Hardware security unit

Abstract

The invention relates to a hardware safety unit which at least comprises a first multivalued logic calculating element, a second multivalued logic calculating element, an operation element, a judging element and an implementing element. The first and second multivalued logic calculating elements are respectively connected with the operation element. Each multivalued logic calculating element comprises at least three registers. The operation element calls multivalued logic operators in a third register of the second multivalued logic calculating element, respectively calculates an expected logic state and a current logic state of the second multivalued logic calculating element and the first multivalued logic calculating element according to the multivalued logic operators, and obtains an expected logic operation result and a current logic operation result; the judging element judges if the current logic operation result achieves the expected logic operation result; the implementing element implements the corresponding operation according to the judged result which is judged by the judging element. The invention provides a hardware safety system and solves the problem in the process of adopting two-valued logic judgement to serve for the whole trust chain.

Description

technical field [0001] The invention relates to a hardware security system, especially a hardware security unit. Background technique [0002] In the existing TCG (Trusted Computing Group, Trusted Computing Group) and national standard security chip specifications, it is defined that security chips, that is, hardware security units, must serve the entire trust chain based on binary logic (true, false) judgments. [0003] Under the 2-value logic, the security chip mainly provides three functions: [0004] 1. Platform measurement, which provides comparison of measurement results, and restricts the use of entities in the chip, such as keys, when the measurement result is True. [0005] 2. Key management, according to the platform measurement results and authorization results are both True, the generation, loading, use, and destruction of keys are performed. [0006] 3. Cryptography service, when the platform measurement result and authorization result are both True, cryptolog...

AI Technical Summary

Problems solved by technology

[0012] The purpose of the present invention is to provide a hardware security unit to solve the problem of using binary logic judgment to serve the entire chain of trust in the prior art

Images