Interrupt Morphing Circuit for Execution Environment Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computing systems face challenges in securely and efficiently handling large amounts of software program code and data for disparate applications, particularly in ensuring secure, real-time, and energy-efficient processing across various execution environments.
Innovation Solution
The implementation of an electronic configuration circuit with a processing circuit that responds to interrupt requests in multiple execution environments, utilizing configuration registers to differentiate between ordinary and urgent interrupt requests, allowing for dynamic power management and interrupt routing to optimize performance and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the processor operates in multiple execution environments with different privilege levels, then security is improved, but device complexity increases
Solution Approach 1:
The processor is segmented into multiple execution environments (secure and non-secure) with distinct privilege levels. Each environment has its own interrupt handling capabilities, allowing security-critical operations to be isolated in the secure environment while maintaining system functionality. This segmentation enables enhanced security without requiring complete redesign of the entire processor architecture.
Solution Approach 2:
The secure execution environment acts as an intermediary layer between hardware resources and non-secure software applications. The secure environment monitors and controls access to critical resources, mediating between the operating system running in non-secure mode and the underlying hardware, thereby enhancing security without requiring direct modification of all system components.
2Speed
If interrupt requests are handled with high priority in secure mode, then real-time performance is improved, but energy consumption increases
Solution Approach 1:
The interrupt handling mechanism is made dynamic by allowing the processor to switch between different interrupt priority schemes depending on the active execution environment. When the secure environment is active, secure interrupts are given high priority for real-time performance. When non-secure environment is active, the priority scheme adapts accordingly, reducing energy consumption by avoiding unnecessary high-priority interrupt processing when security-critical real-time response is not required.
Solution Approach 2:
The interrupt priority parameters are changed based on the active execution environment. The system dynamically adjusts interrupt priority levels and response characteristics according to whether the secure or non-secure environment is currently active, enabling optimal balance between real-time performance and energy consumption for each operational context.
3Measurement precision
If configuration registers are used to differentiate interrupt types, then interrupt handling precision is improved, but device complexity increases
Solution Approach 1:
The configuration registers serve multiple functions: they identify interrupt sources, differentiate between secure and non-secure interrupt types, and control interrupt routing to appropriate handling routines. This multi-functionality allows precise interrupt handling without proportionally increasing device complexity, as the same register structures accomplish multiple classification and control tasks.
Data Source
AI summary
An electronic configuration circuit includes a processing circuit (2610) operable for executing instructions and responsive to interrupt requests and operable in a plurality of execution environments (EE) selectively wherein a said execution environment (EE) is activated or suspended, a first configuration register (SCR) coupled to the processing circuit (2610) for identifying the interrupt request as an ordinary interrupt request IRQ when the execution environment (EE) is activated (EE_Active); and a second configuration register (SSM_FIQ_EE_y) for associating an identification of that execution environment (EE) with the same interrupt request, the processing circuit (2610) coupled (5910) to the second configuration register (SSM_FIQ_EE_y) to respond to the same interrupt request as a more urgent type of interrupt request when that execution environment (EE) is suspended (5920).