A data and command security analysis risc processor circuit and method thereof

Abstract

The application discloses a data and command security analysis RISC processor circuit and a method thereof. The state switching of each step of the computer equipment process has passed the above-mentioned safety evaluation of the RISC processor circuit, and the results of the safety evaluation are reflected in the tag value corresponding to the stack position of the RISC processor circuit tag stack. After the circuit obtains the tagged value array after the signature, it can verify whether each step of the program process from startup to Mn is in a safe state, thereby ensuring security and avoiding data and programs from being generated during dynamic operation. Safe data and commands improve the security performance of the computer interaction process.

Description

technical field [0001] This application relates to the field of chip technology, in particular to a data and command security analysis RISC processor circuit and its method. Background technique [0002] For a computer device, due to various functional requirements, there must be frequent data and command interactions with the outside world. In this process, the risk of information security is undoubtedly increased. Computer equipment may obtain unsafe data and commands from the outside world. These data and commands may break through permissions and hijack computer equipment. Information may also cause abnormalities and damages to computer hardware, or waste computer resources to implement redundant attacks. [0003] In order to avoid the above situation, it is necessary to perform security authentication for data and commands input from the outside to the computer device. Currently, security authentication methods are mainly port-level authentication and scanning authent...

AI Technical Summary

Problems solved by technology

The computer equipment exchanges data and commands with the outside world through wired or wireless ports, so the security authentication device of the computer equipment performs security authentication on the data and commands entering and exiting the port to confirm the security of the data and commands and compliance with the authority requirements; however, relying solely on Port-level authentication cannot guarantee the security of computer equipment. For example, redundant attacks can be launched on computer equipment by sending a large number of compliant data and commands until the port authentication of computer equipment is paralyzed; and port authentication is also difficult to cover all incoming and outgoing ports. data and commands

Scanning authentication conducts a comprehensive scan on the external devices connected to the computer, but the data and programs on the external devices are dynamic, and it is difficult to avoid deriving unsafe programs and generating unsafe data and commands during the operation process. Scanning external devices It is also often restricted by various permissions and it is difficult to achieve full coverage

Images