Chip security protection method and system

Abstract

The invention discloses a chip safety protection method. The method includes the following steps: configuring a security state machine in the chip operating system, and the security state machine realizes the transition of the security state of the chip under the drive of the chip instruction; Different file access constraints; when reading a protected file, check whether the status word in the security state machine satisfies the access constraints of the file, if the condition is met, the file is read, otherwise the file cannot be read . The chip security protection method can realize fine management of chip security protection, simplify security design, and improve chip execution efficiency.

Description

technical field [0001] The invention relates to the field of chip security protection, in particular to a chip security protection method and system. Background technique [0002] With the rapid development of microelectronics technology, various electronic devices have sprung up like mushrooms after rain. In order to protect the security of user information, many devices require security authentication, so security chip products are widely used in current electronic products. The security chip generally has an independent CPU and an algorithm module with national secret qualifications, and is installed in the terminal host to provide computing services, data storage and security authentication functions. People are familiar with such as smart phone SIM card, U-shield in the financial field, or various ESAM and PSAM chips that are unknown and work silently in the device. [0003] With the development of chip technology, the current security chip will face more complex mult...

AI Technical Summary

Problems solved by technology

[0003] With the development of chip technology, the current security chip will face more complex multi-application fields, and there are many operations that require security control. It is too complicated and difficult to set corresponding authority authentication instructions for all these operations.

Some existing technologies use the method of defining security status words for different applications to simplify the security design to a certain extent. However, when there are many applications, the security status words will still explode. When the application is switched and the security status changes, the information synchronization The work is very complex and error-prone, and will lead to a decrease in chip execution efficiency

Images