operations may be performed in parallel. As an example, the electronic device of FIG. 10 may be the electronic device 101 of FIG. 1 or 2 . Hereinafter, at least some components of FIG. 10 may be described with reference to FIGS. 11 and 12 . 11 is an example for allocating access rights of a security device based on rights allocation priority in an electronic device according to various embodiments. 12 is another example of allocating access rights of a security device based on rights allocation priority in an electronic device according to various embodiments.

According to various embodiments of the present disclosure referring to FIGS. 10, 11, and/or 12, the electronic device (e.g., the rights assignment device 220 of FIG. 2) checks in operation 1001 whether the right to access the security subsystem 230 or 310 is revoked. According to an embodiment, the authority assignment device 220 may transmit, to the security subsystem 230 or 310, a signal requesting deletion of data related to the processor to which the access authority of the security subsystem 230 or 310 has been assigned when receiving a request signal related to the return of the access authority to the security subsystem 230 or 310 from the first processor 200 (eg AP) or the second processor 210 (eg CP). The security subsystem 230 or 310 may delete data related to the processor to which the access authority of the security subsystem 230 or 310 has been assigned based on a signal requesting deletion of data. When the security subsystem 230 or 310 determines that the data related to the processor to which the security subsystem 230 or 310 has been assigned has been deleted, the authority assignment unit 220 determines that the access authority to the security subsystem 230 or 310 has been recovered. For example, the authority assignment device may check whether deletion of data related to a processor to which access rights of the security subsystem 230 or 310 have been assigned is completed in the security subsystem 230 or 310 through a finite state machine (FSM). For example, the processor to which the access authority of the security subsystem 230 or 310 has been assigned may include a processor that transmits a request signal related to the return of the access authority to the security subsystem 230 or 310 .

According to an embodiment, when the request signal related to the return of the access right to the security subsystem 230 or 310 is not received from the first processor 200 or the second processor 210, the rights assignment device 220 may determine that the access right to the security subsystem 230 or 310 has not been recovered.

According to various embodiments, when the access right to the security subsystem 230 or 310 is not recovered (eg, 'No' in operation 1001), the electronic device (eg, the authority assignment device 220) may end an embodiment for allocating the access authority of the security subsystem 230 or 310.

According to various embodiments, when the electronic device (eg, the authority assignment device 220) retrieves the access authority to the security subsystem 230 or 310 (eg, 'yes' in operation 1001), in operation 1003, it may check whether there is a permission request from a processor (eg, the first processor 200 or the second processor 210) to which priority is set. According to an embodiment, when the authority assignment device 220 allocates the access authority of the security subsystem 230 or 310 to the first processor 200 or the second processor 210, the request signals 1102, 1104, 1106, 1108, 1110 and/or 1112). For example, information related to the request signals 1102, 1104, 1106, 1108, 1110, and/or 1112 related to the access rights of the security subsystem 230 or 310 may be stored in a memory (not shown) of the rights allocation device 220. When the priority of access rights to the security subsystems 230 or 310 is set in the first processor 200, the rights assignment device 220 transmits the security subsystem received from the first processor 200 among the request signals 1102, 1104, 1106, 1108, 1110 and/or 1112 related to the access rights of the specified number of security subsystems 230 or 310 ( 230 or 310) may check whether a request signal (eg, 1104, 1108, and/or 1112) related to the access authority exists.

According to an embodiment, when the authority assignment device 220 allocates the access authority of the security subsystem 230 or 310 to the first processor 200 or the second processor 210, the request signals 1202, 1204, 1206, 1208, 1210 and/or 1212). For example, information related to the request signals 1202, 1204, 1206, 1208, 1210, and/or 1212 related to the access rights of the security subsystem 230 or 310 may be stored in a memory (not shown) of the rights allocation device 220. When the priority of the access rights to the security subsystem 230 or 310 is set in the second processor 200, the rights assignment device 220 transmits the security subsystem received from the second processor 210 among the request signals 1202, 1204, 1206, 1208, 1210 and/or 1212 related to the access rights of the specified number of security subsystems 230 or 310 ( 230 or 310) may check whether a request signal (eg, 1210 and/or 1212) related to the access authority exists.

According to various embodiments, the electronic device (eg, the authority assignment device 220) may allocate the access authority of the security subsystem 230 or 310 to the processor for which the priority is set, in operation 1005, when there is a request for authority from the processor (eg, the first processor 200 or the second processor 210) for which priority is set (eg, 'Yes' in operation 1003). According to one embodiment, referring to FIG. 11 , the permission allocation device 220 controls the access authority of the security subsystem 230 or 310 based on the request signal 1104 received first among the request signals 1104 , 1108 and 1112 received from the first processor 200 when the second permission allocation method (eg, queue method) is used and the priority is set in the first processor 200 . 1 can be assigned to the processor 200. The first processor 200 may perform a security function related to a task corresponding to the request signal 1104 through the security subsystem 230 or 310 based on the access authority allocated from the authority allocation device 220 .

According to one embodiment, referring to FIG. 12, the permission allocation device 220 assigns the access authority of the security subsystem 230 or 310 to the second processor 210 based on the request signal 1210 received first among the request signals 1210 and 1212 received from the second processor 210 when a second permission allocation method (eg, a queue method) is used and a priority is set to the second processor 210. ) can be assigned to The second processor 210 may perform a security function related to a task corresponding to the request signal 1210 through the security subsystem 230 or 310 based on the access authority assigned by the authority allocation device 220 .

According to an embodiment, the security subsystem 230 or 310 may obtain the key of the second processor 210 to which the access authority of the security subsystem 230 or 310 is assigned based on the control of the authority assignment device 220. For example, the key of the second processor 210 may be obtained from the second processor key management module 243 included in the security subsystem 230, as shown in FIG. 2B. For example, as shown in FIG. 3 , the key of the second processor 210 may be acquired from the security subsystem 310 and a separate processor key management device 300 .

According to various embodiments, the electronic device (eg, the authority assignment device 220) may allocate the access authority of the security subsystem 230 or 310 to another processor based on the authority request of another processor for which priority is not set, in operation 1007, when there is no authority request from the processor (eg, the first processor 200 or the second processor 210) to which priority is set (eg, 'No' in operation 1003). According to an embodiment, referring to FIG. 11 , when the access right of the security subsystem 230 or 310 is retrieved from the first processor 200, the access right of the security subsystem 230 or 310 may be allocated to the first processor 200 based on the request signal 1108 of the first processor 200 to which priority is set. The first processor 200 may perform a security function related to a task corresponding to the request signal 1108 through the security subsystem 230 or 310 based on the access authority assigned by the authority allocation device 220 . For example, if there is a permission request from the first processor 200 for which priority is set, the permission assignment device 220 may repeatedly allocate the access permission of the security subsystem 230 or 310 to the first processor 200. For example, if there is no permission request from the first processor 200 for which priority is set, the permission assignment device 220 may allocate the access permission of the security subsystem 230 or 310 to the second processor 210 based on the request signal 1102 of the second processor 210 for which priority is not set. The second processor 210 may perform a security function related to a task corresponding to the request signal 1102 through the security subsystem 230 or 310 based on the access authority assigned by the authority allocation device 220 .

