Data protection system and data protection method

Abstract

The invention discloses a data protection system and a data protection method. The data protection system comprises a judgment device and a second storage unit. The judgment device can be used for receiving an execution instruction, judging whether the execution instruction corresponds to a data protection range or a non-data protection range of a first storage unit, and controlling a data adjustment operation according to the judgment result. The second storage unit can be coupled to the judgment device and is used for storing common data and important data. If the execution instruction and the data adjustment operation correspond to the non-data protection range, only the data adjustment operation is allowed to access the common data, and the data adjustment operation is forbidden to access the important data.

Description

Technical Field

[0001] The present invention relates to a data protection system and a data protection method, and more particularly to a data protection system and a data protection method comprising a judgment device and capable of protecting important data from being illegally modified. Background Art

[0002] When using memory, program code is retrieved, processed by a processor, and data at specific addresses in the memory is accessed based on the results of the processing. If the memory contains important information, such as passwords or identity authentication information, protecting this information is a major challenge in the field of information security.

[0003] For example, an unauthorized intruder could modify program code and then execute the modified code to access memory locations containing important data, or tamper with authentication processes that should have been executed to prevent them from executing, thereby breaking the security mechanism. Therefore, the field still lacks a suitable solution to properly protect data. Summary of the Invention

[0004] The object of the present invention is to provide a data protection system and a data protection method.

[0005] The present invention provides a data protection system comprising a determination device and a second storage unit. The determination device is configured to receive an execution instruction, determine whether the execution instruction corresponds to a data protection range or a non-data protection range of a first storage unit, and control a data adjustment operation accordingly. The second storage unit is coupled to the determination device and configured to store normal data and critical data. If the execution instruction and the data adjustment operation correspond to the data protection range, the data adjustment operation is permitted to access the normal data and the critical data.

[0006] The present invention also provides a data protection system comprising a determination device and a second storage unit. The determination device is configured to receive an execution instruction, determine whether the execution instruction corresponds to a data protection range or a non-data protection range of a first storage unit, and control a data adjustment operation accordingly. The second storage unit is coupled to the determination device and configured to store normal data and critical data. If the execution instruction and the data adjustment operation correspond to the non-data protection range, the data adjustment operation is only permitted to access the normal data, while access to the critical data is prohibited.

[0007] The present invention further provides a data protection method, comprising sending an execution instruction to a determination device, the determination device determining whether the execution instruction corresponds to a data protection range or a non-data protection range of a first storage unit, and the determination device allowing or prohibiting a data adjustment operation to access important data in a second storage unit based on whether the execution instruction corresponds to the data protection range or the non-data protection range of the first storage unit. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] Figure 1 FIG. 1 is a schematic diagram of a data protection system in an embodiment.

[0009] Figure 2 for Figure 1 Schematic diagram of the data protection system, where instruction addresses, program codes, execution instructions, and data adjustment operations correspond to data protection ranges.

[0010] Figure 3 for Figure 1 Schematic diagram of a data protection system in which instruction addresses, program codes, execution instructions, and data adjustment operations correspond to a non-data protection range.

[0011] Figure 4 FIG. 4 is a flow chart of a data protection method for a data protection system in an embodiment.

[0012] Explanation of the accompanying drawings: 100 - data protection system; 110 - first storage unit; 110A - non-data protection range; 110B - data protection range; 120 - second storage unit; 120A - first area; 120B - second area; 130 - processor; 140 - judgment device; 400 - data protection method; 410 to 460 - steps; A - instruction address; C - program code; DC - important data; DN - normal data; OP - data adjustment operation. DETAILED DESCRIPTION

[0013] During the development phase, program code stored in memory (e.g., flash memory) can be updated or modified as needed to enable a processor (e.g., a microprocessor) to execute various program codes. After development is complete, the program code (e.g., firmware) can be burned into the memory. When specific conditions are met, the program code can be executed to modify important information, such as passwords or authentication-related data. Since the program code can still be modified after leaving the factory, an unauthorized intruder could update the program code so that the processor executes the updated program code even when specific conditions are not met, thereby modifying important information.

[0014] To properly protect important data, a trusted zone can be established within the overall system. Within this zone, secure processors, secure memory, encryption hardware, a secure real-time timer, a secure boot program, and a secure software manager can be installed. Permissions can then be set to ensure that only those with the required permissions can access important data. While feasible, this solution requires more resources, such as the use of dual processors, resulting in more complex circuitry. A more simplified solution will be described below.

[0015] Figure 1 FIG. 1 is a schematic diagram of a data protection system 100 in an embodiment. The data protection system 100 may include a first storage unit 110 , a second storage unit 120 , a processor 130 , and a determination device 140 .

