KR20240032591A - Electronic device for storing encrypted data in non-volatile memory and method thereof - Google Patents

Abstract

According to one embodiment, the electronic device may identify a request to encrypt data from the application processor. The electronic device may encrypt the data based on the ARC included in the mapping table based on the request. Based on the encrypted data, the electronic device may obtain tag information related to an integrity check for the encrypted data. The electronic device may control the application processor to store the encrypted data, the mapping table, and the tag information in the non-volatile memory. Various other embodiments are possible.

Description

Electronic device and method for storing encrypted data in non-volatile memory {ELECTRONIC DEVICE FOR STORING ENCRYPTED DATA IN NON-VOLATILE MEMORY AND METHOD THEREOF}

Various embodiments relate to an electronic device and method for storing encrypted data in a non-volatile memory.

Recent electronic devices can store various information that requires security (eg, payment information, credential information, certificates). Interest in the security of electronic devices is increasing as various information requiring security can be stored. For example, recent electronic devices have a built-in secure processor with independent random access memory (RAM) and read only memory (ROM), which can protect electronic devices and various information more safely. We provide an environment.

According to an embodiment, an electronic device may include an application processor, a security processor, and a non-volatile memory controlled by the application processor. The security processor may identify a request to encrypt data from the application processor. The security processor may encrypt the data based on an anti-replay counter (ARC) included in a mapping table based on the request. The security processor may obtain tag information related to an integrity check for the encrypted data, based on the encrypted data. The security processor may control the application processor to store the encrypted data, the mapping table, and the tag information in the non-volatile memory.

According to one embodiment, a method of an electronic device may include identifying a request to encrypt data from an application processor. The method of the electronic device may include encrypting the data based on an anti-replay counter (ARC) included in a mapping table based on the request. The method of the electronic device may include an operation of obtaining tag information related to an integrity check for the encrypted data, based on the encrypted data. The method of the electronic device may include controlling the application processor to store the encrypted data, the mapping table, and the tag information in a non-volatile memory controlled by the application processor.

According to one embodiment, an electronic device may include an application processor, a security processor, a first non-volatile memory controlled by the application processor, and a second non-volatile memory controlled by the security processor. there is. The security processor may identify a request to decrypt encrypted data from the application processor. The security processor, based on the request, uses an anti-replay counter (ARC) included in a mapping table based on the second non-volatile memory and tag information based on the second non-volatile memory to create a first mapping table. The second mapping table, which is different from the mapping table and is encrypted, and the second tag information, which is different from the tag information and which is the first tag information, and which are encrypted, can be decrypted. The security processor may decrypt the encrypted data based on decrypting the second mapping table and the second tag information.

According to one embodiment, a method in an electronic device may include identifying, from an application processor, a request to decrypt data stored and encrypted in a first non-volatile memory controlled by the application. there is. The method of the electronic device includes, based on the request, an anti-replay counter (ARC) included in a mapping table based on a second non-volatile memory that is different from the first non-volatile memory and is controlled by a security processor; and Using tag information based on a second non-volatile memory, a second mapping table that is different from the mapping table that is a first mapping table and is encrypted, and a second tag information that is different from the tag information that is first tag information, are decrypted. Can include actions. The method of the electronic device may decrypt the encrypted data based on decrypting the second mapping table and the second tag information.

FIG. 1 shows an example of a block diagram of an electronic device in a network environment, according to an embodiment.
FIG. 2A shows an example of a block diagram of an electronic device, according to an embodiment.
FIG. 2B shows an example of a block diagram of an electronic device, according to an embodiment.
FIG. 3 illustrates an example of an operation of an electronic device to encrypt data, according to an embodiment.
FIG. 4A illustrates an example of an operation of an electronic device to decrypt data, according to an embodiment.
FIG. 4B illustrates an example of an operation of an electronic device to decrypt data, according to an embodiment.
Figure 5 shows an example of a flowchart regarding the operation of an electronic device, according to an embodiment.
Figure 6 shows an example of a flowchart regarding the operation of an electronic device, according to an embodiment.

FIG. 1 shows an example of a block diagram of an electronic device in a network environment, according to an embodiment.

Referring to FIG. 1, in the network environment 100, the electronic device 101 communicates with the electronic device 102 through a first network 198 (e.g., a short-range wireless communication network) or a second network 199. It is possible to communicate with at least one of the electronic device 104 or the server 108 through (e.g., a long-distance wireless communication network). According to one embodiment, the electronic device 101 may communicate with the electronic device 104 through the server 108. According to one embodiment, the electronic device 101 includes a processor 120, a memory 130, an input module 150, an audio output module 155, a display module 160, an audio module 170, and a sensor module ( 176), interface 177, connection terminal 178, haptic module 179, camera module 180, power management module 188, battery 189, communication module 190, subscriber identification module 196 , or may include an antenna module 197. In some embodiments, at least one of these components (eg, the connection terminal 178) may be omitted or one or more other components may be added to the electronic device 101. In some embodiments, some of these components (e.g., sensor module 176, camera module 180, or antenna module 197) are integrated into one component (e.g., display module 160). It can be.

The processor 120, for example, executes software (e.g., program 140) to operate at least one other component (e.g., hardware or software component) of the electronic device 101 connected to the processor 120. It can be controlled and various data processing or calculations can be performed. According to one embodiment, as at least part of data processing or computation, the processor 120 stores commands or data received from another component (e.g., sensor module 176 or communication module 190) in volatile memory 132. The commands or data stored in the volatile memory 132 can be processed, and the resulting data can be stored in the non-volatile memory 134. According to one embodiment, the processor 120 includes a main processor 121 (e.g., a central processing unit or an application processor) or an auxiliary processor 123 that can operate independently or together (e.g., a graphics processing unit, a neural network processing unit ( It may include a neural processing unit (NPU), an image signal processor, a sensor hub processor, or a communication processor). For example, if the electronic device 101 includes a main processor 121 and a secondary processor 123, the secondary processor 123 may be set to use lower power than the main processor 121 or be specialized for a designated function. You can. The auxiliary processor 123 may be implemented separately from the main processor 121 or as part of it.

The auxiliary processor 123 may, for example, act on behalf of the main processor 121 while the main processor 121 is in an inactive (e.g., sleep) state, or while the main processor 121 is in an active (e.g., application execution) state. ), together with the main processor 121, at least one of the components of the electronic device 101 (e.g., the display module 160, the sensor module 176, or the communication module 190) At least some of the functions or states related to can be controlled. According to one embodiment, co-processor 123 (e.g., image signal processor or communication processor) may be implemented as part of another functionally related component (e.g., camera module 180 or communication module 190). there is. According to one embodiment, the auxiliary processor 123 (eg, neural network processing unit) may include a hardware structure specialized for processing artificial intelligence models. Artificial intelligence models can be created through machine learning. For example, such learning may be performed in the electronic device 101 itself on which the artificial intelligence model is performed, or may be performed through a separate server (e.g., server 108). Learning algorithms may include, for example, supervised learning, unsupervised learning, semi-supervised learning, or reinforcement learning, but It is not limited. An artificial intelligence model may include multiple artificial neural network layers. Artificial neural networks include deep neural network (DNN), convolutional neural network (CNN), recurrent neural network (RNN), restricted boltzmann machine (RBM), belief deep network (DBN), bidirectional recurrent deep neural network (BRDNN), It may be one of deep Q-networks or a combination of two or more of the above, but is not limited to the examples described above. In addition to hardware structures, artificial intelligence models may additionally or alternatively include software structures.

The memory 130 may store various data used by at least one component (eg, the processor 120 or the sensor module 176) of the electronic device 101. Data may include, for example, input data or output data for software (e.g., program 140) and instructions related thereto. Memory 130 may include volatile memory 132 or non-volatile memory 134.

The program 140 may be stored as software in the memory 130 and may include, for example, an operating system 142, middleware 144, or application 146.

The input module 150 may receive commands or data to be used in a component of the electronic device 101 (e.g., the processor 120) from outside the electronic device 101 (e.g., a user). The input module 150 may include, for example, a microphone, mouse, keyboard, keys (eg, buttons), or digital pen (eg, stylus pen).

The sound output module 155 may output sound signals to the outside of the electronic device 101. The sound output module 155 may include, for example, a speaker or a receiver. Speakers can be used for general purposes such as multimedia playback or recording playback. The receiver can be used to receive incoming calls. According to one embodiment, the receiver may be implemented separately from the speaker or as part of it.

The display module 160 can visually provide information to the outside of the electronic device 101 (eg, a user). The display module 160 may include, for example, a display, a hologram device, or a projector, and a control circuit for controlling the device. According to one embodiment, the display module 160 may include a touch sensor configured to detect a touch, or a pressure sensor configured to measure the intensity of force generated by the touch.

The audio module 170 can convert sound into an electrical signal or, conversely, convert an electrical signal into sound. According to one embodiment, the audio module 170 acquires sound through the input module 150, the sound output module 155, or an external electronic device (e.g., directly or wirelessly connected to the electronic device 101). Sound may be output through the electronic device 102 (e.g., speaker or headphone).

The sensor module 176 detects the operating state (e.g., power or temperature) of the electronic device 101 or the external environmental state (e.g., user state) and generates an electrical signal or data value corresponding to the detected state. can do. According to one embodiment, the sensor module 176 includes, for example, a gesture sensor, a gyro sensor, an air pressure sensor, a magnetic sensor, an acceleration sensor, a grip sensor, a proximity sensor, a color sensor, an IR (infrared) sensor, a biometric sensor, It may include a temperature sensor, humidity sensor, or light sensor.

The interface 177 may support one or more designated protocols that can be used to connect the electronic device 101 directly or wirelessly with an external electronic device (eg, the electronic device 102). According to one embodiment, the interface 177 may include, for example, a high definition multimedia interface (HDMI), a universal serial bus (USB) interface, an SD card interface, or an audio interface.

