Method for protecting a microcomputer system against manipulation of data stored in a storage arrangement of the microcomputer system

• US 7,207,066 B2
• Filed: 01/19/2001
• Issued: 04/17/2007
• Est. Priority Date: 01/19/2000
• Status: Expired due to Fees

• Current Assignee: Robert Bosch GmbH
• Original Assignee: Robert Bosch GmbH
• Inventors: Schneider, Klaus, Aue, Axel, Thomas, Martin
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): Baum; Ronald
• Application Number:
  US09/766,102
• Publication Number:
  US 20010025347A1
• Time in Patent Office: 2,279 Days
• Field of Search: 713193-201
• US Class Current: 726/26
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00

Abstract

A method for protecting a microcomputer system against manipulation of data stored in a storage arrangement of the microcomputer system, in particular for protecting a program stored in the storage arrangement. The microcomputer system includes a microcomputer assigned to the storage arrangement, the microcomputer accessing the storage arrangement for the purpose of processing the data, i.e., the program. In order to prevent the manipulation of data in a microcomputer that does not have an internal memory but rather accesses an external storage arrangement and processes the stored data, it is proposed that before the storage arrangement is accessed, an individual identifier be assigned to the or to each allocated microcomputer or to the storage arrangement that a comparison code be generated as a function of the individual identifier and be stored in the storage arrangement, and that, before or during the operation of the microcomputer system, a security code be generated as a function of the individual identifier and be compared with the comparison code.

Claims

1. A method for protecting a microcomputer system from manipulation of data stored in a storage arrangement of the microcomputer system, the microcomputer system including a microcomputer allocated to the storage arrangement, comprising the steps of:

causing the microcomputer to access the storage arrangement for processing the data; and

before the storage arrangement is accessed, performing the steps of;

assigning an individual identifier to one of the allocated microcomputer and the storage arrangement,

generating a comparison code and storing the comparison code in the storage arrangement as a function of the individual identifier, and

at a time that is one of before and during an operation of the microcomputer system, generating a security code as a function of the individual identifier and comparing the security code with the comparison code, wherein the allocated microcomputer accesses the storage arrangement only if the security code agrees with the comparison code, and wherein the allocated microcomputer is assigned only to the storage arrangement and the storage arrangement is assigned only to the allocated microcomputer so that the assigned, allocated microcomputer and the assigned storage arrangement can operate only with each other.

2. The method according to claim 1, wherein:

the data corresponds to a program.

3. The method according to claim 1, wherein:

a program stored in the storage arrangement is protected.

4. The method according to claim 1, wherein before the storage arrangement is accessed, the method further comprises the steps of:

storing the individual identifier as the comparison code in the storage arrangement; and

at the time that is one of before and during the operation of the microcomputer system, performing a check as to whether the comparison code agrees with the individual identifier, used as the security code, of the allocated microcomputer.

5. The method according to claim 1, wherein:

the storage arrangement normally cooperates with the allocated microcomputer only when the security code agrees with the comparison code.

6. The method according to claim 1, wherein:

before an operation of the storage arrangement, after every start-up of the storage arrangement, the security code is generated and is compared with the comparison code.

7. The method according to claim 6, further comprising the step of:

placing the storage arrangement in a mode in which, after every start-up, the storage arrangement is switched from an inactive state to an active state only when the security code agrees with the comparison code.

8. The method according to claim 6, further comprising the step of:

placing the allocated microcomputer in a mode in which, after every start-up, the allocated microcomputer is switched from an inactive to an active state only when the security code agrees with the comparison code.

9. The method according to claim 1, further comprising the steps of:

executing a validation program stored in a read-only memory of the allocated microcomputer;

determining a code word in the validation program from at least one part of a memory content of the storage arrangement in accordance with a key; and

comparing the code word with a comparison code word stored in the storage arrangement.

10. A storage arrangement in which data are stored and to which is allocated at least one microcomputer that accesses the storage arrangement for processing the data, comprising:

an arrangement for storing a comparison code that is generated as a function of an individual identifier assigned to one of the at least one microcomputer and the storage arrangement; and

an arrangement for, at a time that is one of before and during an operation of the storage arrangement, generating a security code as a function of the individual identifier and for comparing the security code with the comparison code, wherein the microcomputer accesses the storage arrangement only if the security code agrees with the comparison code, and wherein the microcomputer is assigned only to the storage arrangement and the storage arrangement is assigned only to the microcomputer so that the assigned microcomputer and the assigned storage arrangement can operate only with each other.

11. The storage arrangement according to claim 10, wherein:

the data correspond to a program.

12. The storage arrangement according to claim 10, wherein:

the storage arrangement is capable of being placed in a mode in which, after every start-up, the storage arrangement is switched from an inactive state to an active state only when the security code agrees with the comparison code.

13. The storage arrangement according to claim 10, wherein:

the storage arrangement corresponds to a flash memory.

14. A microcomputer system, comprising:

a microcomputer; and

a storage arrangement assigned to the microcomputer, wherein;

data are stored in the storage arrangement,

the microcomputer accesses the storage arrangement in order to process the data,

in the storage arrangement, a comparison code that is generated as a function of an individual identifier assigned to one of the microcomputer and to the storage arrangement is stored, and

the microcomputer includes an arrangement for, at a time that is one of before and during an operation of the microcomputer system, for generating a security code as a function of the individual identifier and to compare the security code with the comparison code, wherein the microcomputer accesses the storage arrangement only if the security code agrees with the comparison code, and wherein the microcomputer is assigned only to the storage arrangement and the storage arrangement is assigned only to the microcomputer so that the assigned microcomputer and the assigned storage arrangement can operate only with each other.

15. The microcomputer according to claim 14, wherein:

the data correspond to a program.

16. The microcomputer according to claim 14, wherein:

the microcomputer is capable of being placed in a mode in which, after every start-up, the microcomputer is switched from an inactive state to an active state only when the security code agrees with the comparison code.