WO2005091143A1

WO2005091143A1 - Information processing device and program file generation device

Info

Publication number: WO2005091143A1
Application number: PCT/JP2005/004759
Authority: WO
Inventors: Koji Kobayashi; Tsutomu Sekibe; Tomohiko Kitamura
Original assignee: Matsushita Electric Industrial Co., Ltd.
Priority date: 2004-03-24
Filing date: 2005-03-17
Publication date: 2005-09-29
Also published as: JP2007226276A

Abstract

It is impossible to perform individual debug control in program unit by comparing a debug permission key to a device unique ID. A resolver of an information processing semiconductor device reads a passcode-equipped program from memory 1, transfers the program to memory 2, and stores the passcode in a passcode register of a debug permission device. Simultaneously with this, program setting is reported to a program execution monitoring device. The program execution monitoring device detects execution of the program by a CPU and reports a program-in-execution signal to the debug permission device. The debug permission device calculates values of the passcode register and an authentication file register and controls to enable/disable a debug port upon reception of the program-in-execution signal, thereby enabling individual debug control in program unit.

Description

Specification

Information processing device and program file generation device

Technical field

The present invention relates to an information processing device with a debugger device and a program file generation device.

Background art

[0002] The CPU of an information processing semiconductor device used for embedding generally has a standard debugger port. A general-purpose debugger connected there is relatively inexpensive and easily available. Therefore, software development costs can be reduced.

[0003] The debugger is a tool for debugging a program by step-executing a program operated by the CPU or stopping the program halfway and observing an internal register of the CPU.

[0004] On the other hand, some programs to be incorporated in the information processing semiconductor device require an algorithm of the program, that is, data that must be kept secret. The above general-purpose debugger must keep these secrets! / ヽ There is a problem that programs and data can be easily analyzed.

[0005] Therefore, as shown in FIG. 1, a method has been proposed in which a general-purpose debugger and a dedicated debugger permission device are combined to configure a configuration equivalent to a dedicated debugger (see Patent Document 1).

Patent Document 1: Japanese Patent Application Laid-Open No. 2002-341956

Disclosure of the invention

Problems to be solved by the invention

[0006] However, with this conventional method, once a debugger permission device is obtained, debugging of the system is permitted forever. Also, when handling a plurality of secure programs, one debugger permitting device is permitted for all programs, and there is a problem that it is not possible to selectively control whether or not debugging can be performed on a program-by-program basis.

[0007] An object of the present invention is to provide an information processing device and a program file generation device that enable control of a debugger in units of programs and control whether debugging is possible depending on the security level of a program to be executed. Means for solving the problem

[0008] To solve this problem, the invention according to claim 1 of the present patent application is an information processing apparatus provided with a CPU and a debug port, and monitors a program being executed by the CPU. A program execution monitoring device that, based on the monitoring result, enables the debug port when the CPU is executing a program permitted to debug, and executes a program other than the program permitted to debug. The present invention relates to an information processing apparatus having a debug permission device, wherein the debug port is invalidated when the debugger is in the middle.

[0009] The invention according to claim 2 is the information processing apparatus according to claim 1, further comprising, prior to debugging, performing authentication using a debugger connected to a debug port and a passcode. The present invention relates to an information processing device, which is a feature.

[0010] Further, the invention according to claim 3 is the information processing apparatus according to claim 2, further characterized in that the program and the passcode can be read through a program reading port. The present invention relates to an information processing device.

[0011] The invention according to claim 4 is the information processing device according to claim 3, further comprising: decrypting an encryption key-encrypted passcode and a program read from the program reading port. The present invention relates to an information processing device having a first decryption device.

[0012] The invention according to claim 5 is the information processing device according to claim 4, further comprising a second decryption device that decrypts a secret key encryption authentication file read from the debugger card. And an authentication device for performing authentication with a debugger using a decrypted authentication file and the passcode prior to debugging.

