| 摘要 |
A system and a method for secure loading data in a cache memory associated to at least one secure processor performing data processing by using at least one untrusted external memory storing data to be processed, at least one secure internal cache memory to load or store data, and at least one secure cache translator operating as a memory management unit. The secure cache translator is configured by a secure cache digest table stored in the secure internal cache memory, the method comprises steps of:
a) during an initialization phase on request of the secure processor, storing, by the secure cache translator, into the secure cache digest table parameters, related to current processes each comprising a plurality of persistent and variable data pages, the parameters comprising at least a process identifier, and a root digest based on node digests calculated on at least one persistent data page according to a Merkle tree structure,
b) during transferring data pages from the secure internal cache memory to the external memory, verifying integrity of data pages, by the secure cache translator, by comparing a calculated root digest of persistent pages stored in the external memory with a corresponding root digest stored in the secure cache digest table and if the comparison is successful, calculating a new root digest with node digests of variable pages combined with node digests of persistent pages and to store the obtained new root digest into the secure cache digest table and into the external memory,
c) during transferring data pages from the external memory to the secure internal cache memory, verifying integrity of data pages by comparing a calculated root digest of at least one page to transfer with a corresponding digest stored in the secure cache digest table and if the comparison is successful, using the page by the secure processor. |