According to an embodiment, referring to FIG. 12 , when the access right of the security subsystem 230 or 310 is retrieved from the second processor 200, the access right of the security subsystem 230 or 310 may be allocated to the second processor 210 based on the request signal 1212 of the second processor 210 in which priority is set. The second processor 210 may perform a security function related to a task corresponding to the request signal 1212 through the security subsystem 230 or 310 based on the access authority allocated from the authority allocation device 220 . When there is no permission request from the second processor 210 for which priority is set, the permission assignment device 220 may allocate the access permission of the security subsystem 230 or 310 to the first processor 200 based on the request signal 1202 of the first processor 200 for which priority is not set. The first processor 200 may perform a security function related to a task corresponding to the request signal 1202 through the security subsystem 230 or 310 based on the access authority allocated from the authority allocation device 220 . According to an embodiment, the security subsystem 230 or 310 may acquire the key of the first processor 200 to which the access authority of the security subsystem 230 or 310 is assigned based on the control of the authority assignment device 220. For example, the key of the first processor 200 may be obtained from the first processor key management module 242 included in the security subsystem 230, as shown in FIG. 2B. For example, as shown in FIG. 3 , the key of the first processor 200 may be obtained from the security subsystem 310 and a separate processor key management device 300 .

13 is a flowchart 1300 for requesting an access right of a security device (eg, the security subsystem 230 or 310) in an electronic device according to various embodiments. In the following embodiments, each operation may be performed sequentially, but not necessarily sequentially. For example, the order of each operation may be changed, or at least two operations may be performed in parallel. As an example, the electronic device of FIG. 13 may be the electronic device 101 of FIG. 1 or 2 .

According to various embodiments of the present disclosure referring to FIG. 13 , the electronic device (eg, the first processor 200 and/or the second processor 210 of FIG. 2 ) determines whether to perform a security function using the security subsystem 230 or 310 in operation 1301. According to an embodiment, the first processor 200 and/or the second processor 210 may determine that a security function using the security subsystem 230 or 310 is performed when at least one job related to the security function exists. According to an embodiment, the second processor 210 may determine that a security function using the security subsystem 230 or 310 is performed when there is a task that has not been completed through the security subsystem 230 or 310 based on the designated reference time. According to an embodiment, the first processor 200 and/or the second processor 210 may determine that the security function using the security subsystem 230 or 310 is not performed when at least one job related to the security function does not exist.

According to various embodiments, when it is determined that the electronic device (eg, the first processor 200 and/or the second processor 210) does not perform a security function using the security subsystem 230 or 310 (eg, 'No' in operation 1301), an embodiment for requesting access authority of the security subsystem 230 or 310 may be terminated.

According to various embodiments, when it is determined that the electronic device (eg, the first processor 200 and/or the second processor 210) performs a security function using the security subsystem 230 or 310 (eg, 'Yes' in operation 1301), in operation 1303, a request signal related to the access authority of the security subsystem 230 or 310 may be transmitted to the authority allocation device 220. For example, a request signal related to access rights may include information (eg, identification information) related to a processor requesting access rights and/or a first value (eg, '1') indicating a request for access rights.

According to various embodiments, the electronic device (eg, the first processor 200 and/or the second processor 210), in operation 1305, determines whether the security subsystem 230 or 310 is assigned access rights from the rights assignment device 220. According to an embodiment, the first processor 200 and/or the second processor 210 may determine that the access authority of the security subsystem 230 or 310 has been assigned when an ACK signal is received from the authority assignment device 220 in response to a request signal related to the access authority of the security subsystem 230 or 310. According to an embodiment, the first processor 200 and/or the second processor 210 may determine that the access authority of the security subsystem 230 or 310 is not assigned when an ACK signal is not received from the authority assignment device 220 in response to a request signal related to the access authority of the security subsystem 230 or 310.

According to various embodiments, when the electronic device (eg, the first processor 200 and/or the second processor 210) determines that the access authority of the security subsystem 230 or 310 is not assigned by the authority assignment device 220 (eg, 'No' in operation 1305), an embodiment for requesting the access authority of the security subsystem 230 or 310 may be terminated.

According to various embodiments, when the electronic device (eg, the first processor 200 and/or the second processor 210) determines that the access authority of the security subsystem 230 or 310 has been assigned by the authority assignment device 220 (eg, 'yes' in operation 1305), in operation 1307, it may perform a security function related to at least one task through the security subsystem 230 or 310. According to an embodiment, the first processor 200 or the second processor 210 may perform a security function related to at least one task corresponding to a request signal transmitted to the authority assignment device 220 to be assigned an access authority of the security subsystem 230 or 310 through the security subsystem 230 or 310.

According to various embodiments, when the first processor 200 or the second processor 210 completes performing a security function related to at least one task through the security subsystem 230 or 310, the security subsystem 230 or 310 may transmit a request signal related to the return of access rights to the authority assignment device 220. As an example, the request signal related to the return of the access right differs from the first value indicating the request for information (e.g., identification information) and/or the request for the access right related to the processor requesting the return of the access right. It may include a second value (eg '0').

According to various embodiments, the second processor 210 may transmit a request signal related to the return of the access authority to the security subsystem 230 or 310 to the authority assignment device 220 when a specified reference time elapses from the time when the access authority of the security subsystem 230 or 310 is allocated.

14 is a flowchart 1400 for returning an access right of a security device (eg, the security subsystem 230 or 310) in an electronic device according to various embodiments. According to one embodiment, the operations of FIG. 14 may be detailed operations of operation 1307 of FIG. 13 . In the following embodiments, each operation may be performed sequentially, but not necessarily sequentially. For example, the order of each operation may be changed, or at least two operations may be performed in parallel. As an example, the electronic device of FIG. 14 may be the electronic device 101 of FIG. 1 or 2 .

According to various embodiments of the present disclosure referring to FIG. 14 , when the electronic device (eg, the second processor 210 of FIG. 2 ) is assigned the access authority of the security subsystem 230 or 310 from the authority assignment device 220 (eg, 'YES' in operation 1305 of FIG. 13 ), in operation 1401 , the occupation time of the security subsystem 230 or 310 by the second processor 210 may be checked. . According to an embodiment, when the second processor 210 receives a signal (eg, an ACK signal) related to the assignment of access rights to the security subsystem 230 or 310 from the rights assignment device 220, the timer may be driven. The second processor 210 may check the time the second processor 210 occupies the security subsystem 230 or 310 based on the running time of the timer. For example, the timer may include a timer instruction executed by the second processor 210, a timer program, and/or a timer implemented by hardware included in the second processor 210.

According to various embodiments, in operation 1403, the electronic device (eg, the second processor 210) determines whether the second processor 210 can process a security function related to at least one task of the second processor 210 based on the time the security subsystem 230 or 310 is occupied. According to one embodiment, the second processor 210 may occupy the security subsystem 230 or 310 for a designated reference time. The second processor 210 can detect the time at which the second processor 210 can use the security subsystem 230 or 310 based on the time the second processor 210 occupies the security subsystem 230 or 310 and the designated reference time. The second processor 210 may check whether the security function related to at least one task of the second processor 210 can be processed during the time when the security subsystem 230 or 310 can be used.

According to various embodiments, when it is determined that the electronic device (eg, the second processor 210) cannot process a security function related to at least one task of the second processor 210 (eg, 'No' in operation 1403), in operation 1409, a request signal related to return of access authority to the security subsystem 230 or 310 may be transmitted to the authority allocation unit 220. According to an embodiment, when the second processor 210 returns the access right of the security subsystem 230 or 310 based on the time the second processor 210 occupies the security subsystem 230 or 310, it may transmit a request signal related to the access right of the security subsystem 230 or 310 to the right allocating device 220 in order to process at least one unprocessed task.

According to various embodiments, when it is determined that the electronic device (eg, the second processor 210) can process the security function related to the at least one task of the second processor 210 (eg, 'Yes' in operation 1403), in operation 1405, the security function related to the at least one operation may be performed through the security subsystem 230 or 310.

