Memory data access method and device

Abstract

The invention discloses a memory data access method and device. The method comprises the steps that in response to an access instruction that a target application program accesses a target memory unit in a target chip, the type of a target memory area to which the target memory unit belongs is determined, and the type of the target memory area comprises one of a secure memory area used for storing first data set according to security requirements and a second memory area used for storing second data set according to security requirements; the public memory area is used for storing second data without security requirement setting; a target program identifier of the target application program is obtained, the authorization state of the target application program is determined according to the target program identifier, and the authorization state is used for reflecting whether the target application program has the permission to access the secure memory area or not; and determining a response strategy for the access instruction according to the type of the target memory area and the authorization state of the target application program, and executing the response strategy. The technical problem that chip memory data is easy to be illegally carried in related technologies is solved.

Description

Technical Field

[0001] The present application relates to the field of chip memory data security technology, and more specifically, to a memory data access method and device. Background Art

[0002] With the development of computer technology, the risk of data leakage is also increasing. Hackers can use various means to obtain sensitive data stored in chip memory, such as personal identity information, bank account numbers, passwords, etc., which poses a threat to personal privacy and business secrets.

[0003] At present, although chip memory data protection technology can improve data security, there are still some attack methods that can bypass these protection measures. Common chip memory data protection methods include: physical isolation, encryption, and integrity protection. These three methods can protect the memory data of the chip, but they also have certain disadvantages: the physical isolation method requires additional hardware and resources to implement, which increases manufacturing costs and energy consumption; encryption and integrity protection methods require additional computing and storage resources, which will have a certain impact on system performance. For example, encryption and decryption operations require more computing power, which may cause the system response time to increase.

[0004] To address the above-mentioned problems, no effective solution has been proposed yet. Summary of the invention

[0005] The embodiments of the present application provide a memory data access method and device to at least solve the technical problem in the related art that chip memory data is easily illegally transferred.

[0006] According to one aspect of an embodiment of the present application, a memory data access method is provided, comprising: in response to an access instruction of a target application to access a target memory unit in a target chip, determining the type of a target memory area to which the target memory unit belongs, wherein the type of the target memory area comprises one of the following: a secure memory area for storing first data with security requirements set, and a public memory area for storing second data without security requirements set; obtaining a target program identifier of the target application, and determining an authorization status of the target application based on the target program identifier, wherein the authorization status is used to reflect whether the target application has permission to access the secure memory area; determining a response strategy for the access instruction based on the type of the target memory area and the authorization status of the target application, and executing the response strategy.

[0007] Optionally, in response to an access instruction from a target application to access a target memory unit in a target chip, determining the type of a target memory region to which the target memory unit belongs includes: parsing the access instruction using an address decoder to obtain a target memory address accessed by the access instruction; and determining the type of a target memory region to which the target memory unit corresponding to the target memory address belongs.

[0008] Optionally, determining the authorization status of the target application based on the target program identifier includes: searching whether the target program identifier exists in a preset authorization identifier record table, wherein the authorization identifier record table stores the program identifiers of all applications that have permission to access the secure memory area; if the target program identifier exists in the authorization identifier record table, determining that the target application has permission to access the secure memory area; if the target program identifier does not exist in the authorization identifier record table, determining that the target application does not have permission to access the secure memory area.

[0009] Optionally, a response strategy for the access instruction is determined based on the type of the target memory area and the authorization status of the target application, including: if the type of the target memory area is a public memory area, the response strategy is determined to be: read the target data in the target memory unit and feed back the target data to the target application; if the type of the target memory area is a secure memory area, the response strategy is determined based on the authorization status of the target application.

[0010] Optionally, a response strategy is determined based on the authorization status of the target application, including: if the target application has permission to access the secure memory area, the response strategy is determined to be: read the target data in the target memory unit, and feed back the target data to the target application; if the target application does not have permission to access the secure memory area, the response strategy is determined to be: read the target data in the target memory unit, modify the target data according to preset modification rules, and feed back the modified third data to the target application.

[0011] Optionally, the target data is modified according to a preset modification rule, including: uniformly replacing bytes in the target data with 00 or FF.

[0012] Optionally, the first data stored in the secure memory area includes: program code written into the secure memory area using a general programming language, wherein the general programming language includes at least one of the following: Computing Unified Device Architecture Language, Open Computing Language.

