Encryption method, decryption method and encryption and decryption system

Abstract

The invention provides an encryption method, a decryption method and an encryption and decryption system, and the encryption method comprises the steps: carrying out the logic operation of a user key of a target user and a chip key of a chip, obtaining a target key, carrying out the encryption of a plaintext of a root key of the target user through employing the target key, obtaining a ciphertext of the root key, and carrying out the decryption of the ciphertext of the root key. The ciphertext of the root key of the target user is written into the chip for storage, and the target key for encrypting the plaintext of the root key of the target user is obtained by performing logical operation on the user key of the target user and the chip key of the chip during encryption, so that the target users are different; and the obtained target keys for encrypting the plaintext of the root key of the target user are different, so that the problem of leakage risk caused by sharing the same key among different users of the chip can be solved, and the requirements of different users in a chip production stage can be met.

Description

Technical Field

[0001] The present application relates to the field of chip technology, and in particular to an encryption method, a decryption method and an encryption / decryption system. Background Art

[0002] The security management of keys usually adopts a hierarchical protection method. The hierarchical management mechanism of keys usually divides keys into three layers, namely: root key, key encryption key and working key. The lower-level keys provide encryption protection for the upper-level keys. The root key is located at the bottom of the key management hierarchy and is used to protect the confidentiality of the upper-level keys (such as key encryption keys). Therefore, the security of the root key is crucial to the security of the entire business. Summary of the invention

[0003] The present application aims to solve one of the technical problems in the related art at least to some extent.

[0004] To this end, the present application proposes an encryption method, a decryption method and an encryption / decryption system to solve the problem of leakage risk when the same key is shared by different chip users and meet the needs of different users in the chip production stage.

[0005] In one aspect, an embodiment of the present application provides an encryption method, including:

[0006] Performing a logical operation on the user key of the target user and the chip key of the chip to obtain a target key;

[0007] Encrypting the plaintext of the root key of the target user by using the target key to obtain the ciphertext of the root key;

[0008] The ciphertext of the root key of the target user is written into the chip for storage.

[0009] Another aspect of the present application provides a decryption method, including:

[0010] Performing a logical operation on the user key of the target user and the chip key of the chip to obtain a target key;

[0011] The target key is used to decrypt the ciphertext of the root key of the target user stored in the chip to obtain the plaintext of the root key.

[0012] In another aspect, an embodiment of the present application provides an encryption and decryption system, including: a chip and an encryption machine;

[0013] Wherein, the encryption machine is used to execute the method as described in the above aspect;

[0014] The chip is used to execute the method as described in the other aspect above.

[0015] In another aspect, an embodiment of the present application provides an encryption device, comprising:

[0016] A first operation module, used for performing a logic operation on a user key of a target user and a chip key of a chip to obtain a target key;

[0017] An encryption module, used to encrypt the plain text of the root key of the target user using the target key to obtain the ciphertext of the root key;

[0018] The first storage module is used to write the ciphertext of the root key of the target user into the chip for storage.

[0019] In another aspect, an embodiment of the present application provides a decryption device, comprising:

[0020] The second operation module is used to perform a logic operation on the user key of the target user and the chip key of the chip to obtain a target key;

[0021] The decryption module is used to use the target key to decrypt the ciphertext of the root key of the target user stored in the chip to obtain the plaintext of the root key.

[0022] In yet another aspect of the present application, an electronic device is provided, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the method described in the first aspect is implemented, or the method described in the other aspect is implemented.

[0023] In yet another aspect of the present application, a non-temporary computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, the method described in the first aspect is implemented, or the method described in the other aspect is implemented.

[0024] In yet another aspect, an embodiment of the present application provides a chip, including a processing circuit, wherein the processing circuit is configured to execute the method as described in the aforementioned aspect.

[0025] In yet another aspect, the present application provides a computer program product having a computer program stored thereon, wherein when the program is executed by a processor, the method described in the first aspect or the method described in the other aspect is implemented.

[0026] The encryption method, decryption method and encryption / decryption system proposed in the present application perform a logical operation on the user key of the target user and the chip key of the chip to obtain a target key, use the target key to encrypt the plaintext of the root key of the target user to obtain the ciphertext of the root key, write the ciphertext of the root key of the target user into the chip for storage, and obtain the target key for encrypting the plaintext of the root key of the target user by performing a logical operation on the user key of the target user and the chip key of the chip during encryption, so that different target users will obtain different target keys for encrypting the plaintext of the root key of the target user, thereby solving the problem of leakage risk of sharing the same key between different chip users, and meeting the needs of different users in the chip production stage.

[0027] Additional aspects and advantages of the present application will be given in part in the description below, and in part will become apparent from the description below, or will be learned through the practice of the present application. BRIEF DESCRIPTION OF THE DRAWINGS

[0028] The above and / or additional aspects and advantages of the present application will become apparent and easily understood from the following description of the embodiments in conjunction with the accompanying drawings, in which:

[0029] Figure 1 A schematic diagram of a flow chart of an encryption method provided in an embodiment of the present application;

[0030] Figure 2 A flowchart of another encryption method provided in an embodiment of the present application;

[0031] Figure 3 A flowchart of another encryption method provided in an embodiment of the present application;

[0032] Figure 4 A flowchart of a decryption method provided in an embodiment of the present application;

[0033] Figure 5 A flowchart of another decryption method provided in an embodiment of the present application;

[0034] Figure 6 A flowchart of another decryption method provided in an embodiment of the present application;

[0035] Figure 7 A schematic diagram of the architecture of an encryption and decryption system provided in an embodiment of the present application;

[0036] Figure 8 A schematic diagram of a flow chart of an encryption and decryption method provided in an embodiment of the present application;

[0037] Fig. 9 A schematic diagram of the structure of an encryption device provided in an embodiment of the present application;

[0038] Fig.10 A schematic diagram of the structure of a decryption device provided in an embodiment of the present application;

[0039] Fig.11 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application;

[0040] Fig.12 A schematic diagram of the structure of a chip proposed in an embodiment of the present application. DETAILED DESCRIPTION

[0041] Embodiments of the present application are described in detail below, and examples of the embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals throughout represent the same or similar elements or elements having the same or similar functions. The embodiments described below with reference to the accompanying drawings are exemplary and are intended to be used to explain the present application, and should not be construed as limiting the present application.