According to various embodiments, in operation 1407, the electronic device (eg, the second processor 210) may determine whether the security subsystem 230 or 310 satisfies a specified occupancy condition related to the security subsystem 230 or 310 based on the amount of time the second processor 210 occupies the security subsystem 230 or 310 while performing a security function related to at least one task. According to an embodiment, the second processor 210 may determine that a specified occupation condition related to the security subsystem 230 or 310 is satisfied when the time for which the second processor 210 occupies the security subsystem 230 or 310 is less than a specified reference time. According to an embodiment, the second processor 210 may determine that a specified occupation condition related to the security subsystem 230 or 310 is not satisfied when the time during which the second processor 210 occupies the security subsystem 230 or 310 is equal to or longer than a specified reference time.

According to various embodiments, when the electronic device (eg, the second processor 210) determines that the specified occupancy condition related to the security subsystem 230 or 310 is satisfied (eg, 'yes' in operation 1407), in operation 1405, it may perform a security function related to at least one task through the security subsystem 230 or 310.

According to various embodiments, when the electronic device (eg, the second processor 210) determines that the specified occupancy condition related to the security subsystem 230 or 310 is not satisfied (eg, 'No' in operation 1407), in operation 1409, the access authority to the security subsystem 230 or 310 may be returned (or returned). According to an embodiment, when the time the second processor 210 occupies the security subsystem 230 or 310 is equal to or longer than a specified reference time, the second processor 210 may transmit a request signal related to the return of access rights to the security subsystem 230 or 310 to the authority assignment device 220 regardless of whether or not at least one task is completed. As an example, the request signal related to the return of access rights may include information (eg, identification information) related to the processor requesting the return of access rights and/or a second value different from the first value for requesting access rights (eg '0').

According to various embodiments, the electronic device 101 limits the time that the second processor 210 occupies the security subsystem 230 or 310 to a specified reference time, so that the first processor 200 can secure safety for performing security functions through the security subsystem 230 or 310.

According to various embodiments, the second processor 210 may transmit a request signal related to the return of access rights to the security subsystem 230 or 310 to the authority assignment device 220 when the security function related to at least one task is completed through the security subsystem 230 or 310 in a state where the occupation time of the security subsystem 230 or 310 is less than a specified reference time.

According to various embodiments, the electronic device 101 may limit the time that the security subsystem 230 or 310 is occupied by the first processor 200 as well as the second processor 210 to a specified reference time.

15A is an example of requesting an access right of a security device (eg, the security subsystem 230) in an electronic device according to various embodiments.

According to various embodiments of the present disclosure with reference to FIG. 15A, when there is at least one job related to a security function, the second processor 210 of the electronic device 101 may transmit a request signal related to the access right of the security subsystem 230 to the right assignment device 220 (operation 1501). As an example, the request signal related to access rights may include information related to the second processor 210 requesting access rights (eg, identification information) and/or a first value indicating a request for access rights (eg '1').

According to various embodiments, the authority assignment device 220 may allocate the access authority of the security subsystem 230 to the second processor 210 based on the request signal related to the access authority of the security subsystem 230 received from the second processor 210. The authority allocation device 220 may transmit a signal (eg, an ACK signal) related to the allocation of access authority to the security subsystem 230 to the second processor 210 (operation 1503). According to an embodiment, the authority assignment device 220 may allocate the access authority of the security subsystem 230 to the second processor 210 when there is no processor assigned the access authority of the security subsystem 230. According to an embodiment, the authority assignment device 220 may check whether the access authority of the security subsystem 230 is recovered when there is a processor assigned the access authority of the security subsystem 230 . When the access authority of the security subsystem 230 is recovered, the authority assignment device 220 may allocate the access authority of the security subsystem 230 to the second processor 210 . For example, upon receiving a plurality of request signals for the access right of the security subsystem 230, the rights assignment device 220 may allocate the access right of the security subsystem 230 to the second processor 210 based on the right allocation method, the request time point of the access right, and/or the priority of the access right.

According to various embodiments, when the access authority of the security subsystem 230 is assigned to the second processor 210, the authority assignment device 220 may transmit information related to the allocation of access authority to the second processor 210 (eg, instruction information related to key selection of the second processor 210) to the security subsystem 230 (operation 1506). According to an embodiment, the security subsystem 230 may acquire the key of the second processor 210 based on information related to the assignment of access rights to the second processor 210 (eg, instruction information related to key selection of the second processor 210) received from the rights assignment device 220. For example, the key of the second processor 210 may be obtained from the second processor key management module 243 through the processor key selection module 241 included in the processor key management module 233 of FIG. 2B. For example, the key of the second processor 210 is a root key of the second processor 210 to which the access authority of the security subsystem 230 is assigned, and may include OTP or eFuse.

According to various embodiments, when the access authority of the security subsystem 230 is allocated from the authority assignment device 220, the second processor 210 may check the time the second processor 210 occupies the security subsystem 230 (operation 1505). According to an embodiment, the second processor 210 may drive a timer when receiving a signal (eg, an ACK signal) related to the assignment of access rights to the security subsystem 230 from the rights assignment device 220 . The second processor 210 may check the time the second processor 210 occupies the security subsystem 230 based on the running time of the timer.

According to various embodiments, when it is determined that the second processor 210 can process a security function related to at least one task of the second processor 210 based on the time the second processor 210 occupies the security subsystem 230, it may perform the security function through the security subsystem 230 (operation 1507). According to an embodiment, the second processor 210 may detect the time at which the second processor 210 can use the security subsystem 230 based on the time the second processor 210 occupies the security subsystem 230 and the designated reference time. The second processor 210 may check whether the security function related to at least one task of the second processor 210 can be processed during the time during which the security subsystem 230 can be used. When it is determined that the second processor 210 can process the security function related to at least one task, the second processor 210 may perform the security function related to the at least one task through the security subsystem 230 . According to an embodiment, the security subsystem 230 may process the security function of the second processor 210 based on the key of the second processor 210 . For example, the security function may include at least one of encryption of RAM related to the second processor 210, encryption of important data (eg, IMEI or MEID) related to the second processor 210, decryption of important data related to the second processor 210, generation of a certificate and/or signature of important data related to the second processor 210, verification of a certificate and/or signature of important data related to the second processor 210, or generation of an encryption key. there is For example, the security function may include a function for encrypting important data (eg, payment data) related to the first processor 200 and/or generating an encryption key.

According to various embodiments, when processing of at least one task related to the security function is completed, the second processor 210 may request the return (or return) of the access right to the security subsystem 230 (operation 1509). According to one embodiment, when the second processor 210 completes processing of at least one task related to the security function within a specified reference time, a request signal related to the return of access rights to the security subsystem 230 may be transmitted to the rights assignment device 220. As an example, the request signal related to the return of the access right may indicate information (eg, identification information) related to the second processor 210 requesting the return of the access right and/or return of the access right. A second value different from the first value (eg '0') may be included.

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the second processor 210 to the security subsystem 230 based on a request for return of the access authority of the security subsystem 230 from the second processor 210. The authority assignment device 220 may transmit information related to return of the access authority of the security subsystem 230 (eg, authority return notification information) to the second processor 210 (operation 1511).

According to various embodiments, the authority assignment device 220 may control the security subsystem 230 to delete data related to the second processor 210 based on the return of the access authority of the second processor 200 to the security subsystem 230 (operation 1513). According to an embodiment, when the access right of the security subsystem 230 is retrieved from the second processor 210, the authority assignment device 220 may provide an initialization request signal to the security subsystem 230 (operation 1513).