The connection terminal 178 may include a connector through which the electronic device 101 can be physically connected to an external electronic device (eg, the electronic device 102). According to one embodiment, the connection terminal 178 may include, for example, an HDMI connector, a USB connector, an SD card connector, or an audio connector (eg, a headphone connector).

The haptic module 179 can convert electrical signals into mechanical stimulation (e.g., vibration or movement) or electrical stimulation that the user can perceive through tactile or kinesthetic senses. According to one embodiment, the haptic module 179 may include, for example, a motor, a piezoelectric element, or an electrical stimulation device.

The camera module 180 can capture still images and moving images. According to one embodiment, the camera module 180 may include one or more lenses, image sensors, image signal processors, or flashes.

The power management module 188 can manage power supplied to the electronic device 101. According to one embodiment, the power management module 188 may be implemented as at least a part of, for example, a power management integrated circuit (PMIC).

The battery 189 may supply power to at least one component of the electronic device 101. According to one embodiment, the battery 189 may include, for example, a non-rechargeable primary battery, a rechargeable secondary battery, or a fuel cell.

Communication module 190 is configured to provide a direct (e.g., wired) communication channel or wireless communication channel between electronic device 101 and an external electronic device (e.g., electronic device 102, electronic device 104, or server 108). It can support establishment and communication through established communication channels. Communication module 190 operates independently of processor 120 (e.g., an application processor) and may include one or more communication processors that support direct (e.g., wired) communication or wireless communication. According to one embodiment, the communication module 190 is a wireless communication module 192 (e.g., a cellular communication module, a short-range wireless communication module, or a global navigation satellite system (GNSS) communication module) or a wired communication module 194 (e.g., : LAN (local area network) communication module, or power line communication module) may be included. Among these communication modules, the corresponding communication module is a first network 198 (e.g., a short-range communication network such as Bluetooth, wireless fidelity (WiFi) direct, or infrared data association (IrDA)) or a second network 199 (e.g., legacy It may communicate with an external electronic device 104 through a telecommunication network such as a cellular network, a 5G network, a next-generation communication network, the Internet, or a computer network (e.g., LAN or WAN). These various types of communication modules may be integrated into one component (e.g., a single chip) or may be implemented as a plurality of separate components (e.g., multiple chips). The wireless communication module 192 uses subscriber information (e.g., International Mobile Subscriber Identifier (IMSI)) stored in the subscriber identification module 196 to communicate within a communication network such as the first network 198 or the second network 199. The electronic device 101 can be confirmed or authenticated.

The wireless communication module 192 may support 5G networks after 4G networks and next-generation communication technologies, for example, NR access technology (new radio access technology). NR access technology provides high-speed transmission of high-capacity data (eMBB (enhanced mobile broadband)), minimization of terminal power and access to multiple terminals (mMTC (massive machine type communications)), or high reliability and low latency (URLLC (ultra-reliable and low latency). -latency communications)) can be supported. The wireless communication module 192 may support high frequency bands (eg, mmWave bands), for example, to achieve high data rates. The wireless communication module 192 uses various technologies to secure performance in high frequency bands, for example, beamforming, massive array multiple-input and multiple-output (MIMO), and full-dimensional multiplexing. It can support technologies such as input/output (FD-MIMO: full dimensional MIMO), array antenna, analog beam-forming, or large scale antenna. The wireless communication module 192 may support various requirements specified in the electronic device 101, an external electronic device (e.g., electronic device 104), or a network system (e.g., second network 199). According to one embodiment, the wireless communication module 192 supports Peak data rate (e.g., 20 Gbps or more) for realizing eMBB, loss coverage (e.g., 164 dB or less) for realizing mmTC, or U-plane latency (e.g., 164 dB or less) for realizing URLLC. Example: Downlink (DL) and uplink (UL) each of 0.5 ms or less, or round trip 1 ms or less) can be supported.

The antenna module 197 may transmit or receive signals or power to or from the outside (eg, an external electronic device). According to one embodiment, the antenna module 197 may include an antenna including a radiator made of a conductor or a conductive pattern formed on a substrate (eg, PCB). According to one embodiment, the antenna module 197 may include a plurality of antennas (eg, an array antenna). In this case, at least one antenna suitable for a communication method used in a communication network such as the first network 198 or the second network 199 is connected to the plurality of antennas by, for example, the communication module 190. can be selected. Signals or power may be transmitted or received between the communication module 190 and an external electronic device through the at least one selected antenna. According to some embodiments, in addition to the radiator, other components (eg, radio frequency integrated circuit (RFIC)) may be additionally formed as part of the antenna module 197.

According to various embodiments, the antenna module 197 may form a mmWave antenna module. According to one embodiment, a mmWave antenna module includes a printed circuit board, an RFIC disposed on or adjacent to a first side (e.g., bottom side) of the printed circuit board and capable of supporting a designated high frequency band (e.g., mmWave band); And a plurality of antennas (e.g., array antennas) disposed on or adjacent to the second side (e.g., top or side) of the printed circuit board and capable of transmitting or receiving signals in the designated high frequency band. can do.

At least some of the components are connected to each other through a communication method between peripheral devices (e.g., bus, general purpose input and output (GPIO), serial peripheral interface (SPI), or mobile industry processor interface (MIPI)) and signal ( (e.g. commands or data) can be exchanged with each other.

According to one embodiment, commands or data may be transmitted or received between the electronic device 101 and the external electronic device 104 through the server 108 connected to the second network 199. Each of the external electronic devices 102 or 104 may be of the same or different type as the electronic device 101. According to one embodiment, all or part of the operations performed in the electronic device 101 may be executed in one or more of the external electronic devices 102, 104, or 108. For example, when the electronic device 101 needs to perform a certain function or service automatically or in response to a request from a user or another device, the electronic device 101 may perform the function or service instead of executing the function or service on its own. Alternatively, or additionally, one or more external electronic devices may be requested to perform at least part of the function or service. One or more external electronic devices that have received the request may execute at least part of the requested function or service, or an additional function or service related to the request, and transmit the result of the execution to the electronic device 101. The electronic device 101 may process the result as is or additionally and provide it as at least part of a response to the request. For this purpose, for example, cloud computing, distributed computing, mobile edge computing (MEC), or client-server computing technology can be used. The electronic device 101 may provide an ultra-low latency service using, for example, distributed computing or mobile edge computing. In another embodiment, the external electronic device 104 may include an Internet of Things (IoT) device. Server 108 may be an intelligent server using machine learning and/or neural networks. According to one embodiment, the external electronic device 104 or server 108 may be included in the second network 199. The electronic device 101 may be applied to intelligent services (e.g., smart home, smart city, smart car, or healthcare) based on 5G communication technology and IoT-related technology.

Electronic devices according to various embodiments disclosed in this document may be of various types. Electronic devices may include, for example, portable communication devices (e.g., smartphones), computer devices, portable multimedia devices, portable medical devices, cameras, wearable devices, or home appliances. Electronic devices according to embodiments of this document are not limited to the above-described devices.

The various embodiments of this document and the terms used herein are not intended to limit the technical features described in this document to specific embodiments, and should be understood to include various changes, equivalents, or replacements of the embodiments. In connection with the description of the drawings, similar reference numbers may be used for similar or related components. The singular form of a noun corresponding to an item may include one or more of the above items, unless the relevant context clearly indicates otherwise. As used herein, “A or B”, “at least one of A and B”, “at least one of A or B”, “A, B or C”, “at least one of A, B and C”, and “A Each of phrases such as “at least one of , B, or C” may include any one of the items listed together in the corresponding phrase, or any possible combination thereof. Terms such as "first", "second", or "first" or "second" may be used simply to distinguish one component from another, and to refer to that component in other respects (e.g., importance or order) is not limited. One (e.g., first) component is said to be “coupled” or “connected” to another (e.g., second) component, with or without the terms “functionally” or “communicatively.” When mentioned, it means that any of the components can be connected to the other components directly (e.g. wired), wirelessly, or through a third component.

The term “module” used in various embodiments of this document may include a unit implemented in hardware, software, or firmware, and is interchangeable with terms such as logic, logic block, component, or circuit, for example. It can be used as A module may be an integrated part or a minimum unit of the parts or a part thereof that performs one or more functions. For example, according to one embodiment, the module may be implemented in the form of an application-specific integrated circuit (ASIC).

Various embodiments of the present document are one or more instructions stored in a storage medium (e.g., built-in memory 136 or external memory 138) that can be read by a machine (e.g., electronic device 101). It may be implemented as software (e.g., program 140) including these. For example, a processor (e.g., processor 120) of a device (e.g., electronic device 101) may call at least one command among one or more commands stored from a storage medium and execute it. This allows the device to be operated to perform at least one function according to the at least one instruction called. The one or more instructions may include code generated by a compiler or code that can be executed by an interpreter. A storage medium that can be read by a device may be provided in the form of a non-transitory storage medium. Here, 'non-transitory' only means that the storage medium is a tangible device and does not contain signals (e.g. electromagnetic waves), and this term refers to cases where data is semi-permanently stored in the storage medium. There is no distinction between temporary storage cases.

According to one embodiment, methods according to various embodiments disclosed in this document may be included and provided in a computer program product. Computer program products are commodities and can be traded between sellers and buyers. The computer program product may be distributed in the form of a machine-readable storage medium (e.g. compact disc read only memory (CD-ROM)) or through an application store (e.g. Play Store™) or on two user devices (e.g. It can be distributed (e.g. downloaded or uploaded) directly between smart phones) or online. In the case of online distribution, at least a portion of the computer program product may be at least temporarily stored or temporarily created in a machine-readable storage medium, such as the memory of a manufacturer's server, an application store's server, or a relay server.