[0042] The following describes the encryption method, decryption method and encryption / decryption system of the embodiments of the present application with reference to the accompanying drawings.

[0043] The security management of keys usually adopts a hierarchical protection method. The hierarchical management mechanism of keys usually divides keys into three layers, namely: root key, key encryption key and working key. The lower-level keys provide encryption protection for the upper-level keys. The root key is located at the bottom of the key management hierarchy and is used to protect the confidentiality of the upper-level keys (such as key encryption keys). Therefore, the security of the root key is crucial to the security of the entire business. If an attacker obtains the root key stored in the device through illegal means, it will threaten the security of the entire encrypted data.

[0044] In the related art, the system on chip (SOC) involves multiple startup processes, such as the image of the chip manufacturer, the image of the mobile phone original equipment manufacturer (OEM), etc., all of which require different root keys to provide decryption services.

[0045] Among them, SOC usually stores the ciphertext of the root key in the electronic fuse (efuse) of SOC (A Brief Analysis of Secure Boot), and decrypts it through the RTL_key in the code (Register-Transfer Level (RTL)). The decrypted plaintext of the root key is used for various security services in the chip. Therefore, the protection of the root key can be summarized as the protection of RTL_key.

[0046] In the related technology, the RTL_key can be stored in the SOC, and the RTL_key stored in the SOC can be used to decrypt the externally imported ciphertext. However, in this method, the RTL_key is written once and cannot be changed subsequently. Once the key is written, it cannot be changed subsequently. The RTL_key used in the chip design, verification, and wafer return test stages is the same RTL_key, which has the risk of leakage and cannot meet the needs of different users in the chip production stage.

[0047] Alternatively, the RTL_key in the SOC can be changed through an engineering change order (ECO) before the chip TO (Tape-out), and then deployed to the encryption machine for use. This method is simple and effective, but once the RTL_key is fixed, it cannot meet the needs of different stages after the chip is returned.

[0048] Alternatively, the RTL_key can be stored in efuse to meet the decryption requirements of different stages, but efuse can be observed through a microscope and there is a risk of leakage.

[0049] Therefore, the present application proposes an encryption method, which performs a logical operation on the user key of the target user and the chip key of the chip to obtain a target key, uses the target key to encrypt the plaintext of the root key of the target user to obtain the ciphertext of the root key, and writes the ciphertext of the root key of the target user into the chip for storage. The target key used to encrypt the plaintext of the root key of the target user is obtained by performing a logical operation on the user key of the target user and the chip key of the chip during encryption. Therefore, for different target users, the target key used to encrypt the plaintext of the root key of the target user is also different, thereby solving the problem of leakage risk when the same key is shared by different chip users, and meeting the needs of different users in the chip production stage.

[0050] Figure 1 A flowchart of an encryption method provided in an embodiment of the present application.

[0051] The executor of the encryption method in the embodiment of the present application is an encryption device, which can be applied to any electronic device so that the electronic device can perform encryption functions.

[0052] Among them, the electronic device can be any device with computing capabilities, such as a mobile terminal. The mobile terminal can be, for example, a mobile phone, a tablet computer, a personal digital assistant, a wearable device, and other hardware devices with various operating systems, touch screens and / or display screens.

[0053] The execution subject of the decryption method in the embodiment of the present application may also be an encryption machine. In the following embodiments, the execution subject is an encryption machine as an example for explanation.

[0054] like Figure 1 As shown, the method may include the following steps:

[0055] Step 101: Perform a logical operation on a user key of a target user and a chip key of a chip to obtain a target key.

[0056] Among them, the target users can be users at different stages of the chip, such as chip manufacturers, OEM manufacturers, etc.

[0057] Among them, the user key refers to the root key encryption and decryption key corresponding to the user, called EE_key (encryption equipment key), which is deployed in the encryption machine by the user after the chip is returned. One or more EE_keys can be deployed in the encryption machine. Among them, one user corresponds to one EE_key.

[0058] The chip key is the root key encryption and decryption key corresponding to the chip, called CC_key (chip code key), which is hard-coded in the code by the chip designer during the design phase, and the encryption machine can read CC_key from the chip. One chip corresponds to one CC_key.

[0059] Among them, the target key is the bottom-level key of the chip, that is, the root key. In the related art, the root key is generally encrypted by RTL_key and stored in efuse. During the chip startup process, RTL_key is used to decrypt the plaintext of the root key through hardware logic. The plaintext is used for subsequent image verification, key derivation and other scenarios. Therefore, in the embodiment of the present application, the target key can be RTL_key.

[0060] In the embodiment of the present application, EE_key and CC_key can be used to obtain RTL_key through some logical operation.

[0061] The logic operation includes at least one of the following: an XOR operation and an even-odd value operation.

[0062] In the embodiment of the present application, each user at each stage of the chip has his own EE_key, which is deployed in the encryption machine and is deployed by the user himself. The chip designer cannot know it, and only the user knows it. Each user has his own EE_key and does not need to be mixed with other users. This can solve the problem of the risk of leakage when the same key is shared by different users at the chip production stage. In the chip verification stage, a fake EE_key can be provided to distinguish it from the real EE_key after the chip is returned.

[0063] Step 102: Use the target key to encrypt the plaintext of the root key of the target user to obtain the ciphertext of the root key.

[0064] The number of plaintexts can be determined according to the usage scenario. For example, the number of plaintexts of the root key used for image verification at startup can be one; the number of plaintexts of the original root key used to derive keys in various encryption scenarios after startup can be multiple, and so on.

[0065] In an embodiment of the present application, the target key can be used to encrypt the plaintext of the root key of the target user in the encryption machine to obtain the ciphertext of the root key.

[0066] In one implementation of the embodiment of the present application, the target encryption algorithm can be used to encrypt the plaintext of the root key of the target user using the target key to obtain the ciphertext of the root key.