According to various embodiments, the security subsystem 230 may initialize the security subsystem 230 based on the initialization request signal received from the authority assignment device 220 (operation 1515). According to an embodiment, the security subsystem 230 may delete information related to the second processor 210 existing in an internal memory and/or a registration path of the security subsystem 230 through initialization of the security subsystem 230. For example, the information related to the second processor 210 may include a key of the second processor 210 and/or operation information based on the key of the second processor 210 .

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the second processor 210 to the security subsystem 230 regardless of the return (or return) request of the access authority of the security subsystem 230 from the second processor 210. According to an embodiment, when the authority assignment device 220 determines that the occupation time of the security subsystem 230 of the second processor 210 exceeds a specified reference time, the access authority of the second processor 210 to the security subsystem 230 may be recovered. Based on the recovery of the access right of the second processor 210 to the security subsystem 230, the rights assignment device 220 may transmit information related to return (or return) of the access right of the security subsystem 230 (eg, right return notification information) to the second processor 210 (operation 1511). For example, operation 1511 of FIG. 15A may be omitted.

15B is an example of requesting an access right of a security device (eg, the security subsystem 310) in an electronic device according to various embodiments.

According to various embodiments of the present disclosure with reference to FIG. 15B, when there is at least one job related to a security function, the second processor 210 of the electronic device 101 transmits a request signal related to the access right of the security subsystem 310 to the right assignment device 220 (operation 1521).

According to various embodiments, the authority assignment device 220 may allocate the access authority of the security subsystem 310 to the second processor 210 based on the request signal related to the access authority of the security subsystem 310 received from the second processor 210. The authority allocation unit 220 may transmit a signal (eg, an ACK signal) related to the allocation of access authority to the security subsystem 310 to the second processor 210 (operation 1523). For example, operations 1521 and 1523 of FIG. 15B may include operations corresponding to (or identical to) operations 1501 and 1503 of FIG. 15A.

According to various embodiments, when the access authority of the security subsystem 310 is allocated to the second processor 210, the authority allocation unit 220 may transmit information related to the allocation of access authority to the second processor 210 (eg, instruction information related to key selection of the second processor 210) to the processor key management unit 300 (operation 1525).

According to various embodiments, the processor key management device 300 may select a key of the second processor 210 based on information related to assigning access rights to the second processor 210 received from the permission assignment device 220 (eg, instruction information related to key selection of the second processor 210). The processor key management device 300 may provide information related to the key of the second processor 210 (or the key of the second processor 210) to the security subsystem 310 (operation 1527). As an example, the key of the second processor 210 may be obtained from the second processor key management module 306 by the processor key selection module 302 of FIG. 3 .

According to various embodiments, when the access authority of the security subsystem 310 is allocated from the authority assignment device 220, the second processor 210 may check the time the second processor 210 occupies the security subsystem 310 (operation 1529). According to an embodiment, the second processor 210 may drive a timer when receiving a signal (eg, an ACK signal) related to the assignment of access rights to the security subsystem 310 from the rights assignment device 220 . The second processor 210 may check the time the second processor 210 occupies the security subsystem 310 based on the running time of the timer.

According to various embodiments, when it is determined that the second processor 210 can process a security function related to at least one task of the second processor 210 based on the time the second processor 210 occupies the security subsystem 310, it may perform the security function through the security subsystem 310 (operation 1531). According to an embodiment, the second processor 210 may detect the time at which the second processor 210 can use the security subsystem 310 based on the time the second processor 210 occupies the security subsystem 310 and the designated reference time. The second processor 210 may check whether the security function related to at least one task of the second processor 210 can be processed during the time when the security subsystem 310 can be used. When it is determined that the second processor 210 can process the security function related to at least one task, the second processor 210 may perform the security function related to the at least one task through the security subsystem 310 . According to an embodiment, the security subsystem 310 may process the security function of the second processor 210 based on the key of the second processor 210 .

According to various embodiments, when processing of at least one task related to the security function is completed, the second processor 210 may request return (or return) of the access right to the security subsystem 310 (operation 1533). According to one embodiment, when the second processor 210 completes the processing of at least one task related to the security function within a specified reference time, a request signal related to the return of access rights to the security subsystem 310 may be transmitted to the rights assignment device 220. As an example, the request signal related to the return of the access right may indicate information (eg, identification information) related to the second processor 210 requesting the return of the access right and/or return of the access right. A second value different from the first value (eg '0') may be included.

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the second processor 210 to the security subsystem 310 based on a request for return of the access authority of the security subsystem 310 from the second processor 210. The authority assignment device 220 may transmit information related to the return of the access authority of the security subsystem 310 (eg, authority return notification information) to the second processor 210 (operation 1535).

According to various embodiments, the authority assignment device 220 may control the security subsystem 310 to delete data related to the second processor 210 based on the return of the access authority of the second processor 200 to the security subsystem 310 (operation 1537). According to an embodiment, when the access right of the security subsystem 310 is retrieved from the second processor 210, the authority assignment device 220 may provide an initialization request signal to the security subsystem 310 (operation 1537).

According to various embodiments, the security subsystem 310 may initialize the security subsystem 310 based on the initialization request signal received from the authority assignment device 220 (operation 1539). According to an embodiment, the security subsystem 310 may delete information related to the second processor 210 existing in an internal memory and/or a registration path of the security subsystem 310 through initialization of the security subsystem 310. For example, the information related to the second processor 210 may include a key of the second processor 210 and/or operation information based on the key of the second processor 210 .

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the second processor 210 to the security subsystem 230 regardless of the return (or return) request of the access authority of the security subsystem 230 from the second processor 210. According to an embodiment, when the authority assignment device 220 determines that the occupation time of the security subsystem 230 of the second processor 210 exceeds a specified reference time, the access authority of the second processor 210 to the security subsystem 230 may be recovered. Based on the recovery of the access right of the second processor 210 to the security subsystem 230, the rights assignment device 220 may transmit information related to return (or return) of the access right of the security subsystem 230 (eg, right return notification information) to the second processor 210 (operation 1535). For example, operation 1533 of FIG. 15B may be omitted.

16A is an example for returning an access right of a security device (eg, the security subsystem 230) in an electronic device according to various embodiments.

According to various embodiments of the present disclosure with reference to FIG. 16A, when there is at least one job related to a security function, the second processor 210 of the electronic device 101 may transmit a request signal related to the access authority of the security subsystem 230 to the authority allocation device 220 (operation 1601). As an example, the request signal related to access rights may include information related to the second processor 210 requesting access rights (eg, identification information) and/or a first value indicating a request for access rights (eg '1').

According to various embodiments, the authority assignment device 220 may allocate the access authority of the security subsystem 230 to the second processor 210 based on the request signal related to the access authority of the security subsystem 230 received from the second processor 210. The authority allocation device 220 may transmit a signal (eg, an ACK signal) related to the allocation of access authority to the security subsystem 230 to the second processor 210 (operation 1603). According to an embodiment, the authority assignment device 220 may allocate the access authority of the security subsystem 230 to the second processor 210 when there is no processor assigned the access authority of the security subsystem 230. According to an embodiment, when the access rights of the security subsystem 230 are recovered, the rights assignment device 220 may allocate the access rights of the security subsystem 230 to the second processor 210 based on the rights assignment method, the request time of access rights, and/or the priority of the access rights.