According to various embodiments, each component (e.g., module or program) of the above-described components may include a single or plural entity, and some of the plurality of entities may be separately placed in other components. there is. According to various embodiments, one or more of the components or operations described above may be omitted, or one or more other components or operations may be added. Alternatively or additionally, multiple components (eg, modules or programs) may be integrated into a single component. In this case, the integrated component may perform one or more functions of each component of the plurality of components in the same or similar manner as those performed by the corresponding component of the plurality of components prior to the integration. . According to various embodiments, operations performed by a module, program, or other component may be executed sequentially, in parallel, iteratively, or heuristically, or one or more of the operations may be executed in a different order, or omitted. Alternatively, one or more other operations may be added.

FIG. 2A shows an example of a block diagram of an electronic device, according to an embodiment. FIG. 2B shows an example of a block diagram of an electronic device, according to an embodiment. The electronic device 101 of FIGS. 2A and/or 2B may be an example of the electronic device 101 of FIG. 1 .

2A and 2B, according to one embodiment, the electronic device 101 includes an application processor 210, a security processor 220, a first volatile memory 221, a memory manager 222, and a cryptographic device. It may include at least one of an engine 223 (crypto engine), a first non-volatile memory 224, a second non-volatile memory 230, a second volatile memory 240, or a third non-volatile memory 250. You can. Application processor 210, security processor 220, first volatile memory 221, memory manager 222, crypto engine 223, first non-volatile memory 224, second non-volatile memory 230, The second volatile memory 240 and the third non-volatile memory 250 are electrically connected to each other by electronic components such as a communication processor 260 and/or a communication bus 270. Can be electronically and/or operably coupled with each other. Although shown based on different blocks, the embodiment is not limited thereto. For example, some of the hardware components shown in FIG. 2A (e.g., application processor 210, security processor 220, first volatile memory 221, memory manager 222, crypto engine 223, and/or Alternatively, at least a portion of the first non-volatile memory 224 may be included in a single integrated circuit, such as a system on a chip (SoC) 200. For example, some of the hardware components shown in FIG. 2B (e.g., application processor 210) may be included in a single integrated circuit, such as SoC 205. The type and/or number of hardware components included in the electronic device 101 are not limited to those shown in FIGS. 2A and/or 2B. For example, electronic device 101 may include only some of the hardware components shown in FIGS. 2A and/or 2B. Application processor 210, security processor 220, first volatile memory 221, memory manager 222, crypto engine 223, first non-volatile memory 224, second non-volatile memory 230, The second volatile memory 240 and/or the third non-volatile memory 250 are shown as singular, but may be plural. In one embodiment, the memory manager 222 and/or the crypto engine 223 may be a software module that is executed by the security processor 220 and includes at least one instruction. One embodiment of the present invention is not limited to the configuration shown in FIGS. 2A and 2B.

According to one embodiment, the application processor 210 of the electronic device 101 may correspond to at least a portion of the processor 120 of FIG. 1. According to one embodiment, the application processor 210 may include hardware components for processing data based on one or more instructions. Hardware components for processing data include, for example, an arithmetic and logic unit (ALU), a floating point unit (FPU), a field programmable gate array (FPGA), an application processor (AP), a micro-computer (Micom), and/ or micom controller), and/or a central processing unit (CPU). The number of application processors 210 may be one or more. For example, the application processor 210 may have the structure of a multi-core processor, such as a dual core, quad core, or hexa core. For example, the application processor 210 may have the structure of a single core processor, such as a single core. However, it is not limited to this.

According to one embodiment, the application processor 210 of the electronic device 101 may be driven in a rich execution environment. For example, a rich execution environment may be referred to as a general execution environment. According to one embodiment, the security processor 220 of the electronic device 101 may be operatively and/or electrically connected to the application processor 210. For example, the security processor 220 may receive a request to drive and/or initialize a secure execution environment from the application processor 210. For example, the secure execution environment may be an execution environment that is different from the rich execution environment and/or the normal execution environment. For example, the secure execution environment may be an execution environment independent of the rich execution environment.

According to one embodiment, the secure processor 220 may operate within a secure execution environment. For example, the security processor 220 may obtain and/or store data (eg, data related to the user's biometric information) based on a request through at least one application running within the secure execution environment.

According to one embodiment, the electronic device 101 includes a first volatile memory 221, a first non-volatile memory 224, a second non-volatile memory 230, a second volatile memory 240, and/or It may include a third non-volatile memory 250. For example, the first volatile memory 221, the first non-volatile memory 224, the second non-volatile memory 230, the second volatile memory 240, and/or the third non-volatile memory 250. , instructions that cause the operation of the electronic device 101 can be stored. For example, the application processor 210 and/or the security processor 220 may include a first volatile memory 221, a first non-volatile memory 224, a second non-volatile memory 230, and a second volatile memory. When driving instructions stored in 240 and/or the third non-volatile memory 250, operation of the electronic device 101 may be caused.

Hereinafter, running instructions may include the application processor 210 calling (or loading) at least one instruction and executing the called (or loaded) instruction. For example, driving an instruction may include the application processor 210 driving the instruction and executing a function corresponding to the instruction.

According to one embodiment, the first volatile memory 221, the first non-volatile memory 224, the second non-volatile memory 230, the second volatile memory 240, and/or the first volatile memory 221 of the electronic device 101. 3 The non-volatile memory 250 may include hardware components for storing input and/or output data and/or instructions. For example, the first volatile memory 221 may be referred to as static random access memory (SRAM). For example, the first non-volatile memory 224 may be referred to as read only memory (ROM). For example, the second non-volatile memory 230 may be referred to as universe flash storage (UFS). For example, the second volatile memory 240 may be referred to as dynamic RAM (DRAM). For example, the third non-volatile memory 250 may be referred to as secure non-volatile memory (NVM). According to one embodiment, the electronic device 101 may control the second non-volatile memory 230 and/or the second volatile memory 240 based on the application processor 210 within a rich execution environment. there is. For example, the rich execution environment may be referred to as a general execution environment. According to one embodiment, the electronic device 101, within a secure execution environment, includes a first volatile memory 221, a first non-volatile memory 224, and/or a third non-volatile memory based on the secure processor 220. Volatile memory 250 can be controlled.

According to one embodiment, the first volatile memory 221 may be controlled by the security processor 220. For example, the secure processor 220 may control the first volatile memory 221 within a secure execution environment. For example, the electronic device 101 may obtain a mapping table for encrypting data from the first volatile memory 221. For example, the data may include biometric information of the user of the electronic device 101 obtained from the sensor of the electronic device 101. For example, the user's biometric information may include biometric information related to at least one of the user's fingerprint or face. But it is not limited to this.

For example, the mapping table for encrypting the data may be referred to as a persistent data ARC (anti replay counter) table. The electronic device 101 may obtain a counter from a mapping table for encrypting data. The counter may be referred to as an anti replay counter (ARC). ARC may be a parameter used to encrypt data corresponding to the ARC. ARC can be used to identify whether the data has been copied and/or whether the data has been tampered with. For example, ARC means that the data is tampered with by a process that seeks to change the data independently of the authority related to the change of the data, among processes executed by the application processor 210 and/or the security processor 220. It can be used to identify whether something has been done or not. The electronic device 101 may encrypt the data based on obtaining the counter.

According to one embodiment, the memory manager 222 may be controlled by the security processor 220. For example, the security processor 220 may access the second volatile memory 240 using the memory manager 222. The security processor 220 may control the SoC 200 and/or the second volatile memory 240 external to the SoC 205 using the memory manager 222. According to one embodiment, the memory manager 222 may load at least one data and/or file included in the rich execution environment. For example, the memory manager 222 may transmit at least one data and/or file included in the rich execution environment to a virtual address assigned to at least one memory included in the secure execution environment.

According to one embodiment, the crypto engine 223 is controlled by the security processor 220 and may perform an encryption function. For example, the electronic device 101 may use the crypto engine 223 to encrypt data and/or a mapping table. For example, the electronic device 101 may decrypt encrypted data and/or an encrypted mapping table using the crypto engine 223.

According to one embodiment, the electronic device 101 may control the first non-volatile memory 224 within a secure execution environment. For example, the first non-volatile memory 224 may include boot loader code, which is one or more instructions used to boot the application processor 210 and/or the security processor 220. You can. The electronic device 101 may update the code of at least one application for the user of the electronic device 101 using the first non-volatile memory 224.

According to one embodiment, the electronic device 101 may transmit data generated within the secure execution environment, mapping table, and/or tag information to a component within the rich execution environment. For example, the electronic device 101 may transfer data, mapping table, and/or tag information generated within a first volatile memory 221 within a secure execution environment to a second volatile memory 240 within a rich execution environment. Can be sent. For example, the electronic device 101 may transmit the generated data, mapping table, and/or tag information to the second volatile memory 240 based on encryption. The electronic device 101 may transmit the encrypted data, encrypted mapping table, and/or encrypted tag information transmitted to the second volatile memory 240 to the second non-volatile memory 230 .

According to one embodiment, the electronic device 101 may store encrypted data, encrypted mapping table, and/or encrypted tag information in the second non-volatile memory 230. For example, the electronic device 101 may transmit, within a secure execution environment, data, mapping table, and/or tag information to the second non-volatile memory 230 based on encryption. The electronic device 101 may store the transmitted data, mapping table, and/or tag information in a second non-volatile memory 230 that is controlled within a rich execution environment. The operation of encrypting data, mapping table, and tag information will be described later with reference to FIG. 3.

According to one embodiment, the electronic device 101 may create a master mapping table in the third non-volatile memory 250. For example, the electronic device 101 may obtain a master ARC from the master mapping table. For example, the electronic device 101 may control the third non-volatile memory 250 within a secure execution environment. For example, the electronic device 101 uses the master mapping table and/or the master ARC created in the third non-volatile memory 250 to store data, mapping table, and/or tag information. It can be encrypted. For example, the electronic device 101 may decrypt encrypted data, encrypted mapping table, and/or encrypted tag information using the master mapping table and/or the master ARC. The operation of encrypting data, mapping table, and/or tag information using the master mapping table and/or master ARC will be described later with reference to FIG. 3. The operation of decrypting encrypted data, encrypted mapping table, and/or encrypted tag information using the master mapping table and/or master ARC will be described later with reference to FIGS. 4A and 4B.