[0067] The target encryption algorithm may adopt a high-security algorithm certified by a relevant organization, such as 256-bit AES (Advanced Encryption Standard)-CBC (Cipher Block Chaining) and the like.

[0068] Step 103: Write the ciphertext of the target user's root key into the chip for storage.

[0069] In an embodiment of the present application, after obtaining the ciphertext of the target user's root key, the encryption machine can write the ciphertext of the target user's root key into the chip for storage, so that when necessary, the ciphertext can be decrypted by the decryption module of the chip to obtain the plaintext of the target user's root key.

[0070] In one implementation of the embodiment of the present application, the ciphertext of the root key of the target user may be written into the target space of the chip for storage, wherein the target space of the chip may be the efuse of the chip.

[0071] The encryption method of the embodiment of the present application performs a logical operation on the user key of the target user and the chip key of the chip to obtain a target key, uses the target key to encrypt the plaintext of the root key of the target user to obtain the ciphertext of the root key, and writes the ciphertext of the root key of the target user into the chip for storage. The target key used to encrypt the plaintext of the root key of the target user is obtained by performing a logical operation on the user key of the target user and the chip key of the chip during encryption. Therefore, for different target users, the target key used to encrypt the plaintext of the root key of the target user is also different, thereby solving the problem of leakage risk when the same key is shared by different chip users, and meeting the needs of different users in the chip production stage.

[0072] Based on the above embodiments, Figure 2 A flowchart of another encryption method provided in an embodiment of the present application illustrates how to obtain the plain text of the user key, chip key and root key, such as Figure 2 As shown, the method comprises the following steps:

[0073] Step 201, reading a chip key from a chip in an encrypted manner, and / or, in response to a write operation, obtaining a plain text of a user key and a root key.

[0074] The chip key is a key that is specific to the chip, that is, one chip corresponds to one chip key.

[0075] Among them, the user key is a key that is exclusive to the target user. That is, one user corresponds to one user key.

[0076] In one implementation of the embodiment of the present application, the user key of the target user can be deployed in the encryption machine by the target user through a write operation after the chip is returned. Among them, one or more user keys can be deployed in the encryption machine.

[0077] In one implementation of the embodiment of the present application, the plaintext of the target user's root key may be written into the encryption machine by the target user through a write operation.

[0078] In one implementation of the embodiment of the present application, the chip key of the chip can be transmitted to the encryption machine in an encrypted manner, such as encrypted by the chip designer's public key and decrypted by the private key in the encryption machine, and deployed in the encryption machine.

[0079] Step 202: Perform a logical operation on the user key of the target user and the chip key of the chip to obtain a target key.

[0080] Step 203: Use the target key to encrypt the plaintext of the root key of the target user to obtain the ciphertext of the root key.

[0081] Step 204: Write the ciphertext of the target user's root key into the chip for storage.

[0082] Among them, steps 202 to 204 can refer to the relevant explanations in the aforementioned embodiments, and the principles are the same, so they will not be repeated here.

[0083] The encryption method of the embodiment of the present application reads the chip key from the chip in an encrypted manner, which can ensure that the chip key is not stolen or tampered with during the transmission process, and effectively prevents illegal copying and theft of the key. At the same time, in response to the write operation, the plaintext of the user key and the root key is obtained, so that the encryption machine can obtain the target key based on the user key and the chip key, and use the target key to encrypt the plaintext of the root key.

[0084] Based on the above embodiments, Figure 3A schematic diagram of another encryption method provided in an embodiment of the present application illustrates that the user key of the target user can also be written into the chip for storage, such as Figure 3 As shown, the method comprises the following steps:

[0085] Step 301: Perform a logical operation on the user key of the target user and the chip key of the chip to obtain a target key.

[0086] Step 302: Use the target key to encrypt the plaintext of the root key of the target user to obtain the ciphertext of the root key.

[0087] Step 303: Write the ciphertext of the target user's root key into the chip for storage.

[0088] Among them, steps 301 to 303 can refer to the relevant explanations in the aforementioned embodiments, and the principles are the same, so they will not be repeated here.

[0089] Step 304: Write the user key of the target user into the target space of the chip for storage.

[0090] Among them, the target space of the chip is the efuse of the chip.

[0091] The target space of the chip prohibits the external devices of the chip and the registers of the chip from reading the user key of the target user, and prohibits repeated writing of the user key of the target user. This can avoid the risk of leakage of the user key of the target user stored in the target space of the chip to a certain extent.

[0092] In one implementation of the embodiment of the present application, in addition to writing the ciphertext of the target user's root key into the target space of the chip for storage, the target user's user key may also be written into the target space of the chip for storage.

[0093] It should be noted that the ciphertext of the target user's root key and the user key of the target user are both burned into the target space of the chip. There is no mandatory requirement for the burning order of the ciphertext of the root key and the user key. However, from the perspective of having the key first and then decrypting the ciphertext, it is recommended to burn the EE_key first and then the ciphertext of the root key.

[0094] As an example, the target user's EE_key can be burned into the efuse of the chip, but the EE_key must be guaranteed not to be known by the chip designer. For example, after the burning is completed, the chip register and / or automatic test equipment (ATE) read back is not supported. After the efuse is burned, the target user must close his or her writing and reading permissions in the efuse.

[0095] In the embodiment of the present application, the root key (target key) is deployed to solve the leakage problem of user keys in the chip production stage. Among them, users in each stage of the chip have their own EE_key, which is deployed in the efuse and the encryption machine at the same time and deployed by the user. However, the EE_key is burned in the efuse of the chip, and there is a risk of leakage. In order to avoid the leakage of EE_key in efuse, CC_key is introduced at the same time. CC_key is hard-coded in the RTL code. The encryption machine can read CC_key from the chip. The root key (RTL_key) is the key after the calculation of EE_key and CC_key. This solves the problem of leakage risk when the same key is shared by different users in the chip production stage, and also solves the leakage problem of user keys stored in efuse. The deployment process is simple, involving only the front-end design and users, and no additional ECO process is required.