According to various embodiments, when the access authority of the security subsystem 230 is allocated to the second processor 210, the authority assignment device 220 may transmit information related to the allocation of access authority to the second processor 210 (eg, instruction information related to key selection of the second processor 210) to the security subsystem 230 (eg, operation 1606). According to an embodiment, the security subsystem 230 may acquire the key of the second processor 210 based on information related to the assignment of access rights to the second processor 210 (eg, instruction information related to key selection of the second processor 210) received from the rights assignment device 220. For example, the key of the second processor 210 may be obtained from the second processor key management module 243 through the processor key selection module 241 included in the processor key management module 233 of FIG. 2B.

According to various embodiments, when the access authority of the security subsystem 230 is allocated from the authority assignment device 220, the second processor 210 may check the time the second processor 210 occupies the security subsystem 230 (operation 1605). According to an embodiment, the second processor 210 may drive a timer when receiving a signal (eg, an ACK signal) related to the assignment of access rights to the security subsystem 230 from the rights assignment device 220 . The second processor 210 may check the time the second processor 210 occupies the security subsystem 230 based on the running time of the timer.

According to various embodiments, when it is determined that the second processor 210 can process a security function related to at least one task of the second processor 210 based on the time the second processor 210 occupies the security subsystem 230, it may perform the security function through the security subsystem 230 (operation 1607). According to an embodiment, the security subsystem 230 may process the security function of the second processor 210 based on the key of the second processor 210 .

According to various embodiments, the second processor 210 may determine whether a specified occupancy condition related to the security subsystem 230 is satisfied while performing the security function through the security subsystem 230 (operation 1609). According to an embodiment, the second processor 210 may determine that a specified occupation condition related to the security subsystem 230 is satisfied when the time at which the second processor 210 occupies the security subsystem 230 is less than a specified reference time. According to an embodiment, the second processor 210 may determine that a specified occupation condition related to the security subsystem 230 is not satisfied when the time during which the second processor 210 occupies the security subsystem 230 is equal to or longer than a specified reference time.

According to various embodiments, when it is determined that the specified occupancy condition related to the security subsystem 230 is not satisfied (operation 1609), the second processor 210 may request the return (or return) of the access right to the security subsystem 230 (operation 1611). According to an embodiment, when the time that the second processor 210 occupies the security subsystem 230 is equal to or longer than a specified reference time, the second processor 210 may transmit a request signal related to the return of access rights to the security subsystem 230 to the rights assignment device 220 regardless of whether at least one task is completed (operation 1611). As an example, the request signal related to the return of the access right may indicate information (eg, identification information) related to the second processor 210 requesting the return of the access right and/or return of the access right. A second value different from the first value (eg '0') may be included.

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the second processor 210 to the security subsystem 230 based on a request for return of the access authority of the security subsystem 230 from the second processor 210. The authority assignment device 220 may transmit information (eg, authority return notification information) related to the return of the access authority of the security subsystem 230 to the second processor 210 (operation 1613).

According to various embodiments, the authority assignment device 220 may control the security subsystem 230 to delete data related to the second processor 210 based on the return of the access authority of the second processor 200 to the security subsystem 230 (operation 1615). According to an embodiment, when the access right of the security subsystem 230 is retrieved from the second processor 210, the authority assignment device 220 may provide an initialization request signal to the security subsystem 230 (operation 1615).

According to various embodiments, the security subsystem 230 may initialize the security subsystem 230 based on the initialization request signal received from the authority assignment device 220 (operation 1617). According to an embodiment, the security subsystem 230 may delete information related to the second processor 210 existing in an internal memory and/or a registration path of the security subsystem 230 through initialization of the security subsystem 230. For example, the information related to the second processor 210 may include a key of the second processor 210 and/or operation information based on the key of the second processor 210 .

According to various embodiments, when the second processor 210 fails to complete at least one task based on a designated reference time, the second processor 210 transmits a request signal related to the access right of the security subsystem 230 to the right assignment device 220 (operation 1619).

According to various embodiments, the authority assignment device 220 may allocate the access authority of the security subsystem 230 to the second processor 210 based on the request signal related to the access authority of the security subsystem 230 received from the second processor 210 (operation 1621). According to an embodiment, the authority assignment device 220 may transmit a signal (eg, an ACK signal) related to the allocation of access authority to the security subsystem 230 to the second processor 210 (operation 1621).

According to various embodiments, when the access authority of the security subsystem 230 is allocated to the second processor 210, the authority assignment device 220 may transmit information related to the allocation of access authority to the second processor 210 (eg, instruction information related to key selection of the second processor 210) to the security subsystem 230 (eg, operation 1623). According to an embodiment, the security subsystem 230 may acquire the key of the second processor 210 based on information related to the assignment of access rights to the second processor 210 (eg, instruction information related to key selection of the second processor 210) received from the rights assignment device 220. For example, the key of the second processor 210 may be obtained from the second processor key management module 243 through the processor key selection module 241 included in the processor key management module 233 of FIG. 2B.

According to various embodiments, the second processor 210 may perform a security function through the security subsystem 230 when the access authority of the security subsystem 230 is allocated from the authority assignment unit 220 (operation 1625). According to an embodiment, when the second processor 210 receives a signal (eg, ACK signal) related to the assignment of access rights to the security subsystem 230 from the authority assignment device 220, the timer may be driven (eg, reset). The second processor 210 may check the time the second processor 210 occupies the security subsystem 230 based on the running time of the timer. When the second processor 210 determines that the security function related to at least one task of the second processor 210 can be processed based on the time the second processor 210 occupies the security subsystem 230, the security function can be performed through the security subsystem 230. According to an embodiment, the security subsystem 230 may process the security function of the second processor 210 based on the key of the second processor 210 .

According to various embodiments, when processing of at least one task related to the security function is completed, the second processor 210 may return (or return) access rights to the security subsystem 230 (operation 1627). According to an embodiment, when the second processor 210 completes the processing of at least one task related to the security function within a specified reference time, a request signal related to the return of access rights to the security subsystem 230 may be transmitted to the rights assignment device 220 (operation 1627). As an example, the request signal related to the return of the access right may indicate information (eg, identification information) related to the second processor 210 requesting the return of the access right and/or return of the access right. A second value different from the first value (eg '0') may be included.

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the second processor 210 to the security subsystem 230 regardless of the return (or return) request of the access authority of the security subsystem 230 from the second processor 210. According to an embodiment, when the authority assignment device 220 determines that the occupation time of the security subsystem 230 of the second processor 210 exceeds a specified reference time, the access authority of the second processor 210 to the security subsystem 230 may be recovered. Based on the recovery of the access right of the second processor 210 to the security subsystem 230, the authority assignment device 220 may transmit information related to return (or return) of the access authority of the security subsystem 230 (eg, authority return notification information) to the second processor 210 (operation 1613). For example, operations 1611 and 1627 of FIG. 16A may be omitted.

16B is an example for returning an access right of a security device (eg, the security subsystem 310) in an electronic device according to various embodiments.

According to various embodiments of the present disclosure with reference to FIG. 16B, when there is at least one job related to the security function, the second processor 210 of the electronic device 101 transmits a request signal related to the access right of the security subsystem 310 to the right assignment device 220 (operation 1631).

According to various embodiments, the authority assignment device 220 may allocate the access authority of the security subsystem 310 to the second processor 210 based on the request signal related to the access authority of the security subsystem 310 received from the second processor 210. The authority allocation device 220 may transmit a signal (eg, an ACK signal) related to the allocation of access authority to the security subsystem 310 to the second processor 210 (operation 1633). For example, operations 1631 and 1633 of FIG. 16B may include operations corresponding to (or identical to) operations 1601 and 1603 of FIG. 16A .