According to one embodiment, the electronic device 101 may receive a request to encrypt data from the application processor 210. The data may include biometric information. For example, the electronic device 101 may identify a request to encrypt the biometric information of the user, obtained (or received) from the user based on an application executed by the application processor 210. there is. For example, the biometric information of the user may include data related to the user's fingerprint and/or face of the electronic device 101. The electronic device 101 may obtain a mapping table for encrypting the data based on identifying the request for encrypting the data. For example, the electronic device 101 may generate (or obtain) the mapping table based on the first volatile memory 221 within a secure execution environment. For example, the electronic device 101 may obtain ARC based on the mapping table generated from the first volatile memory 221. For example, the electronic device 101 may obtain one or more ARCs depending on the size of the data. For example, the electronic device 101 can acquire a greater number of ARCs as the size of the data becomes larger than when the size of the data is small.

Referring to FIGS. 2A and 2B , according to one embodiment, the electronic device 101 may obtain ARC from a mapping table. For example, the electronic device 101 may acquire the ARC based on generating the mapping table based on acquisition of data related to the user's biometric information. For example, the electronic device 101 may encrypt the data based on obtaining the ARC. The electronic device 101 can encrypt the data using the ARC. According to one embodiment, the electronic device 101 may acquire different ARCs corresponding to each of the plurality of data, based on acquiring the plurality of data. The electronic device 101 may transmit the encrypted data to the second non-volatile memory 230 controlled within a rich execution environment.

According to one embodiment, the electronic device 101 may encrypt the mapping table. For example, the electronic device 101 may obtain ARC from a master mapping table (eg, master ARC) generated from the third non-volatile memory 250. For example, the master mapping table can generate random numbers. The electronic device 101 may encrypt data based on a random number obtained based on the master mapping table. For example, the electronic device 101 may obtain ARC for encrypting the mapping table from the master mapping table. The electronic device 101 may encrypt the mapping table using ARC for encrypting the mapping table. The electronic device 101 may transmit the encrypted mapping table to the second non-volatile memory 230 controlled within the rich execution environment.

According to one embodiment, the electronic device 101 may encrypt data related to the user's biometric information based on obtaining the ARC from the mapping table. For example, encrypting the data may include encrypting the data. The electronic device 101 may obtain tag information related to an integrity check for the encrypted data based on encrypting the data. For example, the integrity check may identify tampering with the data. The electronic device 101 can encrypt the tag information. Based on encrypting the tag information, the electronic device 101 may transmit the encrypted tag information to the second non-volatile memory 230 controlled within a rich execution environment.

As described above, according to one embodiment, the electronic device 101 may acquire data, mapping table, and/or tag information. The electronic device 101 may encrypt ARC for encrypting the data, ARC for encrypting the mapping table, and/or tag information related to integrity checking of the data. The electronic device 101 may transmit encrypted data, encrypted mapping table, and/or encrypted tag information to the second non-volatile memory 230 . The electronic device 101 may store the encrypted data, encrypted mapping table, and/or encrypted tag information transmitted to the second non-volatile memory 230 in the second non-volatile memory 230. . The electronic device 101 stores the encrypted data, the encrypted mapping table, and/or the encrypted tag information in the second non-volatile memory 230 in the rich execution environment, thereby allowing access to the data other than the electronic device 101. Access from external electronic devices can be blocked. The electronic device 101 provides rollback prevention by storing encrypted data, encrypted mapping table, and/or encrypted tag information in the second non-volatile memory 230, thereby preventing access to data. Access to external electronic devices can be blocked. The electronic device 101 stores the encrypted data, encrypted mapping table, and/or encrypted tag information in the second non-volatile memory 230 in the rich execution environment, thereby storing the first volatile memory 221 in the secure execution environment. ), the usage of the first non-volatile memory 224, and/or the third non-volatile memory 250 can be reduced.

FIG. 3 illustrates an example of an operation of an electronic device to encrypt data, according to an embodiment. The electronic device 101 of FIG. 3 may be an example of the electronic device 101 of FIGS. 1, 2A, and/or 2B. The first volatile memory 221 of FIG. 3 may be an example of the first volatile memory 221 of FIG. 2A and/or 2B. The third non-volatile memory 250 of FIG. 3 may be an example of the third non-volatile memory 250 of FIGS. 2A and/or 2B. The second non-volatile memory 230 of FIG. 3 may be an example of the second non-volatile memory 230 of FIGS. 2A and/or 2B. The second volatile memory 240 of FIG. 3 may be an example of the second volatile memory 240 of FIGS. 2A and/or 2B. For example, the first volatile memory 221 may be referred to as SRAM. For example, the third non-volatile memory 250 may be referred to as secure NVM. For example, the second volatile memory 240 may be referred to as DRAM. For example, the second non-volatile memory 230 may be referred to as UFS. The operations of FIG. 3 may be driven by the application processor 210 and/or the security processor 220.

Referring to FIG. 3, according to one embodiment, the electronic device 101 includes a first volatile memory 221, a third non-volatile memory 250, and/or a crypto manager within the secure execution environment 300. Fields 361, 362, and 363 can be controlled. For example, the crypto managers 361, 362, and 363 may be at least a part of the crypto engine 223 of FIGS. 2A and/or 2B. The crypto managers 361, 362, and 363 are shown in plural numbers, but may be singular. The crypto managers 361, 362, and 363, although shown as different blocks, may be a single crypto manager. The number of crypto managers 361, 362, and 363 is not limited. According to one embodiment, the electronic device 101 may control the second non-volatile memory 230 and/or the second volatile memory 240 within the rich execution environment 305. The operations described in FIG. 3 may be at least part of a memory swap out operation.

According to one embodiment, the electronic device 101 collects data 310 (e.g., the user's fingerprint) related to the user's biometric information while executing a secure application running within the secure execution environment 300. , and/or the user's face) may be obtained (or received). The data 310 may be referred to as persistent data. The electronic device 101 may transmit the data 310 to the first volatile memory 221 based on obtaining the data 310 related to the user's biometric information. The electronic device 101 may receive a request to encrypt the data 310 based on the data 310 being transmitted to the first volatile memory 221 . Hereinafter, the encryption operation may include an encryption operation. The electronic device 101 may identify a request to encrypt the data 310 . The electronic device 101 may generate a mapping table 320 in the volatile memory 211 based on identifying the request. For example, the mapping table 320 may be referred to as a persistent data ARC table.

According to one embodiment, the electronic device 101 may divide the data 310. The electronic device 101, in a state of encrypting the data 310 based on the division of the data 310, stores ARCs corresponding to each of the divided data 310 in the mapping table 320. It can be obtained from. The ARC may be referred to as a secure counter. For example, mapping table 320 may include ARCs. For example, the mapping table 320 may include ARCs matching a plurality of pieces of data. for example,

According to one embodiment, the electronic device may encrypt the data 310 using ARC (eg, security counter). For example, the electronic device 101 may use an initialization vector (IV) and/or a starting variable (SV) while encrypting the data 310. For example, the electronic device 101 may encrypt the data 310 based on the ARC obtained from the mapping table 320 and the initialization vector. For example, the initialization vector may be associated with the initiation of encryption of data 310. For example, an initialization vector may be used while encrypting instructions contained within data 310, based on initiation of encryption of data 310. For example, when encrypting a plurality of data, the electronic device 101 may encrypt each of the plurality of data based on different initialization vectors corresponding to each of the plurality of data.

According to one embodiment, the electronic device 101 may encrypt the data 310 and/or the mapping table 320 using the crypto manager 361. For example, the electronic device 101 may encrypt the data 310 using the crypto manager 361. The electronic device 101 may obtain encrypted data 315 based on the encryption. The electronic device 101 may transmit the encrypted data 315 to the second volatile memory 240 within the rich execution environment 305. The electronic device 101 may obtain tag information 340 for checking the integrity of the data 315 using the crypto manager 361. The electronic device 101 may transmit tag information 340 for checking the integrity of encrypted data 315 from the crypto manager 361 to the crypto manager 362. The electronic device 101 may encrypt the tag information 340 based on transmitting the tag information 340 to the crypto manager 362. The electronic device 101 may obtain encrypted tag information 345 based on the encryption. The electronic device 101 may transmit the encrypted tag information 345 to the second volatile memory 240 within the rich execution environment 305. For example, checking the integrity of the encrypted data 315 using the tag information 340 may include identifying whether the encrypted data 315 has been tampered with. For example, the electronic device 101 may encrypt the data 310 or decrypt the encrypted data 315 using an advanced encryption standard galois/counter mode (AES-GCM) method.

According to one embodiment, the electronic device 101 may transmit the mapping table 320 and/or the master mapping table 330 to the crypto manager 363. The master mapping table 330 may be referred to as master ARC. The electronic device 101 may obtain the master mapping table 330 from the third non-volatile memory 250 in the secure execution environment 300. The master mapping table 330 may be used to encrypt the mapping table 320 used while encrypting or decrypting data 310. For example, the electronic device 101 may obtain the master ARC from the master mapping table 330. The electronic device 101 may store the master mapping table 330 in the third non-volatile memory 250. The electronic device 101 may obtain the encrypted mapping table 325 based on the mapping table 320 and/or the master mapping table 330 transmitted to the crypto manager 363. For example, the electronic device 101 may obtain the encrypted mapping table 325 by encrypting the mapping table 320 using the ARC obtained from the master mapping table 330. The electronic device 101 provides master tag information ( 350) can be obtained. For example, the master tag information 350 may be referred to as master TAG. For example, the master tag information 350 may be referred to as the GCM tag when performing GCM tag decoding. For example, the master tag information 350 may include information related to a tag and/or hash. According to one embodiment, the electronic device 101 may match a hash value or a message authentication tag (MAC) included in the encrypted data 315 to the master tag information 350. The electronic device 101 may store the master tag information 350 obtained using the crypto manager 363 in the third non-volatile memory 250.