[0013] The invention according to claim 6 is characterized in that the first decryption device and the second decryption device can use different secret keys, and the information processing device according to claim 5, About.

[0014] In the invention according to claim 7, in the authentication device, in addition to the passcode authentication, user authentication is also performed, and when both program authentication and user authentication are established, the debugging is performed. 6. The information according to claim 5, wherein the permission device permits debugging. Information processing device.

[0015] The invention according to claim 8 relates to a program file generation device that generates a program and a passcode to be supplied to the information processing device according to claim 1.

[0016] The invention according to claim 9 relates to the program file generating device according to claim 8, wherein the program and the passcode are generated by encryption.

[0017] The invention according to claim 10 relates to the program file generating device according to claim 9, wherein the program and the passcode are combined and then encrypted.

[0018] The invention according to claim 11 is the program according to claim 10, wherein the debugging device further generates an encrypted authentication file used when performing authentication with the information processing device. It relates to a file generation device.

[0019] Also, in the invention according to claim 12, the encryption key used when combining the program and the passcode and encrypting is different from the encryption key used when encrypting the authentication file. 12. The program file generation device according to claim 11, wherein: The invention's effect

According to the information processing device and the program file generation device of the present invention, it is possible to set the security level of the program by controlling the system debugger in units of programs, and to execute the program to be executed. Depending on the security level, the possibility of debugging can be controlled.

Brief Description of Drawings

FIG. 1 is a block diagram of a conventional technique.

FIG. 2 is a block diagram of the entire system centering on the information processing semiconductor device in the present embodiment.

FIG. 3 is a detailed view of a debug permitting device.

FIG. 4 is a diagram showing a processing procedure of an authentication file generator.

FIG. 5 is a diagram showing a procedure for transferring an authentication file by a debugger.

FIG. 6 is a diagram showing a procedure for reading a program in the information processing semiconductor device.

[FIG. 7] FIG. 7 is an overall system centered on an information processing semiconductor device accompanied by an encryption program. FIG.

[FIG. 8] FIG. 8 is a diagram showing a processing procedure of an authentication file generating device accompanied by an encryption program.

FIG. 9 is a diagram showing a procedure for reading a program in an information processing semiconductor device accompanied by an encryption program.

[10] FIG. 10 is a block diagram of the entire system centering on the information processing semiconductor device with the encryption file.

[FIG. 11] FIG. 11 is a detailed view of a debug permitting device with an encrypted authentication file.

[FIG. 12] FIG. 12 is a diagram showing a processing procedure of an authentication file generating device accompanied by an encryption file.

[FIG. 13] FIG. 13 is a diagram showing a procedure of reading a program in an information processing semiconductor device accompanied by an encryption authentication file.

Explanation of symbols

100 Authentication file generator

200 Information processing semiconductor device

202 Memory 1

210 CPU

220 decomposition equipment

230 Memory 2

240 Program execution monitoring device

250 debug permission device

2502 No code register

2504 Authentication File Register

2506 computing unit

2510 Decryptor

256 secret key 2

260 decoding device

262 Private Key 1

270 Denog Hot 300 debugger

BEST MODE FOR CARRYING OUT THE INVENTION

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

(Embodiment 1)

FIG. 2 shows a block diagram of the entire system centering on information processing semiconductor device 200 in the present embodiment.

[0024] The information processing semiconductor device 200 includes a CPU 210, a memory 1 (202), a memory 2 (230), a disassembly device 220, a program execution monitoring device 240, a debug permission device 250, and a debug port 270.

[0025] The memory 1 (202) is connected to the information processing semiconductor device 200 via an external interface, and includes a CPU 210, a memory 2 (230), a disassembly device 220, a program execution monitoring device 240, a debug permit device 250, and a debug port. 270 is preferably present inside information processing semiconductor device 200.

The information processing semiconductor device 200 is connected to a debugger 300 via a debug port 270 to perform debugging.