[0096] The encryption method of the embodiment of the present application stores the user key of the target user by writing it into the target space of the chip, wherein the target space of the chip prohibits the external devices of the chip and the registers of the chip from reading the user key of the target user, and prohibits repeated writing of the user key of the target user. Thus, the risk of leakage of the user key of the target user stored in the target space of the chip can be avoided to a certain extent. Moreover, the target key in the embodiment of the present application is obtained after the user key and the chip key are logically operated, which not only solves the problem of leakage risk when the same key is shared by different users in the chip production stage, but also solves the leakage problem of the user key stored in the target space of the chip, and the deployment process is simple.

[0097] The above embodiment describes the encryption process. Figure 4 , the decryption process is explained.

[0098] Figure 4 A flowchart of a decryption method provided in an embodiment of the present application.

[0099] The decryption method of the embodiment of the present application is performed by a decryption device, which can be applied to any electronic device so that the electronic device can perform a decryption function.

[0100] Among them, the electronic device can be any device with computing capabilities, such as a mobile terminal. The mobile terminal can be, for example, a mobile phone, a tablet computer, a personal digital assistant, a wearable device, and other hardware devices with various operating systems, touch screens and / or display screens.

[0101] The execution subject of the decryption method in the embodiment of the present application may also be a chip.

[0102] Among them, chips include ISP, central processing unit (CPU), application-specific integrated circuit (ASIC), microprocessor (Digital Signal Processor, DSP), field programmable gate array (Field-Programmable Gate Array, FPGA), system on chip (System On AChip, SOC), reduced instruction set computer RISC (Reduced Instruction Set Computer, reduced instruction set computer), etc., which are not listed here one by one.

[0103] In the following embodiments, the execution subject is a chip as an example for description.

[0104] like Figure 4 As shown, the method may include the following steps:

[0105] Step 401: Perform a logical operation on the user key of the target user and the chip key of the chip to obtain a target key.

[0106] The logic operation includes at least one of the following: an XOR operation and an even-odd value operation.

[0107] In the embodiment of the present application, the chip side can also perform the same logical operation on the user key of the target user and the chip key of the chip as the encryption machine side to obtain the same target key as the encryption machine side.

[0108] Among them, step 401 can refer to the relevant explanations in the above-mentioned embodiments, and the principle is the same, which will not be repeated here.

[0109] Step 402: Decrypt the ciphertext of the root key of the target user stored in the chip using the target key to obtain the plaintext of the root key.

[0110] The ciphertext of the target user's root key is obtained by encrypting the plaintext of the target user's root key using the target key by the encryption machine, and is written into the chip by the encryption machine for storage.

[0111] The number of ciphertexts of the target user's root key stored in the chip may be one or more.

[0112] In an embodiment of the present application, the chip side can use the same target key as the encryption machine side to decrypt the ciphertext of the target user's root key stored in the chip to obtain the plaintext of the root key.

[0113] In one implementation of an embodiment of the present application, the chip side can use the same target encryption algorithm as the encryption machine side and the same target key as the encryption machine side to decrypt the ciphertext of the root key of the target user stored in the chip to obtain the plaintext of the root key.

[0114] Among them, the target encryption algorithm can adopt a high-security level algorithm certified by relevant organizations, such as 256-bit AES-CBC.

[0115] In one implementation of the embodiment of the present application, the target user can use the plain text of the root key obtained by decryption to perform various security services of the chip, wherein the plain text of the root key is invisible to the user.

[0116] The decryption method of the embodiment of the present application performs a logical operation on the user key of the target user and the chip key of the chip to obtain the target key, and uses the target key to decrypt the ciphertext of the root key of the target user stored in the chip to obtain the plaintext of the root key. When decrypting, the chip performs the same logical operation on the user key of the target user and the chip key of the chip as on the encryption machine side to obtain the same target key as on the encryption machine side, and uses the same target key as on the encryption machine side to decrypt the ciphertext of the root key of the target user stored in the chip to obtain the plaintext of the root key, thereby ensuring consistency in encryption and decryption.

[0117] and Figure 2 The above embodiments correspond to the following. Figure 5 , the interaction process of the chip key is explained.

[0118] Figure 5 A flowchart of another decryption method provided in an embodiment of the present application is shown in FIG. Figure 5 As shown, the method comprises the following steps:

[0119] Step 501, sending the chip key of the chip to the encryption machine in an encrypted manner.

[0120] Among them, the chip key is a key dedicated to the chip and is used to encrypt and decrypt the root key of the target user.

[0121] In one implementation of the embodiment of the present application, the chip can send the chip key of the chip to the encryption machine in an encrypted manner, such as encryption by the chip designer's public key and decryption by the private key in the encryption machine, which is deployed in the encryption machine.

[0122] Step 502: Perform a logical operation on the user key of the target user and the chip key of the chip to obtain a target key.

[0123] Step 503: Use the target key to decrypt the ciphertext of the root key of the target user stored in the chip to obtain the plaintext of the root key.

[0124] Among them, steps 502 to 503 can refer to the relevant explanations in the aforementioned embodiments, and the principles are the same, so they will not be repeated here.

[0125] In the decryption method of the embodiment of the present application, the chip sends the chip key of the chip to the encryption machine in an encrypted manner, which can ensure that the chip key is not stolen or tampered with during the transmission process, and effectively prevent the illegal copying and theft of the key.

[0126] and Figure 3 The above embodiments correspond to the following. Figure 6 , the process of obtaining the user key is explained.

[0127] Figure 6 A flowchart of another encryption method provided in an embodiment of the present application is shown as follows: Figure 6 As shown, the method comprises the following steps:

[0128] Step 601, read the user key of the target user from the target space of the chip.

[0129] Among them, the target space of the chip is the efuse of the chip.

[0130] The target space of the chip prohibits the external devices of the chip and the registers of the chip from reading the user key of the target user, and prohibits repeated writing of the user key of the target user. This can avoid the risk of leakage of the user key of the target user stored in the target space of the chip to a certain extent.

[0131] In one implementation of the embodiment of the present application, the user key of the target user can be read from the target space of the chip by bus access, or the user key of the target user can be read from the target space of the chip by hardwiring.