According to one embodiment, the electronic device 101 may store encrypted data 315, encrypted mapping table 325, and/or encrypted data transmitted to second volatile memory 240 within rich execution environment 305. The tag information 345 can be transmitted to the second non-volatile memory 230. The electronic device 101 may transmit encrypted data 315, encrypted mapping table 325, and/or encrypted tag information 345 to second non-volatile memory 230 within rich execution environment 305. ) can be stored in the second non-volatile memory 230. According to one embodiment, the electronic device 101 transmits the encrypted data 315, the encrypted mapping table 325, and/or the encrypted tag information 345 to an external electronic device (e.g., a server). You can. According to one embodiment, the electronic device 101 stores the encrypted data 315, the encrypted mapping table 325, and/or the encrypted tag information 345 in a single file. You can. According to one embodiment, the electronic device 101 may store the encrypted data 315, the encrypted mapping table 325, and/or the encrypted tag information 345 in a file corresponding to each. there is. According to one embodiment, the electronic device 101 may store a file including at least one of encrypted data 315, encrypted mapping table 325, or encrypted tag information 345.

As described above, according to one embodiment, the electronic device 101 stores encrypted data 315, encrypted mapping table 325, and/or encrypted tag information in the second non-volatile memory 230. (345) can be stored. Electronic device 101 stores encrypted data 315, encrypted mapping table 325, and/or encrypted tag information 345 in second non-volatile memory 230 within rich execution environment 305. By storing, the data 310 is protected from rollback attacks by external electronic devices and/or instructions executed by the electronic device 101 (e.g., instructions executed based on malware). The table 320 and/or tag information 340 may be protected.

FIG. 4A illustrates an example of an operation of an electronic device to decrypt data, according to an embodiment. FIG. 4B illustrates an example of an operation of an electronic device to decrypt data, according to an embodiment. The electronic device 101 of FIGS. 4A and/or 4B may be an example of the electronic device 101 of FIGS. 1, 2A, 2B, and/or 3. The first volatile memory 221 of FIG. 4A may be an example of the first volatile memory 221 of FIGS. 2A, 2B, and/or 3. The third non-volatile memory 250 of FIG. 4A may be an example of the third non-volatile memory 250 of FIGS. 2A and/or 2B. The second volatile memory 240 of FIGS. 4A and/or 4B may be an example of the second volatile memory 240 of FIGS. 2A, 2B, and/or 3. The second non-volatile memory 230 of FIGS. 4A and/or 4B may be an example of the second non-volatile memory 230 of FIGS. 2A, 2B, and/or 3. The data 310 in FIGS. 4A and/or 4B may be an example of the data 310 in FIG. 3 . The mapping table 320 of FIGS. 4A and/or 4B may be an example of the mapping table 320 of FIG. 3 . The master mapping table 330 of FIGS. 4A and/or 4B may be an example of the master mapping table 330 of FIG. 3 . The master tag information 350 of FIGS. 4A and/or 4B may be an example of the master tag information 350 of FIG. 3 . The crypto manager 461 of FIGS. 4A and/or 4B may be an example of the crypto manager 361 of FIG. 3 . The crypto manager 462 of FIGS. 4A and/or 4B may be an example of the crypto manager 362 of FIG. 3 . The crypto manager 463 in FIGS. 4A and/or 4B may be an example of the crypto manager 363 in FIG. 3 . The tag information 340 in FIGS. 4A and/or 4B may be an example of the tag information 340 in FIG. 3 . The encrypted data 315 of FIGS. 4A and/or 4B may be an example of the encrypted data 315 of FIG. 3 . The encrypted mapping table 325 of FIGS. 4A and/or 4B may be an example of the encrypted mapping table 325 of FIG. 3 . The encrypted tag information 345 of FIGS. 4A and/or 4B may be an example of the encrypted tag information 345 of FIG. 3 . The operations of FIGS. 4A and/or 4B may be executed by an application processor (e.g., application processor 210 of FIGS. 2A and/or 2B). The operations of FIGS. 4A and/or 4B may be executed by a secure processor (e.g., secure processor 220 of FIGS. 2A and/or 2B).

The operations described in FIGS. 4A and/or 4B may be at least part of a memory swap in operation. For example, the memory swap in operation is an operation of decrypting a file stored in the second non-volatile memory 230 in the rich execution environment 305 to the third non-volatile memory 250 in the secure execution environment 300. may include. For example, the memory swap in operation identifies whether biometric information input to the electronic device 101 and data (e.g., data 310) related to the biometric information stored in the electronic device 101 match. It may be an action for this purpose.

Referring to FIG. 4A, according to one embodiment, the electronic device 101 may control the first volatile memory 221 within the secure execution environment 300. For example, the first volatile memory 221 may be referred to as SRAM. The electronic device 101 may control the third non-volatile memory 250 within the secure execution environment 300. For example, the third non-volatile memory 250 may be referred to as secure NVM.

Referring to FIG. 4B, according to one embodiment, the electronic device 101 may control the secure element 410. The electronic device 101 can control the security element 410 that allows only designated applications to be executed. For example, the electronic device 101 may store, within the secure element 410, data that requires restricted access from external electronic devices, such as a personal identification number (PIN), password, fingerprint, and/or payment information. You can.

4A and/or 4B, according to one embodiment, the electronic device 101 stores encrypted data 315 in the second non-volatile memory 230 within the rich execution environment 305. ), the encrypted mapping table 325, and/or the encrypted tag information 345 may be transmitted to the second volatile memory 240. The electronic device 101 may store the encrypted data 315, the encrypted mapping table 325, and/or the encrypted tag information 345 transmitted to the second volatile memory 240 in a secure execution environment 300. ) can be transmitted at least as part of.

According to one embodiment, the electronic device 101 may decrypt the encrypted data 315 transmitted to the crypto manager 461 within the secure execution environment 300. According to one embodiment, the electronic device 101 may decrypt the encrypted data 315 based on the tag information 340 and the mapping table 320. The operation of obtaining the tag information 340 for decrypting the encrypted data 315 and the mapping table 320 for decrypting the encrypted data 315 will be described later.

Referring to FIG. 4A , according to one embodiment, the electronic device 101 may transmit master tag information 350 stored in the third non-volatile memory 250 to the crypto manager 463. For example, the master tag information 350 may be referred to as a master tag and/or an authentication tag. According to one embodiment, the electronic device 101 may obtain the master ARC from the master mapping table 330. The electronic device 101 may obtain the master ARC and transmit it to the crypto manager 463. According to one embodiment, the electronic device 101 may obtain an initialization vector from the master mapping table 330 and transmit it to the crypto manager 463. According to one embodiment, the electronic device 101 may obtain a security counter from the master mapping table 330. The electronic device 101, within the crypto manager 463, uses master tag information 350, an initialization vector obtained from the master mapping table 330, and/or a mapping table 325 encrypted using a security counter. can be decrypted. The security counter obtained from the master mapping table 330 may be stored in the first volatile memory 221. The electronic device 101 may store a security counter for decrypting the encrypted mapping table 325 obtained from the master mapping table 330 in the first volatile memory 221.

According to one embodiment, the electronic device 101 may obtain the mapping table 320 by decrypting the encrypted mapping table 325. The electronic device 101 may obtain the mapping table 320 based on the encrypted mapping table 320, master tag information 350, and master mapping table 330. For example, the electronic device 101 may use the encrypted mapping table 325, master tag information 350, and master mapping table 330, transmitted to the crypto manager 463, to create a mapping table 320. can be obtained.

According to one embodiment, the electronic device 101 may obtain tag information 340 related to an integrity check of the encrypted data 315 based on the encrypted tag information 345. For example, the electronic device 101 may transmit encrypted tag information 345 to the crypto manager 462. The electronic device 101 may obtain tag information 340 based on the encrypted tag information 345 transmitted to the crypto manager 462. The tag information 340 may include a tag related to integrity checking of the encrypted data 315. For example, the tag information may include an authentication tag.

According to one embodiment, the electronic device 101 includes a mapping table 320 obtained based on the crypto manager 463, tag information 340 related to integrity check of the encrypted data 315, and/or encryption The data 315 can be transmitted to the crypto manager 461. The electronic device 101 may decrypt the encrypted data 315 based on the mapping table 320, the encrypted data 315, and the tag information 340. The electronic device 101 may obtain data 310 based on the decoding. Based on the acquisition of the data 310, the electronic device 101 can identify whether there is a match between the user's biometric information input to the electronic device 101 and the data 310.

Referring to FIG. 4B, according to one embodiment, the electronic device 101 obtains the mapping table 320 based on the master tag information 350 stored in the security element 410 and the master mapping table 330. can do. For example, the secure element 410 may be referred to as an embedded secure element (eSE). For example, the electronic device 101 may transmit the encrypted mapping table 325 to the crypto manager 463. The electronic device 101 may transmit the master mapping table 330 and/or master tag information 350 from the secure element 410 to the crypto manager 463. The electronic device 101 obtains the mapping table 320 based on transmitting the encrypted mapping table 325, master tag information 350, and master tag information 350 to the crypto manager 463. You can.