According to various embodiments, when the access authority of the security subsystem 310 is allocated to the second processor 210, the authority allocation device 220 may transmit information related to the allocation of access authority to the second processor 210 (eg, instruction information related to key selection of the second processor 210) to the processor key management apparatus 300 (operation 1635).

According to various embodiments, the processor key management device 300 may select a key of the second processor 210 based on information related to assigning access rights to the second processor 210 received from the permission assignment device 220 (eg, instruction information related to key selection of the second processor 210). The processor key management device 300 may provide information related to the key of the second processor 210 (or the key of the second processor 210) to the security subsystem 310 (operation 1637). As an example, the key of the second processor 210 may be obtained from the second processor key management module 306 by the processor key selection module 302 of FIG. 3 .

According to various embodiments, when the access authority of the security subsystem 310 is allocated from the authority assignment unit 220, the second processor 210 may check the time the second processor 210 occupies the security subsystem 310 (operation 1639). According to an embodiment, the second processor 210 may drive a timer when receiving a signal (eg, an ACK signal) related to the assignment of access rights to the security subsystem 310 from the rights assignment device 220 . The second processor 210 may check the time the second processor 210 occupies the security subsystem 310 based on the running time of the timer.

According to various embodiments, when it is determined that the second processor 210 can process a security function related to at least one task of the second processor 210 based on the time the second processor 210 occupies the security subsystem 310, it may perform the security function through the security subsystem 310 (operation 1641). According to an embodiment, the security subsystem 310 may process the security function of the second processor 210 based on the key of the second processor 210 .

According to various embodiments, the second processor 210 may determine whether a specified occupancy condition related to the security subsystem 310 is satisfied while performing the security function through the security subsystem 310 (operation 1643). According to an embodiment, the second processor 210 may determine that a specified occupation condition related to the security subsystem 310 is satisfied when the time at which the second processor 210 occupies the security subsystem 310 is less than a specified reference time. According to an embodiment, the second processor 210 may determine that a specified occupation condition related to the security subsystem 310 is not satisfied when the time during which the second processor 210 occupies the security subsystem 310 is equal to or longer than a specified reference time.

According to various embodiments, when it is determined that the specified occupancy condition related to the security subsystem 310 is not satisfied (operation 1643), the second processor 210 may request the return (or return) of the access right to the security subsystem 310 (operation 1645). According to an embodiment, when the time that the second processor 210 occupies the security subsystem 310 is equal to or longer than a specified reference time, the second processor 210 may transmit a request signal related to the return of access rights to the security subsystem 310 to the rights assignment device 220 regardless of whether at least one task is completed (operation 1645).

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the second processor 210 to the security subsystem 310 based on a request for return of the access authority of the security subsystem 310 from the second processor 210. The authority assignment device 220 may transmit information related to the return of the access authority of the security subsystem 310 (eg, authority return notification information) to the second processor 210 (operation 1647).

According to various embodiments, the authority assignment device 220 may control the security subsystem 310 to delete data related to the second processor 210 based on the return of the access authority of the second processor 200 to the security subsystem 310 (operation 1649). According to an embodiment, when the access right of the security subsystem 310 is retrieved from the second processor 210, the authority assignment device 220 may provide an initialization request signal to the security subsystem 310 (operation 1649).

According to various embodiments, the security subsystem 310 may initialize the security subsystem 310 based on the initialization request signal received from the authority assignment device 220 (operation 1651). According to an embodiment, the security subsystem 310 may delete information related to the second processor 210 existing in an internal memory and/or a registration path of the security subsystem 310 through initialization of the security subsystem 310. For example, the information related to the second processor 210 may include a key of the second processor 210 and/or operation information based on the key of the second processor 210 .

According to various embodiments, when the at least one task is not completed based on the designated reference time, the second processor 210 transmits a request signal related to the access authority of the security subsystem 310 to the authority allocation device 220 (operation 1653).

According to various embodiments, the authority assignment device 220 may allocate the access authority of the security subsystem 310 to the second processor 210 based on the request signal related to the access authority of the security subsystem 310 received from the second processor 210 (operation 1655). According to an embodiment, the authority allocation device 220 may transmit a signal (eg, an ACK signal) related to the allocation of access authority to the security subsystem 310 to the second processor 210 (operation 1655).

According to various embodiments, when the access authority of the security subsystem 310 is allocated to the second processor 210, the authority allocation device 220 may transmit information related to the allocation of access authority to the second processor 210 (eg, instruction information related to key selection of the second processor 210) to the processor key management apparatus 300 (operation 1657).

According to various embodiments, the processor key management device 300 may select a key of the second processor 210 based on information related to assigning access rights to the second processor 210 received from the permission assignment device 220 (eg, instruction information related to key selection of the second processor 210). The processor key management device 300 may provide information related to the key of the second processor 210 (or the key of the second processor 210) to the security subsystem 310 (operation 1659). As an example, the key of the second processor 210 may be obtained from the second processor key management module 306 by the processor key selection module 302 of FIG. 3 .

According to various embodiments, when the access authority of the security subsystem 310 is allocated from the authority assignment device 220, the second processor 210 may perform a security function through the security subsystem 310 (operation 1661). According to an embodiment, when the second processor 210 receives a signal (eg, ACK signal) related to the assignment of access rights to the security subsystem 310 from the authority assignment device 220, the timer may be driven (eg, reset). The second processor 210 may check the time the second processor 210 occupies the security subsystem 310 based on the running time of the timer. When the second processor 210 determines that the security function related to at least one task of the second processor 210 can be processed based on the time the second processor 210 occupies the security subsystem 310, the security function can be performed through the security subsystem 310. According to an embodiment, the security subsystem 310 may process the security function of the second processor 210 based on the key of the second processor 210 .

According to various embodiments, when processing of at least one task related to the security function is completed, the second processor 210 may return (or return) access rights to the security subsystem 310 (operation 1663). According to one embodiment, when the second processor 210 completes the processing of at least one task related to the security function within a specified reference time, a request signal related to the return of access rights to the security subsystem 310 may be transmitted to the rights assignment device 220 (operation 1663).

According to various embodiments, the authority assignment device 220 may retrieve the access authority of the second processor 210 to the security subsystem 230 regardless of the return (or return) request of the access authority of the security subsystem 230 from the second processor 210. According to an embodiment, when the authority assignment device 220 determines that the occupation time of the security subsystem 230 of the second processor 210 exceeds a specified reference time, the access authority of the second processor 210 to the security subsystem 230 may be recovered. Based on the recovery of the access right of the second processor 210 to the security subsystem 230, the authority assignment device 220 may transmit information related to return (or return) of the access authority of the security subsystem 230 (eg, authority return notification information) to the second processor 210 (operation 1647). For example, operations 1645 and 1663 of FIG. 16B may be omitted.

17 is a flowchart 1700 for performing a security function through a security device (eg, the security subsystem 230 or 310) in an electronic device according to various embodiments. In the following embodiments, each operation may be performed sequentially, but not necessarily sequentially. For example, the order of each operation may be changed, or at least two operations may be performed in parallel. As an example, the electronic device of FIG. 17 may be the electronic device 101 of FIG. 1 or 2 .