[0132] It should be noted that in the embodiment of the present application, the decryption module of the chip reads the user key of the target user from the target space of the chip.

[0133] Step 602: Perform a logical operation on the user key of the target user and the chip key of the chip to obtain a target key.

[0134] Step 603: Use the target key to decrypt the ciphertext of the root key of the target user stored in the chip to obtain the plaintext of the root key.

[0135] Among them, steps 602 to 603 can refer to the relevant explanations in the aforementioned embodiments, and the principles are the same, so they will not be repeated here.

[0136] In the decryption method of the embodiment of the present application, the decryption module of the chip reads the user key of the target user from the target space of the chip, wherein the target space of the chip prohibits the external devices of the chip and the registers of the chip from reading the user key of the target user, and prohibits repeated writing of the user key of the target user. Thus, the risk of leakage of the user key of the target user stored in the target space of the chip can be avoided to a certain extent.

[0137] The present application also proposes an encryption and decryption system, which includes: a chip and an encryption machine;

[0138] Among them, the encryption machine is used to execute Figures 1 to 3 The encryption method described in the embodiment;

[0139] Chip for execution Figures 4 to 6 The decryption method described in the embodiment.

[0140] Figure 7 A schematic diagram of the architecture of an encryption and decryption system provided in an embodiment of the present application is shown in FIG. Figure 7 In the example, EE_key is the user key, RTL_key is the target key, CC_key is the chip key, and efuse is the target space of the chip.

[0141] Among them, the user of each stage of the chip has his own EE_key, and the chip has its own CC_key. The two keys are subjected to some logical operation to obtain RTL_key, which is used in the encryption machine to encrypt the plaintext of the root key, and in the SOC to encrypt the ciphertext of the root key.

[0142] Among them, EE_key is the user's key, which is burned into efuse by the user after returning the film and deployed in the encryption machine. Multiple keys can be set. Figure 7 Two examples are used for explanation; CC_key is the key of the chip, which is hard-coded in the chip code by the chip designer during the design phase and is passed to the encryption machine in an encrypted manner.

[0143] Figure 7 In the encryption machine, CC_key is the key of the chip, and RTL_key is obtained after logical operation with the user's key (EE_key). Figure 7In the example, the XOR method is used to obtain RTL_key. The RTL_key is used in the encryption machine to encrypt and decrypt the root key. After the chip is returned, the RTL_key is burned into the efuse together with the EE_key and the encrypted ciphertext. When the chip is running, the decryption module of the chip reads the EE_key from the efuse of the chip, XORs it with the CC_key to obtain the RTL_key, and then reads the ciphertext of the root key to decrypt the root key.

[0144] As an example, Figure 7 The encryption and decryption system shown can be applied to the field of SOC chip key management to achieve the following Figure 8 The encryption and decryption methods shown:

[0145] ① Perform a logical operation (logical operation can be performed in simple ways such as XOR, parity, etc.) on the EE_key provided by the user (the number of EE_keys is determined by the user using the chip, and is explained as one user) and the CC_key deployed in the encryption machine (CC_key is transmitted to the encryption machine in an encrypted manner, such as encryption by the public key of the chip designer, decryption by the private key in the encryption machine, and deployment in the encryption machine) In the embodiment of the present application, the XOR method is used for explanation, and the RTL_key is obtained after the XOR.

[0146] ② The user deploys the plaintext of the root key (root key plaintext) in the encryption machine. The number of plaintexts is determined by its usage scenario. For example, the number of plaintexts of the root key used for image verification at startup is one; the number of plaintexts of the original root key used to derive keys in various encryption scenarios after startup is multiple, and so on.

[0147] ③ Use RTL_key to encrypt the plaintext of the user's root key (root key plaintext) to obtain the ciphertext of the root key (root key ciphertext). The encryption algorithm can use a high-security algorithm certified by relevant organizations, such as 256-bit AES-CBC.

[0148] ④ Burn the generated root key ciphertext (root key ciphertext) into the efuse of the chip.

[0149] ⑤ Burn the user's own EE_key into the efuse of the chip, but the EE_key must be guaranteed not to be known by the chip designer. For example, after the burning is completed, the chip register and / or ATE machine readback is not supported. After the efuse is burned, the user must close the burning and reading permissions in the efuse.

[0150] In summary, through ①-⑤, the user's root key ciphertext (root key ciphertext) and EE_key in the encryption machine have been burned into the efuse of the chip. There is no mandatory requirement for the burning order of the root key ciphertext (root key ciphertext) and EE_key, but from the perspective of having the key first and then decrypting the ciphertext, it is recommended to burn EE_key first, and then burn the root key ciphertext (root key ciphertext).

[0151] ⑥ The decryption module of the chip first reads EE_key from efuse. It can be accessed by bus or hardwired in any form.

[0152] ⑦EE_key is XORed with CC_key deployed in the chip decryption module to obtain RTL_key.

[0153] ⑧ The decryption module of the chip reads the ciphertext of the root key (root key ciphertext) from the efuse. There can be one or more ciphertexts of the root key (root key ciphertext).

[0154] ⑨ The decryption module of the chip uses RTL_key to decrypt the ciphertext of the root key (root key ciphertext). The decryption algorithm is the same as the algorithm in ③ to obtain the plaintext of the root key (root key plaintext).

[0155] In summary, through ⑥-⑨, the plaintext of the user's root key (root key plaintext) can be parsed. The user can use the plaintext of the root key (root key plaintext) to perform various security services of the chip. The plaintext of the root key (root key plaintext) is invisible to the user.

[0156] It should be noted that ①-⑤ are executed by the encryption machine, and ⑥-⑨ are executed by the decryption module of the chip, thereby achieving decentralized management and centralized use of RTL_key.

[0157] Among them, decentralized management means that users at each stage of the chip have their own EE_key. The EE_key chip designer is unknown, only the user himself knows it. Each user (referring to chip manufacturers, OEM manufacturers, etc.) has his own EE_key, which does not need to be mixed with other users, which can avoid key leakage between users. The user's EE_key is stored in efuse.

