Method and apparatus for embedded memory security

• US 8,250,452 B2
• Filed: 09/20/2007
• Issued: 08/21/2012
• Est. Priority Date: 08/20/2007
• Status: Active Grant

• Current Assignee: Infineon Technologies AG
• Original Assignee: Infineon Technologies AG
• Inventors: von Wendorff, Wilhard
• Primary Examiner(s): BAKER, STEPHEN M
• Application Number:
  US11/858,394
• Publication Number:
  US 20090055602A1
• Time in Patent Office: 1,797 Days
• Field of Search: 714/805, 714/811, 711/164
• US Class Current: 714/805
• CPC Class Codes: G06F 12/1458 by checking the subject access rights

Abstract

A method and apparatus for embedded memory security is disclosed. One embodiment protects data in a memory block from unauthorized reading. When writing or reading data to or from the memory block an error correction code is used to calculate an ECC value, wherein the calculation of the ECC value is based on a combination of the data and a access identifier provided to the memory block prior to reading. The access identifier identifies the requesting program. A read error is signalled in case the calculated ECC value does not match a stored value thus indicating an access violation.

Claims

1. A digital processing method including controlling access to data stored in a memory block comprised in a digital processing system, comprising:

providing an access identifier to the memory block prior to a read data request, wherein the access identifier identifies the requesting program;

calculating an error correction code (ECC) based on a combination of data read from the memory and the access identifier; and

comparing the calculated ECC value to an ECC value associated with the requested data stored in the memory block.

2. The method of claim 1, wherein the combination of the data read from memory and the access identifier is a concatenation or a binary OR operation or a binary AND operation or a binary XOR operation or a combination of these operations.

3. The method of claim 1, wherein an ECC logic modifies the data in case of mismatch between a calculated and a stored ECC value.

4. The method of claim 1, wherein the digital processing system is comprised in an engine management system.

5. The method of claim 1, comprising:

splitting the access identifier into at least two portions; and

combining the portions in the memory block.

6. The method of claim 5, wherein one portion of the access identifier identifies the device in the digital processing system requesting the read data request.

7. The method of claim 5, comprising providing the device requesting the read data request the access identifier to the memory block.

8. The method of claim 7, comprising providing the requesting device the access identifier to the memory bypassing a regular address decoding logic in the memory.

9. A method for digital processing including writing data to memory in a digital processing system, comprising:

providing an access identifier identifying a requesting program prior to a write data request;

calculating a first error correction code (ECC) value based on a combination of data provided to the memory and the access identifier;

storing the calculated first ECC value in the memory; and

comparing the stored first ECC value to a second ECC value calculated when again accessing the data.

10. The method of claim 9, wherein the digital processing system is comprised in an engine management system.

11. The method of claim 9, comprising:

splitting the access identifier into at least two portions; and

combining the portions in the memory block.

12. The method of claim 11, wherein the combination of the data read from memory and the access identifier is a concatenation or a binary OR operation or a binary AND operation or a binary XOR operation or a combination of these operations.

13. The method of claim 11, wherein one portion of the access identifier identifies the device in the digital processing system requesting the write data request.

14. The method of claim 13, comprising providing the device issuing the write data request the access identifier to the memory block.

15. The method of claim 14, comprising providing the issuing device the access identifier to the memory bypassing a regular address decoding logic in the memory.

16. A digital processing system comprising:

at least one device requesting from a memory block, via a communication means;

write data or read data requests;

wherein the device is adapted to provide an access identifier to the memory block; and

wherein the memory block comprises an error correction code (ECC) logic, and wherein the ECC logic is adapted to calculate an ECC value based on a combination of the data and the access identifier and compare the calculated ECC value to an ECC value associated with the requested data stored in the memory block.

17. The system of claim 16, wherein the ECC logic is adapted to directly read and write the access identifier to a storage unit bypassing an address logic.

18. The system of claim 16, wherein the device requesting the read or write operation comprises a means for storing the access identifier.

19. The system of claim 18, wherein the means for storing the access identifier is a core register in a central processing unit comprised in the system.

20. The system of claim 16, wherein the device requesting the read or write operation is adapted to provide an identifier identifying the device as a first portion of the access identifier to the memory block and at least a second portion of the access identifier.

21. The system of claim 20, wherein the memory block is adapted to merge the at least two access identifier portions into one access identifier.

22. The system of claim 21, wherein the merge operation is one of a concatenation or a binary AND or a binary OR or a binary XOR operation or a combination of these operations.