Also, the authentication file generator 100 exists independently of the information processing semiconductor device 200.

FIG. 3 shows details of the debug permission device 250.

[0028] The debug permitting device 250 has the values of the passcode register 2502 and the authentication file register 2504.

The value of each register is calculated by the calculator 2506.

In response to the calculation result and a signal indicating that the CPU 210 is executing the program from the program execution monitoring device 240, control for the debug port 270 is determined by a permission signal.

FIG. 4 shows a processing procedure in the authentication file generator 100.

The authentication file generator 100 reads a program for adding a passcode handled by the information processing semiconductor device 200 (S2000). A passcode and (S2012), and a pair of passcode and a de nogger authentication file are generated (S2002). The passcode is combined with the program (S2014). [0031] The authentication file generator 100 combines a program with which a passcode is combined with an information processing semiconductor device.

Provide to 200 and store in memory 1 (202).

[0032] The debugger authentication file is provided to the debugger 300.

FIG. 5 shows the connection processing procedure of the debugger 300.

When connected to the information processing semiconductor device 200 (S3000), the debugger 300 transfers the authentication file to the authentication file register 2504 via the debug port (S3002).

FIG. 6 shows a procedure of a program reading process in the information processing semiconductor device 200.

The program with the noscode is stored in memory 1 (202). At the time of product shipment, it is preferable to burn it to non-volatile memory such as flash ROM!

The information processing semiconductor device 200 issues an instruction to read a program into a decomposer by the CPU (S1000).

[0036] The disassembly device 220 reads out the program with the noscode also in the memory 1 (202), disassembles it, and transfers the program to the memory 2 (230) 1002). At the same time, the passcode is transferred to the debugger 250's noscode register 2502 [transfer 1004].

When the program is transferred from the disassembly device 220, the memory 2 (230) notifies the program execution monitoring device 240 of the program setting (S1022).

[0038] Upon receiving the program setting notification, the program execution monitoring device 240 starts monitoring program execution of the CPU 210 (S1024).

The CPU 210 reads out and executes the program in the memory 2 (230) (S1014).

[0040] When the CPU 210 starts executing the program, the program execution monitoring device 240 notifies the debug execution device 250 of a program in progress signal (S1026).

On the other hand, in the debug permission device 250, the passcode register 2502 and the authentication file register

2504 is calculated by the calculator 2506 (S1006).

[0042] The debug permitting device 250 receives the operation result and the program being executed from the program execution monitoring device 240, and determines permission or non-permission of the debug port 270 (S1008).

According to the above determination, the debug permitting device 250 controls permission or non-permission of the debug port 270 (S1030).

[0044] With the above configuration, debugging is not permitted. Can be prevented.

(Embodiment 2)

FIG. 7 shows a block diagram of the entire system centering on the information processing semiconductor device 200 in a mode using the secret key encryption program of the present embodiment. Configurations not described in the present embodiment are common to the first embodiment.

The information processing semiconductor device 200 includes a CPU 210, a memory 1 (202), a memory 2 (230),

260, secret key 262, program execution monitoring device 240, debug permission device 250, debug port 270!

[0047] The memory 1 (202) is connected to the information processing semiconductor device 200 via an external interface, and includes a CPU 210, a memory 2 (230), a decryption device 260, a secret key 262, a program execution monitoring device 240, and a debug permit device. 250 and the debug port 270 are preferably present inside the information processing semiconductor device 200.

FIG. 8 shows a processing procedure in the authentication file generator 100.

The authentication file generator 100 reads a program for adding a passcode handled by the information processing semiconductor device 200 (S2000). A passcode and a denogger authentication file paired with the passcode (S2012) are generated (S2002). A secret key encryption program including a passcode is generated (S2022).

The authentication file generator 100 provides the secret key encryption program including the passcode to the information processing semiconductor device 200 and stores it in the memory 1 (202).

