SECURITY AND SAFETY MANAGER IMPLEMENTATION IN A MULTI-CORE PROCESSOR

• US 20130117803A1
• Filed: 11/04/2011
• Published: 05/09/2013
• Est. Priority Date: 11/04/2011
• Status: Active Grant

• Current Assignee: Honeywell International Inc.
• Original Assignee: Honeywell International Inc.
• Inventors: Markham, Thomas R., Staggs, Kevin
• Granted Patent: US 8,572,404 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information

Abstract

A system includes a multi-core computer processor. One or more cores of the multi-core computer processor are configured as a security co-processor for the system and for other cores of the multi-core processor, and one or more cores of the multi-core computer processor are configured as a safety manager co-processor for the system and for other cores of the multi-core processor. An operating system of the security co-processor and an operating system of the safety manager co-processor are independent of operating systems of the other cores of the multi-core processor. The security co-processor and the safety manager co-processor are configured to boot before the other cores and to enforce security policy and/or safety policy on the other cores.

Claims

1. A system comprising:

a multi-core computer processor;

wherein one or more cores of the multi-core computer processor are configured as a security co-processor for the system and for other cores of the multi-core processor;

wherein an operating system of the security co-processor is independent of operating systems of the other cores of the multi-core processor; and

wherein the security co-processor is configured to boot before the other cores and to enforce security policy on the other cores.

2. The system of claim 1, wherein the security co-processor comprises a single core.

3. The system of claim 1, wherein the security co-processor comprises a distributed firewall.

4. The system of claim 1, wherein the security co-processor is configured to control access control hardware including a memory management unit.

5. The system of claim 1, wherein the security co-processor is configured to enforce one or more privilege levels including an untrusted level, a user level, a supervisor level, and a maintenance level;

wherein the untrusted level comprises processing downloaded software code from a party other than an administrator of the system;

wherein the user level comprises processing software code and data from a source approved by the administrator of the system;

wherein the supervisor level comprises dynamic management of the system including changing operating system settings and changing hardware settings; and

wherein the maintenance level comprises changes that affect the security of the system including processing kernel updates, updating keys for authentication, and privileged operations.

6. The system of claim 5, wherein the untrusted level comprises a limited access to random access memory and no write access to certain files.

7. The system of claim 1, wherein the system comprises one of more of a control system for an industrial process, a supervisory control and data acquisition process (SCADA), a system for a building control process, and a control system for an aircraft.

8. The system of claim 1, wherein the security co-processor is configured to handle device input and device output in the system.

13. The system of claim 1, wherein the safety manager co-processor is configured to handle device input and device output in the system.

9. A system comprising:

a multi-core computer processor;

wherein one or more cores of the multi-core computer processor are configured as a safety manager co-processor for the system and for other cores of the multi-core processor;

wherein an operating system of the safety manager co-processor is independent of operating systems of the other cores of the multi-core processor; and

wherein the safety manager co-processor is configured to boot before the other cores and to enforce safety policy on the other cores.

10. The system of claim 9, wherein the safety manager co-processor comprises a single core.

11. The system of claim 9, wherein the safety manager co-processor is configured to control access control hardware including a memory management unit.

12. The system of claim 9, wherein the system comprises one or more of a control system for an industrial process, a supervisory control and data acquisition process (SCADA), a system for a building control process, and a control system for an aircraft.

14. A system comprising:

a multi-core computer processor;

wherein one or more cores of the multi-core computer processor are configured as a security co-processor for the system and for other cores of the multi-core processor;

wherein one or more cores of the multi-core computer processor are configured as a safety manager co-processor for the system and for other cores of the multi-core processor;

wherein one or more of an operating system of the security co-processor and an operating system of the safety manager co-processor are independent of operating systems of the other cores of the multi-core processor; and

wherein one or more of the security co-processor and the safety manager co-processor are configured to boot before the other cores and to enforce one or more of security policy and safety policy on the other cores.

15. The system of claim 14, wherein the security co-processor and the safety manager co-processor comprise a single core.

16. The system of claim 14, wherein the security co-processor comprises a distributed firewall.

17. The system of claim 14, wherein one or more of the security co-processor and the safety manager co-processor are configured to control access control hardware including a memory management unit.

18. The system of claim 14, wherein the security co-processor is configured to enforce one or more privilege levels including an untrusted level, a user level, a supervisor level, and a maintenance level;

wherein the untrusted level comprises processing downloaded software code from a party other than an administrator of the system, and wherein the untrusted level comprises a limited access to random access memory and no write access to certain files;

wherein the user level comprises processing software code and data from a source approved by the administrator of the system;

wherein the supervisor level comprises dynamic management of the system including changing operating system settings and changing hardware settings; and

wherein the maintenance level comprises changes that affect the security of the system including processing kernel updates, updating keys for authentication, and privileged operations.

19. The system of claim 14, wherein the system comprises one or more of a control system for an industrial process, a supervisory control and data acquisition process (SCADA), a system for a building control process, and a control system for an aircraft.

20. The system of claim 14, wherein one or more of the security co-processor and the safety manager co-processor are configured to handle device input and device output in the system.