According to various embodiments of the present disclosure with reference to FIG. 17 , the electronic device (eg, the second processor 210 of FIG. 2 ) may return (or return) access rights to the security subsystem 230 or 310 in operation 1701 when it is determined that the specified occupancy condition related to the security subsystem 230 or 310 is not satisfied (eg, 'No' in operation 1407 of FIG. 14 ). According to an embodiment, when the time the second processor 210 occupies the security subsystem 230 or 310 is equal to or longer than a specified reference time, the second processor 210 may transmit a request signal related to the return of access rights to the security subsystem 230 or 310 to the authority assignment device 220 regardless of whether or not at least one task is completed. For example, the request signal related to the return of the access right may include a second value different from the first value (eg '0') to indicate the return of the access right.

According to various embodiments, in operation 1703, the electronic device (eg, the second processor 210) may check whether processing of the security function has been completed using the security subsystem 230 or 310. According to an embodiment, the second processor 210 may determine that there is at least one task in which the processing of the security function using the security subsystem 230 or 310 is not completed when the security function being processed through the security subsystem 230 or 310 is terminated based on that the second processor 210 occupies the security subsystem 230 or 310 for a specified reference time.

According to various embodiments, when the electronic device (eg, the second processor 210) determines that the processing of the security function has been completed using the security subsystem 230 or 310 (eg, 'yes' in operation 1703), an embodiment for performing the security function may be terminated through the security subsystem 230 or 310.

According to various embodiments, when the electronic device (eg, the second processor 210) determines that the processing of the security function has not been completed using the security subsystem 230 or 310 (eg, 'No' in operation 1703), in operation 1705, a request signal related to the access authority of the security subsystem 230 or 310 may be transmitted to the authority allocation device 220. As an example, the request signal related to access rights may include information related to the second processor 210 requesting access rights (eg, identification information) and/or a first value indicating a request for access rights (eg '1').

According to various embodiments, the electronic device (e.g., the first processor 200 and/or the second processor 210), in operation 1707, determines whether the security subsystem 230 or 310 is assigned access rights from the rights assignment device 220.

According to various embodiments, when the electronic device (eg, the first processor 200 and/or the second processor 210) determines that the access authority of the security subsystem 230 or 310 is not assigned by the authority assignment device 220 (eg, 'No' in operation 1707), an embodiment for performing a security function through the security subsystem 230 or 310 may be terminated.

According to various embodiments, when the electronic device (eg, the first processor 200 and/or the second processor 210) determines that the access authority of the security subsystem 230 or 310 has been assigned by the authority assignment device 220 (eg, 'Yes' in operation 1707), in operation 1709, the security subsystem 230 or 310 may perform a security function related to at least one task for which processing has not been completed. . According to an embodiment, the second processor 210 may sequentially transmit a permission request signal corresponding to the first task and a permission request signal corresponding to the second task to the permission assignment device 220 . When the second processor 210 has been assigned access rights of the security subsystem 230 or 310 but has not completed the first task based on the specified reference time, a request signal corresponding to the first task can be transmitted to the permission assignment device 220. When the second processor 210 is assigned access rights to the security subsystem 230 or 310 from the permission assignment unit 220 based on the permission request signal corresponding to the second task, the second processor 210 may first perform a security function related to the first task for which processing has not been completed based on a designated reference time rather than the second task. For example, the permission request signal may include a request signal related to the access permission of the security subsystem 230 or 310 .

According to various embodiments, a method of operating an electronic device (eg, the electronic device 101 of FIGS. 1, 2A or 3 ) including an application processor (eg, the main processor 121 of FIG. 1 or the first processor 200 of FIG. 2A or 3 ) and a communication processor (eg, the auxiliary processor 123 of FIG. 1 or the second processor 210 of FIG. 2A or 3 ) is related to the application processor or the communication processor. Allocating the access right of a security subsystem (e.g., the security subsystem 230 or 310 of FIG. 2A or 3) to the application processor or the communication processor, obtaining a key related to the application processor or the communication processor when the access right of the security subsystem is assigned to the application processor or the communication processor, and processing the security function related to the communication processor through the security subsystem based on the key related to the application processor or the communication processor, and the application processor or the communication processor. An operation of initializing data related to the application processor or the communication processor based on the return of the access right of the security subsystem assigned to the processor.

According to various embodiments, the operation of assigning the access authority of the security subsystem to the application processor or the communication processor may include alternately allocating the access authority of the security subsystem to the application processor or the communication processor when a plurality of request signals related to the access authority of the security subsystem are received from the application processor and the communication processor.

According to various embodiments of the present disclosure, the alternately allocating may include allocating the access right of the security subsystem to the application processor based on the time point at which the request signal is received, and allocating the access right of the security subsystem to the communication processor when the access right of the security subsystem is retrieved from the application processor, when at least one request signal related to the access right of the security subsystem is received from the communication processor after continuously receiving a plurality of request signals related to the access right of the security subsystem from the application processor. there is

According to various embodiments, the operation of allocating the access authority of the security subsystem to the application processor or the communication processor may include allocating the access authority of the security subsystem to the application processor or the communication processor based on a time point at which the access request is received when a request signal related to the access authority of the security subsystem is received from the application processor and/or the communication processor.

According to various embodiments, the operation of allocating to the application processor or the communication processor includes, when receiving a plurality of request signals related to the access authority of the security subsystem from the application processor and the communication processor, identifying a processor for which the priority of the access authority of the security subsystem is set, assigning the access authority of the security subsystem to the application processor when the priority to the application processor is set, and determining that at least one task corresponding to the request signal received from the application processor and related to the access authority of the security subsystem has been completed. In one case, an operation of allocating the access authority of the security subsystem to the communication processor may be included.

According to various embodiments, the operation of assigning to the application processor or the communication processor includes, when a plurality of request signals related to the access authority of the security subsystem are received from the application processor and the communication processor, identifying a processor for which the priority of the access authority of the security subsystem is set, assigning the access authority of the security subsystem to the communication processor when the priority to the communication processor is set, and determining that at least one task corresponding to the request signal related to the access authority of the security subsystem received from the communication processor has been completed. In one case, an operation of assigning the access authority of the security subsystem to the application processor may be included.

According to various embodiments, when a specified reference time has elapsed based on the time point at which the access authority of the security subsystem is assigned to the communication processor, the security function related to the communication processor may include an operation of returning the access authority to the security subsystem regardless of completion of processing.

According to various embodiments of the present disclosure, when the access right of the security subsystem is assigned to the communication processor, the method may further include checking whether there is a security function whose processing has not been completed based on the specified reference time in a state in which the access right of the security subsystem has been previously assigned, and processing the security function whose processing has not been completed through the security subsystem if there is a security function whose processing has not been completed.

According to various embodiments, the method may further include performing a security function related to the application processor based on a key corresponding to the application processor when the access authority of the security subsystem is allocated to the application processor, or performing a security function related to the application processor based on a key corresponding to the communication processor when the access authority of the security subsystem is allocated to the communication processor.

According to various embodiments, when the time allotted to the communication processor by the access authority of the security subsystem completes processing of the security function related to the communication processor before the designated reference time elapses, an operation of returning the access authority of the security subsystem may be further included.

According to various embodiments, the operation of acquiring the key related to the communication processor may include, when the access authority of the security subsystem is assigned to the communication processor, an operation of acquiring a root key related to the communication processor through a processor key management device separate from the security subsystem (eg, the processor key management device 300 of FIG. 3 ).

According to various embodiments, when the access authority of the security subsystem is assigned to the application processor, the method may further include obtaining a root key related to the application processor through a processor key management device separate from the security subsystem, and processing a security function related to the application processor through the security subsystem based on the key related to the application processor.

According to various embodiments, the operation of initializing the data may include deleting the first key and data related to the security function of the application processor when information related to the return of the access right of the security subsystem assigned to the application processor is received from the right assigning device, and deleting data related to the second key and the security function of the communication processor when receiving information related to the return of the access right of the security subsystem assigned to the communication processor from the right assigning device.