[0016] The first storage unit 110 may include a non-data protection range 110A and a data protection range 110B, wherein the non-data protection range 110A stores modifiable program codes, and the data protection range 110B stores unmodifiable program codes.

[0017] Before leaving the factory, the program code in the data protection range 110B can be modified. However, after leaving the factory, the lock function can be activated by burning a fuse or writing a register to set the program code in the data protection range 110B to not allow modification.

[0018] The second storage unit 120 may include a first area 120A and a second area 120B, wherein the first area 120A stores general data DN and the second area 120B stores important data DC. The important data DC may include passwords or identity authentication related data.

[0019] The processor 130 may be coupled to the first storage unit 110 and the determination device 140 to generate an execution instruction R based on the program code C from the first storage unit 110. The processor 130 may output an instruction address A to the first storage unit 110. The first storage unit 110 may provide the program code C to the processor 130 based on the instruction address A. The processor 130 may process the retrieved program code C to generate the execution instruction R, and then output the execution instruction R to the determination device 140. The processor 130 may be a microprocessor or other suitable processor.

[0020] The determination device 140 may be coupled to the processor 130 and the second storage unit 120. The determination device 140 may perform a data adjustment operation OP according to the execution instruction R. The determination device 140 may include an application specific integrated circuit (ASIC). The determination device 140 may include appropriate software, hardware, and / or firmware.

[0021] The determination device 140 may determine whether the execution command R corresponds to the data protection range 110B or the non-data protection range 110A of the first storage unit 110 to allow or prohibit the data adjustment operation from accessing the important data DC of the second storage unit 120 .

[0022] If the execution command R and the data adjustment operation OP correspond to the data protection range 110B, the data adjustment operation OP is allowed to access the normal data DN and the important data DC. If the execution command R and the data adjustment operation OP correspond to the non-data protection range 110A, the data adjustment operation OP is only allowed to access the normal data DN and is prohibited from accessing the important data DC.

[0023] Figure 2 for Figure 1 Schematic diagram of the data protection system 100 , in which the instruction address A, the program code C, the execution instruction R, and the data adjustment operation OP correspond to the data protection range 110B. Figure 2 In FIG, instruction address A corresponds to data protection range 110B. Therefore, Figure 2 In the example, the program code C comes from the data protection range 110B, and the execution instruction R and the data adjustment operation OP correspond to the data protection range 110B. Therefore, the data adjustment operation OP is allowed to access the normal data DN and the important data DC. For example, Figure 2 In the data adjustment operation OP is allowed to access important data DC including passwords and identity authentication data.

[0024] Figure 3 for Figure 1 FIG. 1 is a diagram showing a data protection system 100 in which the instruction address A, the program code C, the execution instruction R, and the data adjustment operation OP correspond to the non-data protection range 110A. Figure 3 In FIG, the instruction address A corresponds to the non-data protection range 110A. Therefore, Figure 3 In the example, the program code C comes from the non-data protection range 110A, and the execution instruction R and the data adjustment operation OP correspond to the non-data protection range 110A. Therefore, only the data adjustment operation OP is allowed to access the normal data DN, and the data adjustment operation OP is prohibited from accessing the important data DC. For example, Figure 3 In the process, data adjustment operation OP is prohibited from accessing important data DC including passwords and identity authentication information.

[0025] Figure 1 、 Figure 2 and Figure 3 In the embodiment of the present invention, the first storage unit 110 can be a first portion of the memory, and the second storage unit 120 can be a second portion of the memory. In other words, the first storage unit 110 and the second storage unit 120 can be different portions of the same memory.

[0026] According to another embodiment, Figure 1 、 Figure 2 and Figure 3 In the embodiment, the first storage unit 110 may be located in a first memory, and the second storage unit 120 may be located in a second memory different from the first memory. In other words, the first storage unit 110 and the second storage unit 120 may be located in two different memories, respectively.

[0027] The non-data protection range 110A of the first storage unit 110 can be implemented using a flash memory. The data protection range 110B of the first storage unit 110 can be implemented using a flash memory or a read-only memory (ROM). The second storage unit 120 can be implemented using a flash memory.