[0013] According to another aspect of an embodiment of the present application, a memory data access device is also provided, including: a first determination module, used to determine the type of target memory area to which the target memory unit belongs in response to an access instruction of a target application to access a target memory unit in a target chip, wherein the type of the target memory area includes one of the following: a secure memory area for storing first data with security requirements set, and a public memory area for storing second data without security requirements set; a second determination module, used to obtain a target program identifier of the target application, and determine an authorization status of the target application based on the target program identifier, wherein the authorization status is used to reflect whether the target application has permission to access the secure memory area; an execution module, used to determine a response strategy for the access instruction based on the type of the target memory area and the authorization status of the target application, and execute the response strategy.

[0014] According to another aspect of an embodiment of the present application, a non-volatile storage medium is further provided, which includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the above-mentioned memory data access method by running the computer program.

[0015] According to another aspect of an embodiment of the present application, an electronic device is further provided, comprising: a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to execute the above-mentioned memory data access method through the computer program.

[0016] In an embodiment of the present application, first, in response to an access instruction of a target application to access a target memory unit in a target chip, the type of the target memory area to which the target memory unit belongs is determined, wherein the type of the target memory area includes one of the following: a secure memory area for storing first data with security requirements, and a public memory area for storing second data without security requirements; then, the target program identifier of the target application is obtained, and the authorization status of the target application is determined based on the target program identifier, wherein the authorization status is used to reflect whether the target application has the authority to access the secure memory area; a response strategy for the access instruction is determined based on the type of the target memory area and the authorization status of the target application, and the response strategy is executed. Among them, the first data is stored in the secure area, and only the target application with access rights can obtain the corresponding data, thereby ensuring the security of the data in the secure area; determining the authorization status of the target application identifier can effectively control the target application's access rights to the secure memory area, thereby avoiding access and tampering of data by illegal applications, thereby solving the technical problem in the related art that chip memory data is easily illegally moved. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0018] Figure 1 is a schematic diagram of the structure of an optional computer terminal according to an embodiment of the present application;

[0019] Figure 2 is a flowchart of an optional memory data access method according to an embodiment of the present application;

[0020] Figure 3 It is a structural diagram of an optional memory data access device according to an embodiment of the present application. DETAILED DESCRIPTION

[0021] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0022] It should be noted that the terms "first", "second", etc. in the specification, claims and drawings of the present application are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0023] Example 1

[0024] According to an embodiment of the present application, a memory data access method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0025] The method embodiments provided in the embodiments of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Figure 1 FIG. 1 shows a hardware structure block diagram of a computer terminal (or mobile device) for implementing a memory data access method. Figure 1 As shown, the computer terminal 10 (or mobile device 10) may include one or more (102a, 102b, ..., 102n are used to illustrate) processors 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 104 for storing data, and a transmission device 106 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations are shown.

[0026] It should be noted that the one or more processors 102 and / or other data processing circuits described above may generally be referred to herein as "data processing circuits". The data processing circuits may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuit may be a single independent processing module, or may be incorporated in whole or in part into any of the other components in the computer terminal 10 (or mobile device). As described in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0027] The memory 104 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the memory data access method in the embodiment of the present application. The processor 102 executes various functional applications and data processing by running the software programs and modules stored in the memory 104, that is, realizing the vulnerability detection method of the above-mentioned application. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories may be connected to the computer terminal 10 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0028] The transmission device 106 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the computer terminal 10. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0029] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the computer terminal 10 (or mobile device).

[0030] In the above operating environment, the present application embodiment provides a memory data access method, such as Figure 2 As shown, the method comprises the following steps:

[0031] Step S202, in response to an access instruction of a target application to access a target memory unit in a target chip, determining a type of a target memory area to which the target memory unit belongs, wherein the type of the target memory area includes one of the following: a secure memory area for storing first data with security requirements set, and a public memory area for storing second data without security requirements set;

[0032] Step S204, obtaining a target program identifier of the target application, and determining an authorization status of the target application according to the target program identifier, wherein the authorization status is used to reflect whether the target application has permission to access the secure memory area;

[0033] Step S206, determining a response strategy for the access instruction according to the type of the target memory area and the authorization status of the target application, and executing the response strategy.

[0034] The following describes each step of the memory data access method in conjunction with a specific implementation process.