[0158] Centralized use means that the process of decrypting the root key is a pure hardware implementation of the chip, which is implemented by the chip-side decryption module. However, there is a risk of hardware leakage of efuse. Therefore, CC_key is also built into the RTL code, and some simple operations are performed on the two keys in the code, which not only solves the problem of key usage at different stages, but also solves the problem of efuse leakage.

[0159] In summary, the problem of different chip users sharing the root key encryption and decryption key is solved, and the risk of user keys existing in efuse and being spied on is solved. The deployment process only involves the chip front-end design and the end user, and the process is simple.

[0160] With the above Figures 1 to 3 Corresponding to the encryption method provided in the embodiment, the present application also provides an encryption device. Figures 1 to 3 The encryption method provided in the embodiment corresponds to the encryption method, so the implementation method of the encryption method is also applicable to the encryption device provided in the embodiment of the present application, and will not be described in detail in the embodiment of the present application.

[0161] Fig. 9 A schematic diagram of the structure of an encryption device provided in an embodiment of the present application.

[0162] like Fig. 9 As shown, the device may include:

[0163] The first operation module 901 is used to perform a logical operation on the user key of the target user and the chip key of the chip to obtain a target key;

[0164] The encryption module 902 is used to encrypt the plain text of the root key of the target user using the target key to obtain the ciphertext of the root key;

[0165] The first storage module 903 is used to write the ciphertext of the root key of the target user into the chip for storage.

[0166] Furthermore, in one implementation of the embodiment of the present application, the device further includes:

[0167] A first reading module is used to read a chip key from the chip in an encrypted manner, wherein the chip key is a key that is exclusive to the chip; and / or,

[0168] The acquisition module is used to acquire the plain text of the user key and the root key in response to the write operation, wherein the user key is a key exclusively belonging to the target user.

[0169] Furthermore, in one implementation of the embodiment of the present application, the device further includes:

[0170] A second storage module is used to write the user key of the target user into the target space of the chip for storage;

[0171] The target space of the chip prohibits the external devices of the chip and the registers of the chip from reading the user key of the target user, and prohibits repeated writing of the user key of the target user.

[0172] Furthermore, in one implementation of the embodiment of the present application, the encryption module 902 is further configured to:

[0173] The target encryption algorithm is used to encrypt the plaintext of the target user's root key with the target key to obtain the ciphertext of the root key.

[0174] Further, in an implementation of the embodiment of the present application, the logical operation includes at least one of the following: an exclusive OR operation and an odd-even value operation.

[0175] The encryption device of the embodiment of the present application performs a logical operation on the user key of the target user and the chip key of the chip to obtain a target key, uses the target key to encrypt the plaintext of the root key of the target user to obtain the ciphertext of the root key, and writes the ciphertext of the root key of the target user into the chip for storage. The target key used to encrypt the plaintext of the root key of the target user is obtained by performing a logical operation on the user key of the target user and the chip key of the chip during encryption. Therefore, for different target users, the target key obtained for encrypting the plaintext of the root key of the target user is also different, thereby solving the problem of leakage risk of sharing the same key between different chip users and meeting the needs of different users in the chip production stage.

[0176] With the above Figures 4 to 6 Corresponding to the decryption method provided in the embodiment, the present application also provides a decryption device. Figures 4 to 6 The decryption method provided in the embodiment corresponds to the above, so the implementation of the decryption method is also applicable to the decryption device provided in the embodiment of the present application, and will not be described in detail in the embodiment of the present application.

[0177] Fig.10 A schematic diagram of the structure of a decryption device provided in an embodiment of the present application.

[0178] like Fig.10 As shown, the device may include:

[0179] The second operation module 1001 is used to perform a logic operation on the user key of the target user and the chip key of the chip to obtain a target key;

[0180] The decryption module 1002 is used to decrypt the ciphertext of the root key of the target user stored in the chip using the target key to obtain the plaintext of the root key.

[0181] Furthermore, in one implementation of the embodiment of the present application, the device further includes:

[0182] The sending module is used to send the chip key of the chip to the encryption machine in an encrypted manner, wherein the chip key is a key exclusive to the chip and is used to encrypt and decrypt the root key of the target user.

[0183] Furthermore, in one implementation of the embodiment of the present application, the device further includes:

[0184] The second reading module is used to read the user key of the target user from the target space of the chip.

[0185] The target space of the chip prohibits the external devices of the chip and the registers of the chip from reading the user key of the target user, and prohibits repeated writing of the user key of the target user.

[0186] Furthermore, in one implementation of the embodiment of the present application, the decryption module 1002 is further configured to:

[0187] Through the target encryption algorithm, the target key is used to decrypt the ciphertext of the target user's root key stored in the chip to obtain the plaintext of the root key.

[0188] Further, in an implementation of the embodiment of the present application, the logical operation includes at least one of the following: an exclusive OR operation and an odd-even value operation.

[0189] The decryption device of the embodiment of the present application performs a logical operation on the user key of the target user and the chip key of the chip to obtain a target key, and uses the target key to decrypt the ciphertext of the root key of the target user stored in the chip to obtain a plaintext of the root key. When decrypting, the chip performs the same logical operation on the user key of the target user and the chip key of the chip as on the encryption machine side to obtain the same target key as on the encryption machine side, and uses the same target key as on the encryption machine side to decrypt the ciphertext of the root key of the target user stored in the chip to obtain the plaintext of the root key, thereby ensuring consistency in encryption and decryption.

[0190] In order to implement the above embodiments, the present application also proposes a non-temporary computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the method described in the above method embodiments is implemented.

[0191] In order to implement the above embodiments, the present application also proposes a computer program product on which a computer program is stored. When the computer program is executed by a processor, the method described in the above method embodiments is implemented.

[0192] In order to implement the above embodiments, the present application also proposes an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the method described in the above method embodiments is implemented.

[0193] Fig.11This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. For example, the electronic device 800 may be a mobile phone, a computer, a digital broadcast terminal, a message transceiver device, a game console, a tablet device, a medical device, a fitness device, a personal digital assistant, etc.