[0028] Figure 4 4 is a flow chart of a data protection method 400 used in the data protection system 100 according to an embodiment. The data protection method 400 may include the following steps:

[0029] Step 410: The processor 130 sends the command address A to the first storage unit 110;

[0030] Step 420: The processor 130 receives the program code C from the first storage unit 110;

[0031] Step 430: The processor 130 generates an execution instruction R according to the program code, and sends the execution instruction R to the determination device 140;

[0032] Step 440: Does the determination device 140 determine whether the execution command R corresponds to the non-data protection range 110A or the data protection range 110B of the first storage unit 110? If the execution command R corresponds to the non-data protection range 110A of the first storage unit 110, the process proceeds to step 450. If the execution command R corresponds to the data protection range 110B of the first storage unit 110, the process proceeds to step 460.

[0033] Step 450 : The determining device 140 only allows the data adjustment operation OP to access the normal data DN of the second storage unit 120 according to the execution command R, and prohibits the data adjustment operation OP from accessing the important data DC of the second storage unit 120 .

[0034] Step 460 : The determining device 140 allows the data adjustment operation OP to access the normal data DN and the important data DC in the second storage unit 120 according to the execution command R.

[0035] In step 440, if the executed instruction R corresponds to the non-data protection range 110A of the first storage unit 110, it indicates that the program code C is unprotected program code, and therefore the data adjustment operation OP is prohibited from accessing the important data DC in the second storage unit 120. Therefore, the important data DC can be protected to prevent the important data DC from being unintendedly accessed.

[0036] In step 440 , if the execution instruction R corresponds to the data protection range 110B of the first storage unit 110 , it means that the program code C is protected program code, so the data adjustment operation OP is allowed to access the important data DC of the second storage unit 120 .

[0037] The data protection system 100 and the data protection method 400 can prevent intruders (e.g., hackers) from illegally modifying the program code in the first storage unit 110 and executing the modified program code, thereby illegally accessing the memory area storing important data. Intruders can also be prevented from illegally tampering with the authentication process that should have been executed, thereby breaking the confidentiality mechanism. Therefore, the embodiments can provide a protection mechanism that is beneficial for improving information security.

[0038] The above description is only a preferred embodiment of the present invention. All equivalent changes and modifications made according to the claims of the present invention should fall within the scope of the present invention.

Claims

1. A data protection system, characterized in that: Include: a determination device for receiving an execution instruction, determining whether the execution instruction corresponds to a data protection range or a non-data protection range of a first storage unit, and controlling a data adjustment operation accordingly; and a second storage unit, coupled to the determination device, for storing common data and important data; If the execution instruction and the data adjustment operation correspond to the data protection range, the data adjustment operation is allowed to access the common data and the important data.

2. A data protection system, characterized in that: Include: a determination device for receiving an execution instruction, determining whether the execution instruction corresponds to a data protection range or a non-data protection range of a first storage unit, and controlling a data adjustment operation accordingly; and a second storage unit, coupled to the determination device, for storing common data and important data; If the execution instruction and the data adjustment operation correspond to the non-data protection range, only the data adjustment operation is allowed to access the common data, and the data adjustment operation is prohibited from accessing the important data.

3. The data protection system according to claim 1 or 2, wherein: Also includes: A processor is coupled to the first storage unit and the determination device, and is used to generate the execution instruction according to a program code from the first storage unit.

4. The data protection system according to claim 1 or 2, wherein: The determining device includes an application specific integrated circuit.

5. The data protection system according to claim 1 or 2, wherein: The first storage unit is a first portion of a memory, and the second storage unit is a second portion of the memory.

6. The data protection system according to claim 1 or 2, wherein: The first storage unit is located in a first memory, and the second storage unit is located in a second memory different from the first memory.

7. The data protection system according to claim 1 or 2, wherein: After leaving the factory, a startup function is locked by burning a fuse and / or writing a register, so that a program code in the data protection range is set to not allow modification.

8. A data protection method, characterized in that: Include: sending an execution instruction to a determination device; The determining device determines whether the execution instruction corresponds to a data protection range or a non-data protection range of a first storage unit; and The determining device allows or prohibits a data adjustment operation to access important data in a second storage unit according to the data protection range or the non-data protection range of the first storage unit corresponding to the execution instruction.

9. The data protection method according to claim 8, wherein: If the determination device corresponds to the data protection range of the first storage unit according to the execution instruction, the data adjustment operation is allowed to access the important data in the second storage unit.

10. The data protection method according to claim 8, wherein: If the determination device corresponds to the non-data protection range of the first storage unit according to the execution instruction, the data adjustment operation is prohibited from accessing the important data in the second storage unit.

11. The data protection method according to claim 8, wherein: Also includes: receiving a program code from the first storage unit; and The execution instruction is generated according to the program code.

12. The data protection method according to claim 8, wherein: Also includes: After leaving the factory, a startup function is locked by burning a fuse and / or writing a register, so that a program code in the data protection range is set to not allow modification.

Images