According to one embodiment, the electronic device 101 may transmit encrypted tag information 345 to the crypto manager 462. The electronic device 101 may obtain tag information 340 based on the encrypted tag information 345 transmitted to the crypto manager 462. The tag information 340 may include a tag for checking the integrity of the encrypted data 315. For example, the electronic device 101 may perform an integrity check of the encrypted data 315 using the tag information 340. The electronic device 101 may transmit the encrypted data 315 to the crypto manager 461. The electronic device 101 uses the tag information 340 to transmit the encrypted data 315 and the tag information 340 to the crypto manager 362. 315) integrity check can be performed. The electronic device 101 may decrypt the encrypted data 315 based on the ARC obtained from the mapping table 320 based on completion of the integrity check of the encrypted data 315. The electronic device 101 may obtain data 310 based on the decoding.

As described above, according to one embodiment, the electronic device 101 may perform an operation to decrypt encrypted data 315 that has been altered from an external electronic device. While decrypting the encrypted data 315 stored in the second non-volatile memory 230, the electronic device 101 uses the master mapping table 330 and the master tag information 350 to decrypt the encrypted data 315. It is possible to identify whether (315) has been modulated. The electronic device 101 may stop decrypting the encrypted data 315 based on the fact that the encrypted data 315 has been altered by an external electronic device. By stopping the decryption, the electronic device 101 can block the use of data (e.g., data 310) related to user biometric information of the electronic device 101 based on an external electronic device.

Figure 5 shows an example of a flowchart regarding the operation of an electronic device, according to an embodiment. The electronic device of FIG. 5 may be an example of the electronic device 101 of FIGS. 1, 2A, 2B, 3, 4A, and/or 4B. The operations of FIG. 5 may be executed by the application processor 210 of FIG. 2A and/or FIG. 2B. The operations of FIG. 5 may be executed by the secure processor 210 of FIG. 2A and/or FIG. 2B. The operations in FIG. 5 may be examples of operations that encrypt or decrypt data, such as RP (read data path) storage.

Referring to FIG. 5 , in operation 501, according to one embodiment, the electronic device receives a request from the application processor to encrypt data (e.g., data 310 of FIGS. 3, 4A, and/or 4B). can be identified. For example, encrypting data may include encrypting the data. For example, the electronic device may receive data related to the user's biometric information. The electronic device may receive a request to encrypt the data based on receiving the data. Based on identifying a request to encrypt data, the electronic device may obtain a mapping table (e.g., mapping table 320 of FIGS. 3, 4A, and/or 4B) for encrypting the data. there is.

In operation 503, according to one embodiment, the electronic device may encrypt data based on ARC included in the mapping table. For example, the electronic device may have volatile memory (e.g., the secure execution environment 300 of FIGS. 3, 4A, and/or 4B) controlled within a secure execution environment (e.g., the secure execution environment 300 of FIGS. 3, 4A, and/or 4B). The mapping table may be obtained from the first volatile memory 221 of and/or the secure element 410 of FIG. 4B. For example, the electronic device may obtain ARC from a mapping table. The electronic device can encrypt data using the ARC.

In operation 505, according to one embodiment, the electronic device may acquire tag information (e.g., tag information 340 of FIGS. 3, 4A, and/or 4B). For example, the electronic device may obtain tag information within a secure execution environment. For example, the tag information may be related to data integrity checking. For example, the electronic device may encrypt tag information within a secure execution environment. For example, the electronic device may encrypt the mapping table within a secure execution environment. The electronic device may store a second mapping table that is different from the mapping table, which is a first mapping table, from a non-volatile memory (e.g., the third non-volatile memory 250 of FIGS. 3, 4A, and/or 4B) controlled within a secure execution environment. 2 A mapping table can be obtained. For example, the second mapping table may be referred to as master ARC. The electronic device may encrypt the first mapping table based on the second mapping table.

According to one embodiment, the electronic device may obtain a second ARC that is different from the ARC, which is the first ARC, from the second mapping table. For example, the electronic device may use the second ARC obtained from the second mapping table to obtain second tag information that is different from the tag information that is the first tag information. The second tag information may be referred to as master tag information 350 of FIGS. 3, 4A, and/or 4B.

At operation 507, according to one embodiment, the electronic device executes a non-volatile memory (e.g., FIG. 3, the encrypted data, the encrypted mapping table, and the encrypted tag information may be stored in the second non-volatile memory 230 of FIGS. 4A and/or 4B. For example, the mapping table may be referred to as the first mapping table in operation 505. According to one embodiment, the electronic device may encrypt data, mapping table, and/or tag information within a secure execution environment. The electronic device stores the encrypted data, encrypted mapping table, and/or encrypted tag information in a volatile memory (e.g., the second volatile memory of FIGS. 3, 4A, and/or 4B) controlled within the rich execution environment. It can be sent to (240)). The electronic device may transmit the encrypted data, encrypted mapping table, and/or encrypted tag information transmitted to the volatile memory to a non-volatile memory controlled within a rich execution environment. According to one embodiment, based on the transmission, the electronic device may store the encrypted data, the encrypted mapping table, and the encrypted tag information in a single file. According to one embodiment, based on the transmission, the electronic device may store the encrypted data, the encrypted mapping table, and the encrypted tag information in a file corresponding to each.

According to one embodiment, the electronic device may store a second mapping table for encrypting the first mapping table and/or second tag information in a non-volatile memory controlled within a secure execution environment. The electronic device may block access by unauthorized users by storing the second mapping table and/or the second tag information in a non-volatile memory within a secure execution environment.

As described above, according to one embodiment, the electronic device efficiently uses memory usage in the secure execution environment by storing encrypted data, encrypted mapping table, and encrypted tag information in the rich execution environment. You can.

Figure 6 shows an example of a flowchart regarding the operation of an electronic device, according to an embodiment. The electronic device of FIG. 6 may be an example of the electronic device 101 of FIGS. 1, 2A, 3, 4A, and/or 4B, and/or the electronic device of FIG. 5. The operations of FIG. 6 may be executed by the application processor 210 of FIG. 2A and/or FIG. 2B. The operations of FIG. 6 may be executed by the secure processor 210 of FIG. 2A and/or FIG. 2B. The operations of FIG. 6 may be at least partially related to the operations of FIG. 5 .

Referring to FIG. 6 , in operation 601, according to one embodiment, the electronic device uses a non-volatile memory (e.g., the second non-volatile memory 230 of FIGS. 2, 3, 4A, and/or 4B). Encrypted data stored within (e.g., encrypted data 315 of FIGS. 4A and/or 4B), an encrypted first mapping table (e.g., encrypted mapping table 325 of FIGS. 4A and/or 4B) )), and the encrypted first tag information (e.g., the encrypted tag information 345 of FIGS. 4A and/or 4B) in volatile memory (e.g., FIGS. 2, 3, 4A, and/or 4B) It can be transmitted to the second volatile memory 240). For example, the non-volatile memory may be referred to as UFS. For example, the volatile memory may be referred to as DRAM. The electronic device may be configured to store, from the non-volatile memory controlled within a rich execution environment (e.g., rich execution environment 305 of FIGS. 3, 4A, and/or 4B), the volatile memory controlled within the rich execution environment. Thus, encrypted data, encrypted first mapping table, and encrypted first tag information can be transmitted. For example, the first tag information may be tag information related to data integrity check.

In operation 603, according to one embodiment, the electronic device may decrypt the first mapping table. For example, the electronic device may obtain a second mapping table that is different from the first mapping table within a secure execution environment. The electronic device may obtain second tag information that is different from the first tag information. For example, the electronic device obtains the second mapping table from a non-volatile memory (e.g., third non-volatile memory 250 of FIGS. 2, 3, 4A, and/or 4B) within a secure execution environment. can do. For example, the electronic device may obtain second tag information from the non-volatile memory in a secure execution environment. The second mapping table may be referred to as master ARC. The second tag information may be referred to as a master tag. According to one embodiment, the electronic device may decrypt the first mapping table based on the second mapping table and the second tag information. According to one embodiment, the electronic device may decrypt the first tag information within a secure execution environment.

In operation 605, according to one embodiment, the electronic device may decrypt the encrypted data. For example, the electronic device may decrypt the encrypted data using the decrypted first mapping table and the decrypted first tag information. For example, the electronic device may decrypt the encrypted data based on decrypting the encrypted first tag information. For example, the electronic device may decrypt the first mapping table based on the second mapping table and/or second tag information generated from a non-volatile memory controlled within a secure execution environment. The electronic device can decrypt encrypted data using the decrypted first mapping table.

At operation 607, according to one embodiment, the electronic device stores the decrypted data in a volatile memory (e.g., the first volatile memory of FIGS. 2, 3, 4A, and/or 4B) controlled within a secure execution environment. It can be sent to (221)). According to one embodiment, the electronic device may control the volatile memory to identify whether information related to the user's biometric information input to the electronic device and the decrypted data match.

As described above, according to one embodiment, an electronic device may perform an operation to decrypt encrypted data that has been altered from an external electronic device. The electronic device may use the mapping table and tag information controlled within the secure execution environment while decrypting encrypted data stored within the non-volatile memory controlled within the rich execution environment. The electronic device can use the mapping table and the tag information to identify that the encrypted data has been altered by an external electronic device. The electronic device may stop decrypting the encrypted data based on the fact that the encrypted data has been tampered with by an external electronic device. By stopping the encryption, the electronic device can block the use of data (e.g., data 310) related to user biometric information of the electronic device based on an external electronic device.

As described above, according to one embodiment, the electronic device 101 includes an application processor 210, a security processor 220, and a non-volatile memory 230 controlled by the application processor 210. ) may include. The security processor 220 may identify a request to encrypt data 310 from the application processor 210 . Based on the request, the data 310 may be encrypted based on an anti-replay counter (ARC) included in the mapping table 320. The security processor may obtain tag information 340 related to an integrity check for the encrypted data 315, based on the encrypted data 315. The security processor may control the application processor 210 to store the encrypted data 315, the mapping table 325, and the tag information 345 in the non-volatile memory 230.