[0194] Reference Fig.11 , the electronic device 800 may include one or more of the following components: a processing component 802 , a memory 804 , a power component 806 , a multimedia component 808 , an audio component 810 , an input / output (I / O) interface 812 , a sensor component 814 , and a communication component 816 .

[0195] The processing component 802 generally controls the overall operation of the electronic device 800, such as operations associated with display, phone calls, data communications, camera operations, and recording operations. The processing component 802 may include one or more processors 820 to execute instructions to complete all or part of the steps of the above-mentioned method. In addition, the processing component 802 may include one or more modules to facilitate the interaction between the processing component 802 and other components. For example, the processing component 802 may include a multimedia module to facilitate the interaction between the multimedia component 808 and the processing component 802.

[0196] The memory 804 is configured to store various types of data to support operations on the electronic device 800. Examples of such data include instructions for any application or method operating on the electronic device 800, contact data, phone book data, messages, pictures, videos, etc. The memory 804 can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.

[0197] The power component 806 provides power to the various components of the electronic device 800. The power component 806 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power for the electronic device 800.

[0198] The multimedia component 808 includes a screen that provides an output interface between the electronic device 800 and the user. In some embodiments, the screen may include a liquid crystal display (LCD) and a touch panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive input signals from the user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundaries of the touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 808 includes a front camera and / or a rear camera. When the electronic device 800 is in an operating mode, such as a shooting mode or a video mode, the front camera and / or the rear camera may receive external multimedia data. Each front camera and rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.

[0199] The audio component 810 is configured to output and / or input audio signals. For example, the audio component 810 includes a microphone (MIC), and when the electronic device 800 is in an operating mode, such as a call mode, a recording mode, and a voice recognition mode, the microphone is configured to receive an external audio signal. The received audio signal can be further stored in the memory 804 or sent via the communication component 816. In some embodiments, the audio component 810 also includes a speaker for outputting audio signals.

[0200] I / O interface 812 provides an interface between processing component 802 and peripheral interface modules, such as keyboards, click wheels, buttons, etc. These buttons may include but are not limited to: home button, volume button, start button, and lock button.

[0201] The sensor assembly 814 includes one or more sensors for providing various aspects of status assessment for the electronic device 800. For example, the sensor assembly 814 can detect the open / closed state of the electronic device 800, the relative positioning of the components, such as the display and keypad of the electronic device 800, and the sensor assembly 814 can also detect the position change of the electronic device 800 or a component of the electronic device 800, the presence or absence of contact between the user and the electronic device 800, the orientation or acceleration / deceleration of the electronic device 800, and the temperature change of the electronic device 800. The sensor assembly 814 may include a proximity sensor configured to detect the presence of a nearby object without any physical contact. The sensor assembly 814 may also include an optical sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 814 may also include an acceleration sensor, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

[0202] The communication component 816 is configured to facilitate wired or wireless communication between the electronic device 800 and other devices. The electronic device 800 can access a wireless network based on a communication standard, such as WiFi, 4G or 5G, or a combination thereof. In an exemplary embodiment, the communication component 816 receives a broadcast signal or broadcast-related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 816 also includes a near field communication (NFC) module to facilitate short-range communication. For example, the NFC module can be implemented based on radio frequency identification (RFID) technology, infrared data association (IrDA) technology, ultra-wideband (UWB) technology, Bluetooth (BT) technology and other technologies.

[0203] In an exemplary embodiment, the electronic device 800 may be implemented by one or more application-specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components to perform the above methods.

[0204] In an exemplary embodiment, a non-transitory computer-readable storage medium including instructions is also provided, such as a memory 804 including instructions, and the instructions can be executed by a processor 820 of an electronic device 800 to perform the above method. For example, the non-transitory computer-readable storage medium can be a ROM, a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0205] In order to implement the above embodiments, the present application also proposes a chip, including: the chip includes a processing circuit, and the processing circuit is configured to execute the method provided in the above embodiments.

[0206] Fig.12 This is a schematic diagram of the structure of a chip proposed in an embodiment of the present application. Fig.12 The structure of the chip 1100 is shown, but is not limited to this.

[0207] The chip 1100 includes a processing circuit 1101 , and the processing circuit 1101 is configured to execute any of the above methods.

[0208] In some embodiments, the chip 1100 further includes one or more interface circuits 1102. Optionally, the interface circuit 1102 is connected to the memory 1103. The interface circuit 1102 can be used to receive signals from the memory 1103 or other devices, and the interface circuit 1102 can be used to send signals to the memory 1103 or other devices. For example, the interface circuit 1102 can read instructions stored in the memory 1103 and send the instructions to the processing circuit 1101.

[0209] In some embodiments, the interface circuit 1102 performs at least one of the communication steps such as sending and / or receiving in the above method, and the processing circuit 1101 performs other steps.

[0210] In some embodiments, terms such as interface circuit, interface, transceiver pin, and transceiver may be used interchangeably.

[0211] In some embodiments, the chip 1100 further includes one or more memories 1103 for storing instructions. Alternatively, all or part of the memory 1103 may be outside the chip 1100.

[0212] In the description of this specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present application. In this specification, the schematic representations of the above terms do not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described may be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art may combine and combine the different embodiments or examples described in this specification and the features of the different embodiments or examples, without contradiction.

[0213] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined as "first" and "second" may explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "plurality" is at least two, such as two, three, etc., unless otherwise clearly and specifically defined.

[0214] Any process or method description in a flowchart or otherwise described herein may be understood to represent a module, fragment or portion of code comprising one or more executable instructions for implementing the steps of a custom logical function or process, and the scope of the preferred embodiments of the present application includes alternative implementations in which functions may not be performed in the order shown or discussed, including performing functions in a substantially simultaneous manner or in the reverse order depending on the functions involved, which should be understood by technicians in the technical field to which the embodiments of the present application belong.