The embodiments of the present invention disclosed in the present specification and drawings are only presented as specific examples to easily explain the technical content according to the embodiments of the present invention and help understanding of the embodiments of the present invention, It is not intended to limit the scope of the embodiments of the present invention. Therefore, the scope of various embodiments of the present invention should be construed as including all changes or modified forms derived based on the technical spirit of various embodiments of the present invention in addition to the embodiments disclosed herein are included in the scope of various embodiments of the present invention.

Claims (20)

In electronic devices,
application processor,
communication processor,
A security subsystem for processing security functions related to the application processor or the communication processor;
an authority assignment device for allocating the access authority of the security subsystem to the application processor or the communication processor; and
A processor key management device for providing a first key related to the application processor or a second key related to the communication processor to the security subsystem based on the application processor or the communication processor to which the access right of the security subsystem is assigned by the permission assignment device,
The security subsystem,
Processing a security function related to the application processor or the communication processor using the first key or the second key provided from the processor key management device based on the allocation of access rights of the security subsystem from the permission assignment device to the application processor or the communication processor;
An electronic device that initializes data related to the application processor or the communication processor based on return of the access authority of the security subsystem assigned to the application processor or the communication processor.
According to claim 1,
The authority assigning device, when receiving a plurality of request signals related to the access authority of the security subsystem from the application processor and the communication processor, alternately assigns the access authority of the security subsystem to the application processor or the communication processor.
According to claim 2,
The authority assigning device, when receiving at least one request signal related to the access authority of the security subsystem from the communication processor after continuously receiving a plurality of request signals related to the access authority of the security subsystem from the application processor, assigns the access authority of the security subsystem to the application processor based on the reception time of the request signal;
and allocating the access authority of the security subsystem to the communication processor when the access authority of the security subsystem is retrieved from the application processor.
According to claim 1,
When the authority assignment device receives a request signal related to the access authority of the security subsystem from the application processor and/or the communication processor, the electronic device assigns the access authority of the security subsystem to the application processor or the communication processor based on the reception time of the access request.
According to claim 1,
The authority assignment device, when receiving a plurality of request signals related to the access authority of the security subsystem from the application processor and the communication processor, identifies a processor for which the priority of the access authority of the security subsystem is set;
When the priority of the application processor is set, assigning the access authority of the security subsystem to the application processor;
and allocating the access authority of the security subsystem to the communication processor when it is determined that processing of at least one job corresponding to a request signal related to the access authority of the security subsystem received from the application processor is completed.
According to claim 1,
The authority assignment device, when receiving a plurality of request signals related to the access authority of the security subsystem from the application processor and the communication processor, identifies a processor for which the priority of the access authority of the security subsystem is set;
When the priority to the communication processor is set, assigning the access authority of the security subsystem to the communication processor;
and allocating the access authority of the security subsystem to the application processor when it is determined that processing of at least one job corresponding to the request signal related to the access authority of the security subsystem received from the communication processor is completed.
According to claim 1,
The communication processor returns the access right to the security subsystem regardless of the completion of processing by the security function related to the communication processor when a specified reference time has elapsed based on the time point at which the right to access the security subsystem is assigned by the right assigning device.
According to claim 1,
The security subsystem,
When information related to the return of the access right of the security subsystem allocated to the application processor is received from the rights assignment device, the first key and data related to the security function of the application processor are deleted;
The electronic device for deleting the second key and data related to the security function of the communication processor when information related to the return of the access right of the security subsystem allocated to the communication processor is received from the right assigning device.
According to claim 1,
When the access authority of the security subsystem is assigned to the application processor, the authority assignment unit provides information related to the allocation of access authority to the application processor to the processor key management unit;
wherein the processor key management device transmits the first key associated with the application processor to the security subsystem based on information related to assignment of access rights to the application processor.
According to claim 1,
When the access authority of the security subsystem is allocated to the communication processor, the authority assignment unit provides information related to the allocation of access authority to the communication processor to the processor key management unit;
wherein the processor key management device transmits the second key related to the communication processor to the security subsystem based on information related to assignment of access rights to the communication processor.
In the operating method of an electronic device including an application processor and a communication processor,
Allocating access rights of a security subsystem that processes a security function related to the application processor or the communication processor to the application processor or the communication processor;
obtaining a key related to the application processor or the communication processor when the access authority of the security subsystem is assigned to the application processor or the communication processor;
processing a security function related to the application processor or the communication processor through the security subsystem based on a key related to the application processor or the communication processor; and
and initializing data related to the application processor or the communication processor based on return of the access authority of the security subsystem assigned to the application processor or the communication processor.
According to claim 11,
The assigning operation to the application processor or the communication processor includes alternately allocating the access authority of the security subsystem to the application processor or the communication processor when a plurality of request signals related to the access authority of the security subsystem are received from the application processor and the communication processor.
According to claim 12,
The operation of alternately allocating,
Allocating the access authority of the security subsystem to the application processor based on the reception time of the request signal when at least one request signal related to the access authority of the security subsystem is received from the communication processor after continuously receiving a plurality of request signals related to the access authority of the security subsystem from the application processor; and
and allocating the access authority of the security subsystem to the communication processor when the access authority of the security subsystem is retrieved from the application processor.
According to claim 11,
The assigning operation to the application processor or the communication processor includes, when receiving a request signal related to the access authority of the security subsystem from the application processor and/or the communication processor, allocating the access authority of the security subsystem to the application processor or the communication processor based on a receiving time point of the access request.
According to claim 11,
The operation of assigning to the application processor or the communication processor,
When a plurality of request signals related to the access authority of the security subsystem are received from the application processor and the communication processor, confirming a processor for which the priority of the access authority of the security subsystem is set;
assigning the access authority of the security subsystem to the application processor when the priority of the application processor is set; and
and allocating the access authority of the security subsystem to the communication processor when it is determined that processing of at least one job corresponding to a request signal related to the access authority of the security subsystem received from the application processor is completed.
According to claim 11,
The operation of assigning to the application processor or the communication processor,
When a plurality of request signals related to the access authority of the security subsystem are received from the application processor and the communication processor, confirming a processor for which the priority of the access authority of the security subsystem is set;
Allocating the access authority of the security subsystem to the communication processor when the priority to the communication processor is set; and
and allocating the access authority of the security subsystem to the application processor when it is determined that processing of at least one job corresponding to a request signal related to the access authority of the security subsystem received from the communication processor is completed.
According to claim 11,
Returning, by a security function related to the communication processor, the access authority to the security subsystem, regardless of completion of processing, when a specified reference time has elapsed based on a point in time when the access authority of the security subsystem is assigned to the communication processor.
According to claim 11,
The operation of initializing the data,
deleting the first key and data related to the security function of the application processor when information related to the return of the access right of the security subsystem assigned to the application processor is received from the rights assignment device; and
and deleting the second key and data related to a security function of the communication processor when receiving information related to the return of the access right of the security subsystem allocated to the communication processor from the right assigning device.
According to claim 11,
The operation of obtaining a key related to the communication processor,
and obtaining a root key related to the communication processor through a processor key management device separate from the security subsystem when the access authority of the security subsystem is assigned to the communication processor.
According to claim 11,
obtaining a rook key related to the application processor through a processor key management device separate from the security subsystem when the access authority of the security subsystem is assigned to the application processor; and
and processing a security function related to the application processor through the security subsystem based on the key related to the application processor.

Images