SYSTEM AND METHOD FOR IMPROVED SECURITY FOR A PROCESSOR IN A PORTABLE COMPUTING DEVICE (PCD)

• US 20160063281A1
• Filed: 08/28/2014
• Published: 03/03/2016
• Est. Priority Date: 08/28/2014
• Status: Active Grant

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: KAHANA, YONI, LUNDBLADE, LAURENCE GEOFFREY
• Granted Patent: US 10,019,602 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 21/76 in application-specific integrated circuits [ASIC] or field-programmable devices, e.g. field-programmable gate arrays [FPGA] or programmable logic devices [PLD]
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data

Abstract

Systems and methods for improved security for a core in a portable computing device (PCD), such as a core operating a high level operating system (HLOS) are presented. In operation, a monitor module on the SoC is initialized. The monitor module sends a request to the core of the SoC and the monitor module receives a response from the core. A timer in communication with the monitor module is checked. The timer is reset or disabled by the monitor module if the response from the core is received at the monitor module before the expiration of the timer. Otherwise, the monitor module applies at least one security measure to the core as a result of the timer expiring.

Claims

1. A method for improved security for a core on a system-on-a-chip (SoC) in a portable computing device (PCD), the method comprising:

initializing a monitor module on the SoC;

sending a request from the monitor module of the SoC to the core of the SoC;

receiving at the monitor module a response from the core;

checking a timer in communication with the monitor module; and

resetting the timer with the monitor module if the response from the core is received at the monitor module before the expiration of the timer, or

applying with the monitor module at least one security measure to the core as a result of the timer expiring.

2. The method of claim 1, wherein the at least one security measure further comprises:

reinitializing the SoC as a result of the timer expiring.

3. The method of claim 1, wherein the at least one security measure further comprises one or more of:

preventing the core from accessing a set of data stored on the PCD,

preventing the core from accessing one or more of a plurality of components on the SoC, and

causing a warning to appear on a display of the PCD.

4. The method of claim 1, wherein applying with the monitor module at least one security measure to the core as a result of the timer expiring further comprises:

applying with the monitor module at least one security measure according to a security level state.

5. The method of claim 1, wherein applying with the monitor module at least one security measure to the core as a result of the timer expiring further comprises:

applying with the monitor module at least one security measure according to a number of times the timer has expired.

6. The method of claim 1, wherein:

the core comprises a processor located on the SoC operating a high-level operating system (HLOS).

7. The method of claim 1, wherein receiving at the monitor module a response from the core further comprises:

receiving at the monitor module information about a status for the core; and

determining at the monitor module whether the status for the core has changed since an initialization of the core.

8. The method of claim 1, wherein receiving at the monitor module a response from the core further comprises further comprises:

receiving at the monitor module a communication sent from a computer device physically remote from the PCD.

9. A computer system for improved security for a core in a portable computing device (PCD), the system comprising:

a core on a system-on-a-chip (SoC);

a monitor module on the SoC in communication with the core; and

a timer in communication with the monitor module,

wherein the monitor module is configured to;

send a request to the core;

receive a response from the core; and

reset the timer if the response is received by the monitor module before the expiration of the timer, or

apply at least one security measure to the core as a result of the timer expiring.

10. The system of claim 9, wherein the security measure comprises:

reinitializing the SoC and the monitor module as a result of the timer expiring.

11. The system of claim 9, wherein the security measure comprises at least one of:

preventing the core from accessing a set of data stored on the PCD,

preventing the core from accessing one or more of a plurality of components on the SoC, and

causing a warning to appear on a display of the PCD.

12. The system of claim 9, wherein the monitor module is further configured to:

apply a security measure to the core according to a security level state.

13. The system of claim 9, wherein the monitor module is further configured to:

apply at least one of a plurality of security measures to the core according to a number of times the timer has expired.

14. The system of claim 9, wherein:

the core comprises a processor located on the SoC operating a high-level operating system (HLOS); and

the monitor module comprises a virtual portion of the processor.

15. The system of claim 9, wherein receive a response from the core further comprises:

receive at the monitor module information about a status for the core; and

determine at the monitor module whether the status for the core has changed since an initialization of the core.

16. The system of claim 9, wherein receive a response from the core further comprises:

receive at the monitor module a communication from a computer device physically remote from the PCD.

17. A computer program product comprising a non-transitory computer usable medium having a computer readable program code embodied therein, said computer readable program code adapted to be executed to implement a method for improved security for a core in a portable computing device (PCD), the method comprising:

initializing a monitor module on the SoC;

sending a request from the monitor module of the SoC to the core of the SoC;

receiving at the monitor module a response from the core;

checking a timer in communication with the monitor module; and

resetting the timer with the monitor module if the response is received at the monitor module before the expiration of the timer, or

applying with the monitor module at least one security measure to the core as a result of the timer expiring.

18. The computer program product of claim 17, wherein the at least one security measure further comprises one or more of:

reinitializing the SoC and the monitor module as a result of the timer expiring,

preventing the core from accessing a set of data stored on the PCD,

preventing the core from accessing one or more of a plurality of components on the SoC, and

causing a warning to appear on a display of the PCD.

19. The computer program product of claim 17, wherein applying with the monitor module at least one security measure to the core as a result of the timer expiring further comprises:

applying at least one security measure according to a security level state.

20. The computer program product of claim 17, wherein applying a with the monitor module at least one security measure to the core as a result of the timer expiring further comprises:

applying at least one security measure according to a number of times the timer has expired.

21. The computer program product of claim 17, wherein:

the core comprises a processor located on the SoC operating a high-level operating system (HLOS).

22. The computer program product of claim 17, wherein receiving at the monitor module a response from the core further comprises:

receiving at the monitor module information about a status for the core; and

determining at the monitor module whether the status for the core has changed since an initialization of the core.

23. The computer program product of claim 17, wherein receiving at the monitor module a response from the core further comprises:

receiving at the monitor module a communication sent from a computer device physically remote from the PCD.

24. A computer system for improved security for core in a portable computing device (PCD), the system comprising:

means for initializing a monitor module on the SoC;

means for sending a request from the monitor module of the SoC to the core of the SoC;

means for receiving at the monitor module a response from the core;

means for checking a timer in communication with the monitor module; and

means for resetting the timer if the response is received at the monitor module before the expiration of the timer, or

means for applying at least one security measure to the core as a result of the timer expiring.

25. The system of claim 24, wherein the at least one security measure further comprises one or more of:

reinitializing the SoC and the monitor module as a result of the timer expiring,

preventing the core from accessing a set of data stored on the PCD,

preventing the core from accessing one or more of a plurality of components on the SoC, and

causing a warning to appear on a display of the PCD.

26. The system of claim 24, wherein the means for applying at least one security measure to the core as a result of the timer expiring further comprises:

means for applying at least one security measure according to a security level state.

27. The system of claim 24, wherein the means for applying at least one security measure to the core as a result of the timer expiring further comprises:

means for applying at least one security measure according to a number of times the timer has expired.

28. The system of claim 24, wherein:

the core comprises a processor located on the SoC operating a high-level operating system (HLOS).

29. The system of claim 24, wherein the means for receiving at the monitor module a response from the core further comprises:

means for receiving at the monitor module information about a status for the core; and

means for determining at the monitor module whether the status for the core has changed since an initialization of the core.

30. The system of claim 24, wherein the means for means for receiving at the monitor module a response from the core further comprises:

means for receiving at the monitor module a communication sent from a computer device physically remote from the PCD.