SECURITY PROTECTION OF SOFTWARE LIBRARIES IN A DATA PROCESSING APPARATUS

摘要

A processing apparatus 2 has a secure domain 90 and a less secure domain 80. Security protection hardware 40 performs security checking operations when the processing circuitry 2 calls between domains. A data store 6 stores several software libraries 100 and library management software 110. The library management software 110 selects at least one of the libraries 100 as an active library which is executable by the processing circuitry 4 and at least one other library 100 as inactive libraries which are not executable. In response to an access to an inactive library, the library management software 110 switches which library is active.

主权项

1. A data processing apparatus comprising:
processing circuitry for performing data processing in response to instructions, the processing circuitry having a plurality of domains of operation including a secure domain and a less secure domain, wherein at least some data accessible to the instructions when operating in the secure domain is inaccessible when operating in the less secure domain; security protection hardware configured to perform a first security protection operation in response to the processing circuitry calling between the less secure domain and the secure domain; and a data store configured to store a plurality of software libraries and library management software for execution by the processing circuitry; wherein: the library management software is configured to control the processing circuitry to set at least one of the plurality of software libraries as an active software library which is executable by the processing circuitry, and to set at least one other software library as an inactive software library which is not executable by the processing circuitry; and in response to the processing circuitry calling a target inactive software library, the library management software is configured to perform active library switching to control the processing circuitry to set the target inactive software library as an active software library and to set a previously active software library as an inactive software library.