Secure processor and a program for a secure processor

摘要

The instruction code including an instruction code stored in the area where the encrypted instruction code is stored in a non-rewritable format is authenticated using a specific key which is specific to the core where the instruction code is executed or an authenticated key by a specific key to perform an encryption processing for the input and output data between the core and the outside.

主权项

1. A secure processor, comprising
an instruction execution circuit configured to execute an execution code of a process in a memory; a secure process identifier generation circuit configured to generate a secure process identifier when an instruction to generate the process is issued; a process information retention circuit configured to retain the secure process identifier and an authentication key for authentication of the execution code while the process is still present as information related to the process; a translation look aside buffer including a page table entry of a page storing the execution code, the secure process identifier read from the process information retention circuit being set up in the page table entry when paging-in the execution code into the memory; an authentication circuit configured to set a secure page flag in the page table entry when the execution code corresponding to the process is successfully authenticated using the authentication key, after the execution code corresponding to the process is stored in an unused page in the memory and the secure process identifier corresponding to an address of the unused page is stored in the page table entry; and a memory access control circuit configured to compare the secure process identifier stored in the page table entry, in which the corresponding secure page flag is set, with the secure process identifier which is retained in the process information retention circuit, and to permit the instruction execution circuit to access the page in the memory where the execution code is stored and execute the execution code when the secure process identifier retained by the process information retention circuit matches the secure process identifier stored in the page table entry.