Security enclave processor power control

摘要

An SOC implements a security enclave processor (SEP). The SEP may include a processor and one or more security peripherals. The SEP may be isolated from the rest of the SOC (e.g. one or more central processing units (CPUs) in the SOC, or application processors (APs) in the SOC). Access to the SEP may be strictly controlled by hardware. For example, a mechanism in which the CPUs/APs can only access a mailbox location in the SEP is described. The CPU/AP may write a message to the mailbox, which the SEP may read and respond to. The SEP may include one or more of the following in some embodiments: secure key management using wrapping keys, SEP control of boot and/or power management, and separate trust zones in memory.

主权项

1. An integrated circuit comprising:
one or more components; a power manager coupled to the one or more components and configured to power manage the one or more components; a security circuit including a local power controller, wherein the local power controller is configured to communicate with the power manager to request power managing of the security circuit, and wherein the power manager is prevented from power managing the security circuit absent the request from the local power controller.