Method of controlling access to model specific registers of a microprocessor

• US 7,043,616 B1
• Filed: 04/18/2003
• Issued: 05/09/2006
• Est. Priority Date: 04/18/2002
• Status: Active Grant

• Current Assignee: Advanced Silicon Technologies LLC
• Original Assignee: Advanced Micro Devices, Inc.
• Inventors: McGrath, Kevin J.
• Primary Examiner(s): Padmanabhan, Mano
• Assistant Examiner(s): Doan, Duc T
• Application Number:
  US10/419,084
• Time in Patent Office: 1,117 Days
• Field of Search: 711/163, 713/200
• US Class Current: 711/163
• CPC Class Codes: G06F 12/1425 the protection being physical, e.g. cell, word, block
• CPC Class Codes: G06F 12/1491 in a hierarchical protection system, e.g. privilege levels, memory rings
• CPC Class Codes: G06F 21/74 operating in dual or compartmented mode, i.e. at least one secure mode
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 9/30101 Special purpose registers
• CPC Class Codes: G06F 9/30181 Instruction operation extension or modification
• CPC Class Codes: G06F 9/30189 according to execution mode, e.g. mode flag

Abstract

A method of controlling access to a model specific register of a microprocessor. A method of controlling access to a model specific register of a processor having a normal execution mode and a secure execution mode may include storing processor state and mode information in the model specific register. Further, the method may include protection logic allowing a software invoked write access to modify the information within the model specific register during the normal execution mode. The method may further include security logic selectively inhibiting the software invoked write access during the secure execution mode.

Claims

1. A method of controlling accesses to a model specific register of a processor having a normal execution mode and a secure execution mode, said method comprising:

storing processor information in said model specific register;

protection logic allowing a software invoked write access to modify said information within said model specific register during said normal execution mode;

security logic selectively inhibiting said software invoked write access during said secure execution mode; and

creating a bit map including a plurality of bits each corresponding to a different model specific register, wherein each bit is indicative of whether said corresponding model specific register is protected in a normal kernel mode.

2. The method as recited in claim 1 further comprising allowing said software invoked write access to modify said information within said model specific register in response to said processor operating in a secure kernel mode.

3. The method as recited in claim 2, wherein said secure kernel mode includes:

a current privilege level state being equal to zero within a code segment descriptor corresponding to a currently executing code sequence during said secure execution mode; and

said processor entering a trusted execution mode.

4. The method as recited in claim 1 further comprising generating a general protection fault exception in response to said software invoked write access and said processor operating in a normal user mode during said secure execution mode.

5. The method as recited in claim 4, wherein said normal user mode includes a current privilege level state being equal to three within a code segment descriptor corresponding to a currently executing code sequence during said secure execution mode.

6. The method as recited in claim 1 further comprising accessing said bit map to determine whether a given model specific register specified in said software invoked write access is protected in said normal kernel mode.

7. The method as recited in claim 6 further comprising storing a base address of said bit map in a base address model specific register.

8. The method as recited in claim 6 further comprising allowing said software invoked write access to proceed in response to determining that said given model specific register specified in said software invoked write access is not protected in said normal kernel mode.

9. The method as recited in claim 8 further comprising inhibiting said software invoked write access from proceeding and generating a security exception in response to determining that said given model specific register specified in said software invoked write access is protected in said normal kernel mode.

10. The method as recited in claim 9, wherein said normal kernel mode includes a current privilege level state being equal to zero within a code segment descriptor corresponding to a currently executing code sequence during said secure execution mode.

11. A processor having a normal execution mode and a secure execution mode, said processor comprising:

execution logic configured to execute code;

a model specific register coupled to said execution logic and configured to store processor information;

protection logic coupled to said model specific register and configured to allow a software invoked write access to modify said information within said model specific register during said normal execution mode;

wherein said protection logic includes security logic configured to selectively inhibit said software invoked write access during said secure execution mode; and

wherein said security logic is further configured to access a bit map including a plurality of bits each corresponding to a different model specific register, wherein each bit is indicative of whether said corresponding model specific register is protected in a normal kernel mode.

12. The processor as recited in claim 11, wherein said security logic is further configured to allow said software invoked write access to modify said information in said model specific register in response to said processor operating in a secure kernel mode.

13. The processor as recited in claim 12, wherein said secure kernel mode includes:

a current privilege level state being equal to zero within a code segment descriptor corresponding to a currently executing code sequence during said secure execution mode; and

said processor entering a trusted execution mode.

14. The processor as recited in claim 11, wherein said security logic is further configured to generate a general protection fault exception in response to said software invoked write access and said processor operating in a normal user mode during said secure execution mode.

15. The processor as recited in claim 14, wherein said normal user mode includes a current privilege level state being equal to three within a code segment descriptor corresponding to a currently executing code sequence during said secure execution mode.

16. The processor as recited in claim 11, wherein said security logic is further configured to determine whether a given model specific register specified in said software invoked write access is protected in said normal kernel mode.

17. The processor as recited in claim 16, wherein said security logic is further configured to allow said software invoked write access to proceed in response to determining that said given model specific register specified in said software invoked write access is not protected in said normal kernel mode.

18. The processor as recited in claim 17, wherein said security logic is further configured to inhibit said software invoked write access from proceeding and to generate a security exception in response to verifying that said given model specific register is protected in said normal kernel mode.

19. The processor as recited in claim 18, wherein said normal kernel mode includes a current privilege level state being equal to zero within a code segment descriptor corresponding to a currently executing code sequence during said secure execution mode.

20. A computer system comprising:

a processor having a normal execution mode and a secure execution mode;

a memory coupled to said processor and configured to store instructions and data;

wherein said processor includes;

execution logic configured to execute code;

a model specific register coupled to said execution logic and configured to store processor information;

protection logic coupled to said model specific register and configured to allow a software invoked write access to modify said information within said model specific register during said normal execution mode;

wherein said protection logic includes security logic configured to selectively inhibit said software invoked write access during said secure execution mode; and

wherein said security logic is further configured to access a bit map including a plurality of bits each corresponding to a different model specific register, wherein each bit is indicative of whether said corresponding model specific register is protected in a normal kernel mode.

21. The computer system as recited in claim 20, wherein said security logic is further configured to allow said software invoked write access to modify said information in said model specific register in response to said processor operating in a secure kernel mode.

22. The computer system as recited in claim 21, wherein said secure kernel mode includes:

a current privilege level state being equal to zero within a code segment descriptor corresponding to a currently executing code sequence during said secure execution mode; and

said processor entering a trusted execution mode.

23. The computer system as recited in claim 20, wherein said security logic is further configured to generate a general protection fault exception in response to said software invoked write access and said processor operating in a normal user mode during said secure execution mode.

24. The computer system as recited in claim 23, wherein said normal user mode includes a current privilege level state being equal to three within a code segment descriptor corresponding to a currently executing code sequence during said secure execution mode.

25. The computer system as recited in claim 20, wherein said security logic is further configured to determine whether a given model specific register specified in said software invoked write access is protected in said normal kernel mode.

26. The computer system as recited in claim 25, wherein said security logic is further configured to allow said software invoked write access to proceed in response to determining that said given model specific register specified in said software invoked write access is not protected in said normal kernel mode.

27. The computer system as recited in claim 26, wherein said security logic is further configured to inhibit said software invoked write access from proceeding and to generate a security exception in response to verifying that said given model specific register is protected in said normal kernel mode.

28. The computer system as recited in claim 27, wherein said normal kernel mode includes a current privilege level state being equal to zero within a code segment descriptor corresponding to a currently executing code sequence during said secure execution mode.