[0035] To protect important data in the chip memory, users can divide the chip into secure memory area and public memory area according to specific needs. The secure memory area can store relatively important first data for which the user has set security requirements. For example, the first data can be program code written into the secure memory area using the Compute Unified Device Architecture (CUDA) or Open Computing Language (OPENCL); while the public memory area stores second data for which the user has not set security requirements. For example, the second data can be some general data or code.

[0036] As an optional implementation, when an access instruction from a target application to access a target memory unit in a target chip is received, the type of the target memory area to which the target memory unit belongs can be determined in the following manner: using an address decoder to parse the access instruction to obtain the target memory address accessed by the access instruction; determining the type of the target memory area to which the target memory unit corresponding to the target memory address belongs.

[0037] In order to control the application's access rights to the secure memory area, thereby preventing illegal applications from accessing and tampering with data, users can establish a preset authorization identification record table based on actual needs. The preset authorization identification record table is mainly used to record the program identification of all applications that have permission to access the secure memory area.

[0038] Optionally, when determining the authorization status of the target application based on the target program identifier, first check whether the target program identifier is in a preset authorization identifier record table. If the target program identifier is recorded in the authorization identifier record table, the program has the authority to access the secure memory area, that is, the program can access the secure memory area; if the target program identifier is not recorded in the authorization identifier record table, the program does not have the authority to access the secure memory area, that is, it cannot access the secure memory area normally.

[0039] In order to improve the efficiency of data access and the flexibility of the response strategy determination process, the response strategy of the access instruction can be determined based on the type of the target memory area and the authorization status of the target application.

[0040] Optionally, if the type of the target memory area is a public memory area, the response strategy is determined as: reading the target data in the target memory unit and directly feeding back the target data to the target application; if the type of the target memory area is a secure memory area, the response strategy can be further determined based on the authorization status of the target application.

[0041] Optionally, when determining the response strategy based on the authorization status of the target application, if the target application has permission to access the secure memory area, the corresponding response strategy is: read the target data in the target memory unit, and directly feedback the target data to the target application; if the target application does not have permission to access the secure memory area, if no data is fed back at this time, the program may become abnormal. In order to ensure that the program continues to run and does not terminate due to an abnormal error, its response strategy is: modify the target data according to preset modification rules, and feed back the modified third data to the target application.

[0042] When modifying the target data according to the preset modification rule, the bytes in the target data may be uniformly replaced with 00 or FF.

[0043] In an embodiment of the present application, first, in response to an access instruction of a target application to access a target memory unit in a target chip, the type of the target memory area to which the target memory unit belongs is determined, wherein the type of the target memory area includes one of the following: a secure memory area for storing first data with security requirements, and a public memory area for storing second data without security requirements; then, the target program identifier of the target application is obtained, and the authorization status of the target application is determined based on the target program identifier, wherein the authorization status is used to reflect whether the target application has the authority to access the secure memory area; a response strategy for the access instruction is determined based on the type of the target memory area and the authorization status of the target application, and the response strategy is executed. Among them, the first data is stored in the secure area, and only the target application with access rights can obtain the corresponding data, thereby ensuring the security of the data in the secure area; determining the authorization status of the target application identifier can effectively control the target application's access rights to the secure memory area, thereby avoiding access and tampering of data by illegal applications, thereby solving the technical problem in the related art that chip memory data is easily illegally moved.

[0044] Example 2

[0045] According to an embodiment of the present application, a memory data access device for implementing the memory data access method in embodiment 1 is also provided. Figure 3 As shown, the memory data access device at least includes a first determination module 31, a second determination module 32 and an execution module 33, wherein:

[0046] A first determination module 31 is used to determine the type of a target memory area to which the target memory unit belongs in response to an access instruction of a target application program to access a target memory unit in a target chip, wherein the type of the target memory area includes one of the following: a secure memory area for storing first data with security requirement settings, and a public memory area for storing second data without security requirement settings;

[0047] A second determination module 32 is used to obtain a target program identifier of a target application and determine an authorization status of the target application according to the target program identifier, wherein the authorization status is used to reflect whether the target application has permission to access the secure memory area;

[0048] The execution module 33 is used to determine a response strategy for the access instruction according to the type of the target memory area and the authorization status of the target application program, and execute the response strategy.

[0049] The functions of each memory data access module are explained below in conjunction with the specific implementation process.