[0215] The logic and / or steps represented in the flowchart or otherwise described herein, for example, can be considered as an ordered list of executable instructions for implementing logical functions, and can be embodied in any computer-readable medium for use by an instruction execution system, device or apparatus (such as a computer-based system, a system including a processor, or other system that can fetch instructions from an instruction execution system, device or apparatus and execute the instructions), or in combination with these instruction execution systems, devices or apparatuses. For the purpose of this specification, "computer-readable medium" can be any device that can contain, store, communicate, propagate or transmit a program for use by an instruction execution system, device or apparatus, or in combination with these instruction execution systems, devices or apparatuses. More specific examples of computer-readable media (a non-exhaustive list) include the following: an electrical connection with one or more wires (electronic device), a portable computer disk box (magnetic device), a random access memory (RAM), a read-only memory (ROM), an erasable and programmable read-only memory (EPROM or flash memory), a fiber optic device, and a portable compact disk read-only memory (CDROM). In addition, the computer-readable medium may even be paper or other suitable medium on which the program is printed, since the program may be obtained electronically, for example, by optically scanning the paper or other medium and then editing, interpreting or processing in other suitable ways if necessary, and then stored in a computer memory.

[0216] It should be understood that the various parts of the present application can be implemented by hardware, software, firmware or a combination thereof. In the above-mentioned embodiments, multiple steps or methods can be implemented by software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented by hardware, as in another embodiment, it can be implemented by any one of the following technologies known in the art or their combination: a discrete logic circuit having a logic gate circuit for implementing a logic function for a data signal, a dedicated integrated circuit having a suitable combination of logic gate circuits, a programmable gate array (PGA), a field programmable gate array (FPGA), etc.

[0217] A person skilled in the art may understand that all or part of the steps in the method for implementing the above-mentioned embodiment may be completed by instructing related hardware through a program, and the program may be stored in a computer-readable storage medium, which, when executed, includes one or a combination of the steps of the method embodiment.

[0218] In addition, each functional unit in each embodiment of the present application may be integrated into a processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above-mentioned integrated module may be implemented in the form of hardware or in the form of a software functional module. If the integrated module is implemented in the form of a software functional module and sold or used as an independent product, it may also be stored in a computer-readable storage medium.

[0219] The storage medium mentioned above may be a read-only memory, a magnetic disk or an optical disk, etc. Although the embodiments of the present application have been shown and described above, it can be understood that the above embodiments are exemplary and cannot be understood as limiting the present application. A person of ordinary skill in the art may change, modify, replace and modify the above embodiments within the scope of the present application.

Claims

1. An encryption method, characterized in that: include: Performing a logical operation on the user key of the target user and the chip key of the chip to obtain a target key; Encrypting the plaintext of the root key of the target user by using the target key to obtain the ciphertext of the root key; The ciphertext of the root key of the target user is written into the chip for storage.

2. The method according to claim 1, characterized in that The method further comprises: Reading the chip key from the chip in an encrypted manner, wherein the chip key is a key that is exclusive to the chip; and / or, In response to the write operation, the plain text of the user key and the root key is obtained, wherein the user key is a key exclusive to the target user.

3. The method according to claim 1, characterized in that The method further comprises: Writing the user key of the target user into the target space of the chip for storage; The target space of the chip prohibits external devices of the chip and registers of the chip from reading the user key of the target user, and prohibits repeated writing of the user key of the target user.

4. The method according to any one of claims 1 to 3, characterized in that The step of encrypting the plaintext of the root key of the target user by using the target key to obtain the ciphertext of the root key includes: The target key is used to encrypt the plaintext of the root key of the target user through a target encryption algorithm to obtain the ciphertext of the root key.

5. The method according to any one of claims 1 to 3, characterized in that The logic operation includes at least one of the following: an XOR operation and an odd-even value operation.

6. A decryption method, characterized in that: include: Performing a logical operation on the user key of the target user and the chip key of the chip to obtain a target key; The target key is used to decrypt the ciphertext of the root key of the target user stored in the chip to obtain the plaintext of the root key.

7. The method according to claim 6, characterized in that The method further comprises: The chip key of the chip is sent to the encryption machine in an encrypted manner, wherein the chip key is a key exclusive to the chip and is used to encrypt and decrypt the root key of the target user.

8. The method according to claim 6, characterized in that Before performing a logical operation on the user key of the target user stored in the chip and the chip key of the chip to obtain the target key, the method further includes: A user key of the target user is read from the target space of the chip. The target space of the chip prohibits external devices of the chip and registers of the chip from reading the user key of the target user, and prohibits repeated writing of the user key of the target user.

9. The method according to any one of claims 6 to 8, characterized in that The step of using the target key to decrypt the ciphertext of the root key of the target user stored in the chip to obtain the plaintext of the root key includes: The target key is used to decrypt the ciphertext of the root key of the target user stored in the chip through a target encryption algorithm to obtain the plaintext of the root key.

10. The method according to any one of claims 6 to 8, characterized in that The logic operation includes at least one of the following: an XOR operation and an odd-even value operation.

11. An encryption and decryption system, characterized in that: include: Chips and encryption machines; Wherein, the encryption machine is used to execute the method according to any one of claims 1 to 5; The chip is used to execute the method according to any one of claims 6-10.

12. An encryption device, characterized in that: include: A first operation module, used for performing a logic operation on a user key of a target user and a chip key of a chip to obtain a target key; An encryption module, used to encrypt the plain text of the root key of the target user using the target key to obtain the ciphertext of the root key; The first storage module is used to write the ciphertext of the root key of the target user into the chip for storage.

13. A decryption device, characterized in that: include: The second operation module is used to perform a logic operation on the user key of the target user and the chip key of the chip to obtain a target key; The decryption module is used to decrypt the ciphertext of the root key of the target user stored in the chip by using the target key to obtain the plaintext of the root key.

14. An electronic device, characterized in that: The method comprises a memory, a processor and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the method according to any one of claims 1 to 5 is implemented, or the method according to any one of claims 6 to 10 is implemented.

15. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, it implements the method according to any one of claims 1 to 5, or implements the method according to any one of claims 6 to 10.

16. A chip, characterized in that: The chip comprises a processing circuit configured to perform the method according to any one of claims 1-5.

17. A computer program product, characterized in that The method comprises a computer program, which, when executed by a processor, implements the method according to any one of claims 1 to 5, or implements the method according to any one of claims 6 to 10.

Images