发明名称 Protecting secure software in a multi-security-CPU system
摘要 A computing system includes a first central processing unit (CPU) and a second CPU coupled with the first CPU and with a host processor. In response to a request by the host processor to boot the second CPU, the first CPU is configured to execute secure booting of the second CPU by decrypting encrypted code to generate decrypted code executable by the second CPU but that is inaccessible by the host processor.
申请公布号 US9183402(B2) 申请公布日期 2015.11.10
申请号 US201213707023 申请日期 2012.12.06
申请人 Broadcom Corporation 发明人 Rodgers Stephane;Shekhar Shashank
分类号 G06F9/00;G06F15/177;G06F21/60;G06F21/57 主分类号 G06F9/00
代理机构 Brinks Gilson & Lione 代理人 Brinks Gilson & Lione
主权项 1. A computing system, comprising: a first central processing unit (CPU); a second CPU in communication with the first CPU and with a host processor; a memory; an instruction checker circuitry, where, in response to a request by the host processor to boot the second CPU, the second CPU is configured to execute a two-stage secure booting, where the second CPU is configured to: execute first stage code to request, from the first CPU, decryption information to decrypt a second stage code of the two-stage secure booting;decrypt the second stage code stored in a first region of the memory;write the decrypted second stage code to a second region of the memory; and execute the second stage code of the two-stage secure booting, and where, the instruction checker circuitry is configured to monitor execution of the second stage code by the second CPU, and in response to detection of an attempt to execute an instruction located outside of the second region of the memory, prevent execution of the instruction by the second CPU.
地址 Irvine CA US