[0050] To protect important data in the chip memory, users can divide the chip into secure memory area and public memory area according to specific needs. The secure memory area can store relatively important first data for which the user has set security requirements. For example, the first data can be program code written into the secure memory area using the Compute Unified Device Architecture (CUDA) or Open Computing Language (OPENCL); while the public memory area stores second data for which the user has not set security requirements. For example, the second data can be some general data or code.

[0051] As an optional implementation, upon receiving an access instruction from a target application to access a target memory unit in a target chip, the first determination module 31 may determine the type of the target memory area to which the target memory unit belongs in the following manner: using an address decoder to parse the access instruction to obtain the target memory address accessed by the access instruction; and determining the type of the target memory area to which the target memory unit corresponding to the target memory address belongs.

[0052] In order to control the application's access rights to the secure memory area, thereby preventing illegal applications from accessing and tampering with data, users can establish a preset authorization identification record table based on actual needs. The preset authorization identification record table is mainly used to record the program identification of all applications that have permission to access the secure memory area.

[0053] Optionally, when determining the authorization status of the target application based on the target program identifier, the second determination module 32 first detects whether the target program identifier is in a preset authorization identifier record table. If the target program identifier is recorded in the authorization identifier record table, the program has the authority to access the secure memory area, that is, the program can access the secure memory area; if the target program identifier is not recorded in the authorization identifier record table, the program does not have the authority to access the secure memory area, that is, it cannot access the secure memory area normally.

[0054] In order to improve the efficiency of data access and the flexibility of the response strategy determination process, the execution module 33 can determine the response strategy of the access instruction based on the type of the target memory area and the authorization status of the target application.

[0055] Optionally, if the type of the target memory area is a public memory area, the response strategy is determined as: reading the target data in the target memory unit and directly feeding back the target data to the target application; if the type of the target memory area is a secure memory area, the response strategy can be further determined based on the authorization status of the target application.

[0056] Optionally, when determining the response strategy based on the authorization status of the target application, if the target application has permission to access the secure memory area, the corresponding response strategy is: read the target data in the target memory unit, and directly feedback the target data to the target application; if the target application does not have permission to access the secure memory area, if no data is fed back at this time, the program may become abnormal. In order to ensure that the program continues to run and does not terminate due to an abnormal error, its response strategy is: modify the target data according to preset modification rules, and feed back the modified third data to the target application.

[0057] When modifying the target data according to the preset modification rule, the bytes in the target data may be uniformly replaced with 00 or FF.

[0058] It should be noted that each module in the memory data access device in the embodiment of the present application corresponds one by one to each implementation step of the memory data access method in Example 1. Since a detailed description has been given in Example 1, some details not reflected in this embodiment can be referred to Example 1 and will not be repeated here.

[0059] Example 3

[0060] According to an embodiment of the present application, a non-volatile storage medium is also provided, which includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the memory data access method in Example 1 by running the computer program.

[0061] Specifically, the device where the non-volatile storage medium is located implements the following steps by running the computer program: in response to an access instruction from a target application to access a target memory unit in a target chip, determining the type of a target memory area to which the target memory unit belongs, wherein the type of the target memory area includes one of the following: a secure memory area for storing first data with security requirements set, and a public memory area for storing second data without security requirements set; obtaining a target program identifier of the target application, and determining an authorization status of the target application based on the target program identifier, wherein the authorization status is used to reflect whether the target application has permission to access the secure memory area; determining a response strategy for the access instruction based on the type of the target memory area and the authorization status of the target application, and executing the response strategy.

[0062] According to an embodiment of the present application, a processor is also provided, which is used to run a computer program, wherein the memory data access method in Example 1 is executed when the computer program is running.

[0063] Specifically, the following steps are executed when the computer program is running: in response to an access instruction of a target application to access a target memory unit in a target chip, determining the type of a target memory area to which the target memory unit belongs, wherein the type of the target memory area includes one of the following: a secure memory area for storing first data with security requirements set, and a public memory area for storing second data without security requirements set; obtaining a target program identifier of the target application, and determining an authorization status of the target application based on the target program identifier, wherein the authorization status is used to reflect whether the target application has permission to access the secure memory area; determining a response strategy for the access instruction based on the type of the target memory area and the authorization status of the target application, and executing the response strategy.

[0064] According to an embodiment of the present application, an electronic device is also provided, which includes: a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to execute the memory data access method in Example 1 through the computer program.

