Method for secure software resume from low power mode

摘要

Systems, methods, and other embodiments associated with a secure software resume from low power mode are described. According to one embodiment, a method includes receiving a request to enter a low power mode. In response to the request, the method includes storing a data section in LPDRM, performing a validation function on the data section to compute a validation value, and constructing a resume package that includes the validation value and a location of the data section in the LPDRM. The resume package is stored in the LPDRM for use in resuming operation after exiting low power mode.

主权项

1. A device, comprising:
secure flash memory configured to store data in a manner that can be validated by a secure boot ROM; a low power data retentive memory (LPDRM); a package logic configured to:
receive a request from the device to enter a low power mode;in response to the request to enter a low power mode,
store a data section in the secure flash memory;store the data section in the LDPRM;construct a resume package that includes i) a location of the data section in the LPDRM, ii) an image identifier for an image to be loaded from the secure flash memory in a subsequent boot operation, and iii) a validation value that results from performing a validation function on the data section, andstore the resume package in the LPDRM for use by the device in resuming operation when exiting the low power mode; and a resume logic configured to, in response to a boot signal from a device operating in low power mode:
access the resume package;perform the validation function on the data section stored in the LPDRM to compute a resulting validation value;compare the resulting validation value with the validation value in the resume package;
when the resulting validation value agrees with the validation value in the resume package:
identify, in the resume package, the image identifier;load the image from the secure flash memory; andtransfer control of the device to an operating system without loading an image corresponding to the data section to the LPDRM.