According to one embodiment, the security processor 220 is different from the ARC, which is the first ARC, and can encrypt the mapping table 320 based on the second ARC for encrypting the mapping table 320. there is.

According to one embodiment, the security processor is different from the mapping table 320, which is the first mapping table 320, and obtains the second ARC from the second mapping table 330 for obtaining the second ARC. , can be obtained.

According to one embodiment, the electronic device may include a volatile memory 221. The security processor 220 may obtain the mapping table 320 from the volatile memory 211 controlled within a secure execution environment 300.

According to one embodiment, the electronic device may include a second non-volatile memory 250 that is different from the non-volatile memory 230, which is the first non-volatile memory 230. The security processor 220 may obtain the second mapping table 330, which is different from the mapping table 320, which is the first mapping table 320, from the second non-volatile memory 250.

According to one embodiment, the secure processor 220 may control the second non-volatile memory 250 within the secure execution environment 300.

According to one embodiment, the security processor 220 is different from the tag information 340, which is the first tag information 340, and is related to the integrity check of the first mapping table 320. 350) can be obtained.

According to one embodiment, the electronic device may include a volatile memory 240. The security processor 220 stores the encrypted data 315, the mapping table 325, and the tag information 345 based on the transmission to the volatile memory 240 via the application processor 210. Can be stored in the non-volatile memory 230.

According to one embodiment, the application processor 210 may control the volatile memory 240 within a rich execution environment 305.

According to one embodiment, the security processor 220 may store the encrypted data 315, the mapping table 325, and the tag information 345 in files corresponding to each.

According to one embodiment, the security processor 220 may store the encrypted data 315, the mapping table 325, and the tag information 345 in a single file.

According to one embodiment, the security processor 220 uses a security counter obtained based on a second mapping table 330 that is different from the mapping table 320, which is the first mapping table 320. Thus, the first mapping table 320 can be decrypted.

According to one embodiment, the security processor 220 may obtain the tag information 345 for checking the integrity of the encrypted data 315 based on the decrypted first mapping table 325. .

As described above, according to one embodiment, a method of the electronic device 101 may include an operation of identifying a request to encrypt data 310 from the application processor 210. The method of the electronic device may include encrypting the data 310 based on an anti-replay counter (ARC) included in the mapping table 320 based on the request. Based on the encrypted data 315, the operation may include obtaining tag information 340 related to an integrity check for the encrypted data 315. The method of the electronic device controls the application processor 210 to store the encrypted data 315, the mapping table 325, and the like in a non-volatile memory 230 controlled by the application processor 210. and storing the tag information 345.

According to one embodiment, the method of the electronic device 101 is different from the ARC, which is the first ARC, and uses the mapping table 320 based on the second ARC for encrypting the mapping table 320. May include encryption operations.

According to one embodiment, the method of the electronic device 101 is different from the mapping table 320, which is the first mapping table 320, and includes a second mapping table 330 for obtaining the second ARC. It may include an operation of obtaining the second ARC from.

According to one embodiment, the method of the electronic device 101 may include an operation of obtaining the mapping table 320 from a volatile memory 221 controlled within a secure execution environment. .

According to one embodiment, the method of the electronic device 101 generates a first mapping table ( An operation of obtaining the second mapping table 330 that is different from the mapping table 320 (320) may be included.

According to one embodiment, the method of the electronic device 101 may include controlling the second non-volatile memory 250 within the secure execution environment 300.

According to one embodiment, the method of the electronic device 101 is different from the tag information 340, which is the first tag information 340, and uses a second method related to the integrity check of the first mapping table 320. It may include an operation of acquiring tag information 350.

According to one embodiment, the method of the electronic device 101 includes the encrypted data 315 and the mapping table 325 based on transmission to the volatile memory 240 through the application processor 210. , and may include an operation of storing the tag information 345 in the non-volatile memory 230.

According to one embodiment, the method of the electronic device 101 may include controlling the volatile memory 240 within a rich execution environment 305.

According to one embodiment, the method of the electronic device 101 includes storing the encrypted data 315, the mapping table 325, and the tag information 345 in a file corresponding to each. may include.

According to one embodiment, the method of the electronic device 101 includes storing the encrypted data 315, the mapping table 325, and the tag information 345 in a single file. can do.

According to one embodiment, the method of the electronic device 101 includes a security counter obtained based on a second mapping table 330 that is different from the mapping table 320, which is the first mapping table 320. ) may include an operation of decoding the first mapping table 320.

According to one embodiment, the method of the electronic device 101 obtains the tag information 345 for checking the integrity of the encrypted data 315 based on the decrypted first mapping table 325. It may include actions such as:

As described above, according to one embodiment, the electronic device 101 includes an application processor 210, a security processor 220, and a first non-volatile memory ( 230), and a second non-volatile memory 250 controlled by the security processor. The security processor 220 may identify a request to decrypt encrypted data 315 from the application processor 210. The security processor, based on the request, generates an anti-replay counter (ARC) included in the mapping table 330 based on the second non-volatile memory 250, and a tag based on the second non-volatile memory 250. Using the information 350, a second mapping table 325 that is different from the mapping table 330, which is the first mapping table 330, and is encrypted, and the tag information 350, which is the first tag information 350. ) can be decrypted. The security processor may decrypt the encrypted data 315 based on decrypting the second mapping table 325 and the second tag information 345.

According to one embodiment, the application processor 210 may control the first non-volatile memory 230 within the rich execution environment 305.

According to one embodiment, the security processor 220 may control the second non-volatile memory 250 within the secure execution environment 300.

According to one embodiment, the security processor 220 may decrypt the second mapping table 325 and the second tag information 345 within the secure execution environment 300.

According to one embodiment, the security processor 220 includes the ARC, which is a security counter for decrypting the second encrypted tag information 345 related to the integrity check of the encrypted data 315, and the first It can be obtained based on the mapping table 330.

As described above, according to one embodiment, the method of the electronic device 101 includes processing from the application processor 210 to the first non-volatile memory 230 controlled by the application processor 210. An operation may include identifying a request to decrypt stored and encrypted data 315 . The method of the electronic device includes, based on the request, a mapping table 330 based on a second non-volatile memory 250 that is different from the first non-volatile memory 230 and is controlled by a security processor 220. It is different from the mapping table 330, which is the first mapping table 330, and is encrypted using the tag information 350 based on the ARC (anti replay counter) included in the ARC and the second non-volatile memory 250. An operation of decoding the second mapping table 325 and the second tag information 345 that is different from the tag information 350, which is the first tag information 350, may be included. The method of the electronic device can decrypt the encrypted data 315 based on decrypting the second mapping table 325 and the second tag information 345.

According to one embodiment, the method of the electronic device 101 may include controlling the first non-volatile memory 230 within the rich execution environment 305.

According to one embodiment, the method of the electronic device 101 may include controlling the second non-volatile memory 250 within the secure execution environment 300.

According to one embodiment, the method of the electronic device 101 includes an operation of decrypting the second mapping table 325 and the second tag information 345 within the secure execution environment 300. It can be included.

According to one embodiment, the method of the electronic device 101 includes the ARC, which is a security counter for decrypting the encrypted second tag information 345 related to the integrity check of the encrypted data 315, It may include an operation of obtaining based on the first mapping table 330.

Electronic devices according to various embodiments disclosed in this document may be of various types. Electronic devices may include, for example, portable communication devices (e.g., smartphones), computer devices, portable multimedia devices, portable medical devices, cameras, electronic devices, or home appliances. Electronic devices according to embodiments of this document are not limited to the above-described devices.

The various embodiments of this document and the terms used herein are not intended to limit the technical features described in this document to specific embodiments, and should be understood to include various changes, equivalents, or replacements of the embodiments. In connection with the description of the drawings, similar reference numbers may be used for similar or related components. The singular form of a noun corresponding to an item may include one or more of the above items, unless the relevant context clearly indicates otherwise. As used herein, “A or B”, “at least one of A and B”, “at least one of A or B”, “A, B or C”, “at least one of A, B and C”, and “A Each of phrases such as “at least one of , B, or C” may include any one of the items listed together in the corresponding phrase, or any possible combination thereof. Terms such as "first", "second", or "first" or "second" may be used simply to distinguish one component from another, and to refer to that component in other respects (e.g., importance or order) is not limited. One (e.g., first) component is said to be “coupled” or “connected” to another (e.g., second) component, with or without the terms “functionally” or “communicatively.” When mentioned, it means that any of the components can be connected to the other components directly (e.g. wired), wirelessly, or through a third component.

The term “module” used in various embodiments of this document may include a unit implemented in hardware, software, or firmware, and is interchangeable with terms such as logic, logic block, component, or circuit, for example. It can be used as A module may be an integrated part or a minimum unit of the parts or a part thereof that performs one or more functions. For example, according to one embodiment, the module may be implemented in the form of an application-specific integrated circuit (ASIC).

Various embodiments of the present document are one or more instructions stored in a storage medium (e.g., built-in memory 136 or external memory 138) that can be read by a machine (e.g., electronic device 101). It may be implemented as software (e.g., program 140) including these. For example, a processor (e.g., processor 120) of a device (e.g., electronic device 101) may call at least one command among one or more commands stored from a storage medium and execute it. This allows the device to be operated to perform at least one function according to the at least one instruction called. The one or more instructions may include code generated by a compiler or code that can be executed by an interpreter. A storage medium that can be read by a device may be provided in the form of a non-transitory storage medium. Here, 'non-transitory' only means that the storage medium is a tangible device and does not contain signals (e.g. electromagnetic waves), and this term refers to cases where data is semi-permanently stored in the storage medium. There is no distinction between temporary storage cases.