[0065] Specifically, the processor is configured to execute the following steps through a computer program: in response to an access instruction of a target application to access a target memory unit in a target chip, determine the type of a target memory area to which the target memory unit belongs, wherein the type of the target memory area includes one of the following: a secure memory area for storing first data with security requirements set, and a public memory area for storing second data without security requirements set; obtain a target program identifier of the target application, and determine an authorization status of the target application based on the target program identifier, wherein the authorization status is used to reflect whether the target application has permission to access the secure memory area; determine a response strategy for the access instruction based on the type of the target memory area and the authorization status of the target application, and execute the response strategy.

[0066] The serial numbers of the above embodiments are only for description and do not represent the advantages or disadvantages of the embodiments.

[0067] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0068] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0069] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed over multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0070] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0071] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or all or part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of each embodiment method of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk, etc. Various media that can store program codes.

[0072] The above are only preferred implementations of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A memory data access method, characterized in that: include: In response to an access instruction of a target application to access a target memory unit in a target chip, determining a type of a target memory area to which the target memory unit belongs, wherein the type of the target memory area includes one of the following: a secure memory area for storing first data with security requirements set, and a public memory area for storing second data without security requirements set; Obtaining a target program identifier of the target application, and determining an authorization status of the target application according to the target program identifier, wherein the authorization status is used to reflect whether the target application has permission to access the secure memory area; A response strategy for the access instruction is determined according to the type of the target memory area and the authorization status of the target application, and the response strategy is executed.

2. The method according to claim 1, characterized in that In response to an access instruction of a target application program to access a target memory unit in a target chip, determining a type of a target memory region to which the target memory unit belongs includes: Parsing the access instruction using an address decoder to obtain a target memory address accessed by the access instruction; Determine the type of the target memory region to which the target memory unit corresponding to the target memory address belongs.

3. The method according to claim 1, characterized in that Determining the authorization status of the target application program according to the target program identifier includes: Retrieve whether the target program identifier exists in a preset authorization identifier record table, wherein the authorization identifier record table stores program identifiers of all application programs that have permission to access the secure memory area; If the target program identifier exists in the authorization identifier record table, determining that the target application has permission to access the secure memory area; If the target program identifier does not exist in the authorization identifier record table, it is determined that the target application program does not have permission to access the secure memory area.

4. The method according to claim 1, characterized in that: Determining a response strategy for the access instruction according to the type of the target memory area and the authorization status of the target application program includes: If the type of the target memory area is the public memory area, determining the response strategy is: reading the target data in the target memory unit and feeding back the target data to the target application; If the type of the target memory area is the secure memory area, the response strategy is determined according to the authorization status of the target application.

5. The method according to claim 4, characterized in that Determining the response strategy according to the authorization status of the target application includes: If the target application has permission to access the secure memory area, determining the response strategy is: reading the target data in the target memory unit and feeding back the target data to the target application; If the target application does not have permission to access the secure memory area, the response strategy is determined as: reading the target data in the target memory unit, modifying the target data according to a preset modification rule, and feeding back the modified third data to the target application.

6. The method according to claim 5, characterized in that Modifying the target data according to a preset modification rule includes: The bytes in the target data are uniformly replaced with 00 or FF.

7. The method according to any one of claims 1 to 6, characterized in that The first data stored in the secure memory area includes: program code written into the secure memory area using a general programming language, wherein the general programming language includes at least one of the following: Computing Unified Device Architecture Language, Open Computing Language.

8. A memory data access device, characterized in that: include: A first determination module is configured to determine, in response to an access instruction of a target application program to access a target memory unit in a target chip, a type of a target memory area to which the target memory unit belongs, wherein the type of the target memory area includes one of the following: a secure memory area for storing first data with security requirement settings, and a public memory area for storing second data without security requirement settings; a second determination module, configured to obtain a target program identifier of the target application, and determine an authorization status of the target application according to the target program identifier, wherein the authorization status is used to reflect whether the target application has permission to access the secure memory area; An execution module is used to determine a response strategy for the access instruction according to the type of the target memory area and the authorization status of the target application program, and execute the response strategy.

9. A non-volatile storage medium, characterized in that: The non-volatile storage medium includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the memory data access method described in any one of claims 1 to 7 by running the computer program.

10. An electronic device, characterized in that: include: A memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to execute the memory data access method according to any one of claims 1 to 7 through the computer program.

Images