[0052] The debugger authentication file is provided to the debugger 300.

FIG. 9 shows a program reading processing procedure in the information processing semiconductor device 200.

[0053] The secret key encryption program is stored in the memory 1 (202). At the time of product shipment, it is preferable to burn it to non-volatile memory such as flash ROM!

The information processing semiconductor device 200 issues an instruction to read out the program to the decomposer by the CPU (S1000). The decryption device 260 reads the secret key encryption program from the memory 1 (202), decrypts the ciphertext with the secret key 262, and transfers the decrypted plaintext program to the memory 2 (S1042). At the same time, the passcode is transferred to the bus code register 2502 of the debug permit device 250 (S1044).

When the plaintext program is transferred from the decryption device 260, the memory 2 (230) notifies the program execution monitoring device 240 of the program setting (S1022).

[0057] Upon receiving the program setting notification, the program execution monitoring device 240 starts monitoring program execution of the CPU 210 (S1024).

The CPU 210 reads and executes the plaintext program in the memory 2 (230) (S1014).

[0059] When the CPU 210 starts executing the program, the program execution monitoring device 240 notifies the debug permission device 250 of a program in progress signal (S1026).

[0060] On the other hand, in the debug permission device 250, the passcode register 2502 and the authentication file register

2504 is calculated by the calculator 2506 (S1006).

[0061] The debug permitting device 250 receives the operation result and the program execution from the program execution monitoring device 240, and determines permission / non-permission of the debug port 270 (S1008).

[0062] According to the above determination, the debug permitting device 250 controls permission or non-permission of the debug port 270 (S1030).

With the above configuration, the security level can be improved compared to the first embodiment.

(Embodiment 3)

FIG. 10 is a block diagram of the entire system centering on the information processing semiconductor device 200 in a mode using the secret key encryption authentication file according to the present embodiment. Configurations not described in the present embodiment are the same as those in the first or second embodiment.

[0065] The information processing semiconductor device 200 includes a CPU 210, a memory 1 (202), a memory 2 (230), and a decoding device.

It consists of 260, a secret key 1 (262), a program execution monitoring device 240, a debug permit device 250, a secret key 2 (256), and a debug port 270.

The memory 1 (202) is connected to the information processing semiconductor device 200 via an external interface, and includes a CPU 210, a memory 2 (230), a decryption device 260, a secret key 1 (262), and a program execution monitor. The device 240, the debug permission device 250, the secret key 2 (256), and the debug port 270 are preferably present inside the information processing semiconductor device 200.

Further, the authentication file generator 100 exists independently of the information processing semiconductor device 200.

FIG. 11 shows details of the debug permission device 250.

[0069] The debug permitting device 250 has the values of the passcode register 2502 and the authentication file register 2504.

[0070] The authentication file register 2504 is decrypted by the decryption device 2510 using the secret key 2 (256) when data is transmitted from the debug port 270, and the power is also set.

An arithmetic unit 2506 calculates the values of the passcode register 2502 and the authentication file register 2504.

[0072] Receiving this calculation result and a signal from the program execution monitoring device 240 indicating that the CPU 210 is executing the program, control of the debug port 270 is determined by a permission signal.

FIG. 12 shows a processing procedure in the authentication file generator 100.

The authentication file generator 100 reads a program for adding a passcode handled by the information processing semiconductor device 200 (S2000). A passcode and (S2012) and a pair of passcode and a debugger authentication file are generated (S2002).

A secret key encryption program including a noscode is generated (S2022).

An authentication file for the private key encryption debugger is generated (S2032).

The authentication file for the private key encryption / debugger debugger is provided to the debugger 300.

FIG. 13 shows a program reading processing procedure in the information processing semiconductor device 200.

[0077] The secret key encryption program is stored in the memory 1 (202). At the time of product shipment, it is preferable to burn it to non-volatile memory such as flash ROM!

