Secure processing unit systems and methods

• US 7,124,170 B1
• Filed: 08/21/2000
• Issued: 10/17/2006
• Est. Priority Date: 08/20/1999
• Status: Expired due to Term

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Sibert, W. Olin
• Primary Examiner(s): Wiley, David
• Assistant Examiner(s): SHIN, KYUNG H
• Application Number:
  US09/643,630
• Time in Patent Office: 2,248 Days
• Field of Search: 713/164, 713/189, 713/194, 713/193, 380/255, 380/225, 711/103, 711/206, 711/153, 711/1, 709/216
• US Class Current: 709/216
• CPC Class Codes: G06F 12/145 the protection being virtual, e.g. for virtual blocks or segments before a translation mechanism
• CPC Class Codes: G06F 12/1491 in a hierarchical protection system, e.g. privilege levels, memory rings
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2212/1044 Space efficiency improvement
• CPC Class Codes: G06Q 50/188 Electronic negotiation
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A hardware Secure Processing Unit (SPU) is described that can perform both security functions and other information appliance functions using the same set of hardware resources. Because the additional hardware required to support security functions is a relatively small fraction of the overall device hardware, this type of SPU can be competitive with ordinary non-secure CPUs or microcontrollers that perform the same functions. A set of minimal initialization and management hardware and software is added to, e.g., a standard CPU/microcontroller. The additional hardware and/or software creates an SPU environment and performs the functions needed to virtualize the SPU'"'"'s hardware resources so that they can be shared between security functions and other functions performed by the same CPU.

Claims

1. A secure processing unit comprising:

an internal memory unit;

a processor;

tamper detection and response logic;

an interface to external systems or components;

one or more buses for connecting the internal memory unit, the processor, the tamper detection and response logic, and the interface to external systems and components;

a memory management unit;

a level-one page table, the level-one page table including a plurality of level-one page table entries, wherein the level-one page table entries each correspond to at least one level-two page table, and wherein the level-one page table entries each contain a predefined attribute, the predefined attribute being operable to indicate to the memory management unit whether entries in a corresponding level-two page table may designate certain predefined memory regions;

a plurality of processor security registers;

access control data, the access control data being operable to indicate whether access to predefined memory regions is restricted to certain software components or processor modes, wherein the access control data are stored in a critical address register, the critical address register comprising one of the processor security registers; and

a tamper-resistant housing.

2. A secure processing unit as in claim 1, in which the internal memory unit includes:

secure random access memory;

secure non-volatile memory;

secure read-only memory.

3. A secure processing unit as in claim 2, in which the secure non-volatile memory is powered by a battery.

4. A secure processing unit as in claim 3, in which the secure non-volatile memory contains at least one cryptographic key.

5. A secure processing unit as in claim 1, in which the internal memory unit includes a unique identifier for the secure processing unit, a private cryptographic key, a public cryptographic key, and a cryptographic certificate linking the unique identifier and the public cryptographic key.

6. A secure processing unit as in claim 1,

whereby level-two page tables that designate the predefined memory regions are stored in the internal memory unit.

7. An information appliance comprising:

a memory unit;

a secure processing unit comprising;

a tamper resistant packaging,

tamper detection and response logic,

a secure memory unit,

a processing unit, including a memory management unit and a plurality of processor security registers; and

access control data, the access control data being operable to indicate whether access to predefined memory regions is restricted to certain software components or processor modes, wherein the access control data are stored in a critical address register, the critical address register comprising one of the processor security registers;

a level-one page table and a plurality of level-two page tables, the level-one page table including a plurality of level-one page table entries and the level-two page table including a plurality of level-two page table entries, wherein the level-one page table entries each correspond to at least one level-two page table, and wherein the level-one page table entries each contain a predefined attribute, the predefined attribute being operable to indicate to the memory management unit whether a corresponding level-two page table may designate certain predefined memory regions; and

a bus for connecting the memory unit and the secure processing unit;

wherein the secure processing unit is operable to perform both secure processing operations and at least some processing operations performed by a conventional information appliance processing unit.

8. An information appliance as in claim 7, in which the information appliance is selected from the group comprising:

a television set-top box, a portable audio player, a portable video player, a cellular telephone, a personal computer, and a workstation.

9. An information appliance as in claim 7, in which the secure processing unit is the information appliance'"'"'s primary processing unit.

10. An information appliance as in claim 7, in which the secure processing unit is the information appliance'"'"'s only processing unit.

11. An information appliance as in claim 7, in which level-two page tables that may not designate the predefined memory regions are stored in the memory unit, and wherein the level-one page table and the level-two page tables that may designate the predefined memory regions are stored in the secure memory unit.