According to one embodiment, methods according to various embodiments disclosed in this document may be provided and included in a computer program product. Computer program products are commodities and can be traded between sellers and buyers. The computer program product may be distributed in the form of a machine-readable storage medium (e.g. compact disc read only memory (CD-ROM)) or through an application store (e.g. Play Store™) or on two user devices (e.g. It can be distributed (e.g. downloaded or uploaded) directly between smart phones) or online. In the case of online distribution, at least a portion of the computer program product may be at least temporarily stored or temporarily created in a machine-readable storage medium, such as the memory of a manufacturer's server, an application store's server, or a relay server.

According to various embodiments, each component (e.g., module or program) of the above-described components may include a single or plural entity, and some of the plurality of entities may be separately placed in other components. there is. According to various embodiments, one or more of the components or operations described above may be omitted, or one or more other components or operations may be added. Alternatively or additionally, multiple components (eg, modules or programs) may be integrated into a single component. In this case, the integrated component may perform one or more functions of each component of the plurality of components in the same or similar manner as those performed by the corresponding component of the plurality of components prior to the integration. . According to various embodiments, operations performed by a module, program, or other component may be executed sequentially, in parallel, iteratively, or heuristically, or one or more of the operations may be executed in a different order, or omitted. Alternatively, one or more other operations may be added.

Claims (36)

In the electronic device 101,
application processor 210;
security processor 220; and
Includes a non-volatile memory 230 controlled by the application processor 210,
The security processor 220,
identify, from the application processor (210), a request to encrypt data (310);
encrypt the data 310 based on an anti-replay counter (ARC) included in the mapping table 320 based on the request;
Based on the encrypted data 315, obtain tag information 340 related to an integrity check for the encrypted data 315; and
configured to control the application processor 210 to store the encrypted data 315, the mapping table 325, and the tag information 345 in the non-volatile memory 230,
Electronic device (101).
According to claim 1,
The security processor 220,
configured to encrypt the mapping table (320) based on a second ARC, which is different from the ARC, which is a first ARC, and is for encrypting the mapping table (320).
Electronic device (101).
According to clause 2,
The security processor 220,
Different from the mapping table 320, which is a first mapping table 320, and configured to obtain the second ARC from a second mapping table 330 for obtaining the second ARC.
Electronic device (101).
According to any one of claims 1 to 3,
Further comprising volatile memory 221,
The security processor 220,
Configured to obtain the mapping table 320 from the volatile memory 211 controlled within a secure execution environment 300,
Electronic device (101).
According to clause 4,
It further includes a second non-volatile memory 250 that is different from the non-volatile memory 230, which is the first non-volatile memory 230,
The security processor 220,
configured to obtain, from the second non-volatile memory (250), the second mapping table (330) that is different from the mapping table (320), which is the first mapping table (320),
Electronic device (101).
According to clause 5,
The security processor 220,
configured to control the second non-volatile memory (250) within a secure execution environment (300),
Electronic device (101).
According to clause 6,
The security processor 220,
Configured to obtain second tag information 350, which is different from the tag information 340, which is the first tag information 340, and is related to the integrity check of the first mapping table 320.
Electronic device (101).
The method according to any one of claims 1 to 7,
Further comprising volatile memory 240,
The security processor 220,
Based on transmission to the volatile memory 240 through the application processor 210, the encrypted data 315, the mapping table 325, and the tag information 345 are stored in the non-volatile memory 230. ), configured to be stored within,
Electronic device (101).
According to clause 8,
The application processor 210,
Configured to control the volatile memory (240) within a rich execution environment (305),
Electronic device (101).
The method according to any one of claims 1 to 9,
The security processor 220,
configured to store the encrypted data 315, the mapping table 325, and the tag information 345 in files corresponding to each,
Electronic device (101).
The method according to any one of claims 1 to 10,
The security processor 220,
configured to store the encrypted data 315, the mapping table 325, and the tag information 345 in a single file,
Electronic device (101).
The method according to any one of claims 1 to 11,
The security processor 220,
To decrypt the first mapping table 320 using a security counter obtained based on a second mapping table 330 that is different from the mapping table 320, which is the first mapping table 320, composed,
Electronic device (101).
According to claim 12,
The security processor 220,
Configured to obtain the tag information 345 for integrity checking of the encrypted data 315 based on the decrypted first mapping table 325,
Electronic device (101).
In the method of the electronic device 101,
Identifying, from the application processor 210, a request to encrypt data 310;
Encrypting the data 310 based on an anti-replay counter (ARC) included in the mapping table 320 based on the request;
Based on the encrypted data 315, obtaining tag information 340 related to an integrity check for the encrypted data 315; and
By controlling the application processor 210, the encrypted data 315, the mapping table 325, and the tag information 345 are stored in the non-volatile memory 230 controlled by the application processor 210. Including the operation of saving,
method.
According to claim 14,
The method of the electronic device 101 includes:
It is different from the ARC, which is the first ARC, and includes an operation of encrypting the mapping table 320 based on the second ARC for encrypting the mapping table 320.
method.
According to claim 15,
The method of the electronic device 101 includes:
It is different from the mapping table 320, which is the first mapping table 320, and includes an operation of obtaining the second ARC from the second mapping table 330 for obtaining the second ARC.
method.
The method according to any one of claims 14 to 16,
The method of the electronic device 101 includes:
Comprising an operation of obtaining the mapping table 320 from a volatile memory 221 controlled within a secure execution environment,
method.
According to claim 17,
The method of the electronic device 101 includes:
From the second non-volatile memory 250, which is different from the non-volatile memory 230, which is the first non-volatile memory 230, the second mapping table ( 330), including the operation of obtaining,
method.
According to clause 18,
The method of the electronic device 101 includes:
Within a secure execution environment (300), comprising controlling the second non-volatile memory (250),
method.
According to clause 19,
The method of the electronic device 101 includes:
Comprising the operation of obtaining second tag information 350, which is different from the tag information 340, which is the first tag information 340, and is related to the integrity check of the first mapping table 320.
method.
The method according to any one of claims 14 to 20,
The method of the electronic device 101 includes:
Based on transmission to volatile memory 240 via application processor 210, the encrypted data 315, the mapping table 325, and the tag information 345 are stored in the non-volatile memory 230. Including the operation of storing within,
method.
According to claim 21,
The method of the electronic device 101 includes:
Including controlling the volatile memory 240 within a rich execution environment 305,
method.
The method according to any one of claims 14 to 22,
The method of the electronic device 101 includes:
Comprising the operation of storing the encrypted data 315, the mapping table 325, and the tag information 345 in a file corresponding to each,
method.
The method according to any one of claims 14 to 23,
The method of the electronic device 101 includes:
Comprising the operation of storing the encrypted data 315, the mapping table 325, and the tag information 345 in a single file,
method.
The method according to any one of claims 14 to 24,
The method of the electronic device 101 includes:
An operation of decrypting the first mapping table 320 using a security counter obtained based on a second mapping table 330 that is different from the mapping table 320, which is the first mapping table 320. Including,
method.
According to claim 25,
The method of the electronic device 101 includes:
Comprising an operation of acquiring the tag information 345 for checking the integrity of the encrypted data 315 based on the decrypted first mapping table 325,
method.
In the electronic device 101,
application processor 210;
security processor 220;
a first non-volatile memory 230 controlled by the application processor 210; and
comprising a second non-volatile memory (250) controlled by the security processor;
The security processor 220,
identify, from the application processor (210), a request to decrypt encrypted data (315);
Based on the request, ARC (anti replay counter) included in the mapping table 330 based on the second non-volatile memory 250, and tag information 350 based on the second non-volatile memory 250 Using, it is different from the mapping table 330, which is the first mapping table 330, and is different from the encrypted second mapping table 325 and the tag information 350, which is the first tag information 350, Decrypt the encrypted second tag information 345; and
Configured to decrypt the encrypted data 315 based on decrypting the second mapping table 325 and the second tag information 345,
Electronic device (101).
According to clause 27,
The application processor 210,
configured to control the first non-volatile memory (230) within a rich execution environment (305),
Electronic device (101).
The method according to any one of claims 27 to 28,
The security processor 220,
configured to control the second non-volatile memory (250) within a secure execution environment (300),
Electronic device (101).
The method according to any one of claims 27 to 29,
The security processor 220,
configured to decrypt the second mapping table (325) and the second tag information (345) within a secure execution environment (300),
Electronic device (101).
The method according to any one of claims 27 to 30,
The security processor 220,
configured to obtain the ARC, which is a security counter for decrypting the encrypted second tag information 345 related to the integrity check of the encrypted data 315, based on the first mapping table 330,
Electronic device (101).
In the method of the electronic device 101,
Identifying, from an application processor (210), a request to decrypt data (315) stored and encrypted in a first non-volatile memory (230) controlled by the application processor (210);
Based on the request, an anti replay counter (ARC) included in the mapping table 330 based on a second non-volatile memory 250 that is different from the first non-volatile memory 230 and is controlled by the security processor 220. ), and a second mapping table 325 that is different from the mapping table 330, which is the first mapping table 330, and is encrypted using tag information 350 based on the second non-volatile memory 250. , and an operation of decoding second tag information 345 that is different from the tag information 350, which is first tag information 350; and
Comprising an operation of decrypting the encrypted data 315 based on decrypting the second mapping table 325 and the second tag information 345,
method.
According to clause 32,
The method of the electronic device 101 includes:
Including controlling the first non-volatile memory (230) within a rich execution environment (305),
method.
The method according to any one of claims 32 to 33,
The method of the electronic device 101 includes:
Including controlling the second non-volatile memory (250) within a secure execution environment (300),
method.
The method according to any one of claims 32 to 34,
The method of the electronic device 101 includes:
Including the operation of decrypting the second mapping table 325 and the second tag information 345 within a secure execution environment 300,
method.
The method according to any one of claims 32 to 35,
The method of the electronic device 101 includes:
Comprising the operation of acquiring the ARC, which is a security counter for decrypting the encrypted second tag information 345 related to the integrity check of the encrypted data 315, based on the first mapping table 330. ,
method.

Images