[0078] The information processing semiconductor device 200 issues an instruction to read the program to the decomposer by the CPU. (S1000).

The decryption device 260 reads the secret key encryption program from the memory 1 (202),

The ciphertext is decrypted in (262), and the decrypted plaintext program is transferred to the memory 2 (S1042). At the same time, the pass code is transferred to the bus code register 2502 of the debug permit device 250 (S1044).

When the plaintext program is transferred from the decryption device 260, the memory 2 (230) notifies the program execution monitoring device 240 of the setting of the program (S1022).

[0081] Upon receiving the program setting notification, the program execution monitoring device 240 starts monitoring the program execution of the CPU 210 (S1024).

[0083] When the CPU 210 starts executing the program, the program execution monitoring device 240 notifies the debug permission device 250 of a program in progress signal (S1026).

On the other hand, in the debug permitting device 250, the secret key encryption debugger authentication file is decrypted by the encryption / decryption device 2510 using the secret key 2 (256), and is set in the authentication file register 2504 (S1062).

The pass code register 2502 and the authentication file register 2504 are operated by the operation unit 2506 (S 1006).

[0086] The debug permitting device 250 receives the above calculation result and the execution of the program from the program execution monitoring device 240, and determines permission or non-permission of the debug port 270 (S1008).

[0087] According to the above determination, the debug permitting device 250 controls permission or non-permission of the debug port 270 (S1030).

[0088] Although secret key 1 (262) and secret key 2 (256) in the present embodiment are different, they are common to each other.

With the above configuration, it is possible to further improve the security level as compared with the second embodiment.

Industrial applicability

The present invention provides a method for generating a program with a passcode by an authentication file generator, generating an authentication file corresponding to the passcode, and enabling debugging of an information processing semiconductor device. By selectively controlling the debugger port by calculating the passcode of the decryption device by the enabled device and the authentication file of the debugger capability, it is possible to control the debugger on a program basis. INDUSTRIAL APPLICABILITY The present invention can be used for all information processing semiconductor devices equipped with a program that requires protection of an algorithm, and its industrial applicability is very wide and large.

Claims

The scope of the claims

[1] An information processing device having a CPU and a debug port,

A program execution monitoring device that monitors a program being executed by the CPU; An information processing apparatus comprising: a debug permission device that invalidates the debug port when a program other than the permitted program is being executed.

[2] The information processing apparatus according to claim 1, further comprising:

An information processing apparatus for performing authentication using a passcode and a debugger connected to a debug port prior to debugging.

[3] The information processing apparatus according to claim 2, further comprising a program and a passcode which can be read via a program reading port.

[4] The information processing device according to claim 3, further comprising:

An information processing apparatus comprising: a first decryption device that decrypts an encryption key, an encrypted code, and a program read from the program read port.

[5] The information processing apparatus according to claim 4, further comprising:

A second decryption device for decrypting the secret key encryption file read from the debugger card;

An information processing apparatus, comprising: an authentication device that performs authentication with a debugger using a decrypted authentication file and the passcode before debugging.

6. The information processing device according to claim 5, wherein the first decryption device and the second decryption device can use different secret keys.

[7] The authentication device performs the passcode authentication and also authenticates the user. When both the program authentication and the user authentication are established, the debug permitting device turns on the debugger. 6. The information processing apparatus according to claim 5, wherein permission is given.

[8] A program file generation device that generates a program and a passcode to be supplied to the information processing device according to claim 1.

9. The program file generating device according to claim 8, wherein the program and the passcode are generated by encryption.

[10] The program file generation device according to claim 9, wherein the program and the passcode are combined and then encrypted.

11. The program file generating device according to claim 10, wherein the debugging device further generates an encrypted authentication file used when performing authentication with the information processing device.

12. The program according to claim 11, wherein an encryption key used to combine and encrypt the program and the passcode is different from an encryption key used to encrypt the authentication file. File generator.