Microprocessor, data processing method, electronic device, and storage medium
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer systems face challenges in efficiently managing cryptographic operations across multiple execution environments with varying security requirements, leading to performance waste, high cost, and potential security hazards due to shared cryptographic engines and data storage.
Innovation Solution
A microprocessor with a cryptographic engine and controller that distinguishes and prioritizes access requests from different execution environments, using isolated buffer units and data cache groups to execute cryptographic algorithms securely and efficiently, avoiding conflicts and ensuring data integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a shared cryptographic engine is used across multiple execution environments, then device complexity is reduced and resource utilization improves, but security reliability deteriorates due to potential data leakage and conflicts between environments with different security requirements
Solution Approach 1:
The patent divides the cryptographic engine into multiple isolated buffer units, where each buffer unit corresponds to a specific execution environment. This segmentation allows the single cryptographic engine to serve multiple environments while maintaining security isolation through dedicated buffer spaces for each environment, preventing data leakage between environments with different security requirements.
2Productivity
If multiple execution environments share the same cryptographic engine without isolation, then resource utilization increases, but harmful factors increase due to potential collisions and security hazards
Solution Approach 1:
The cryptographic engine is segmented into multiple buffer units, with each buffer unit dedicated to a specific execution environment. This allows efficient resource utilization by enabling the cryptographic engine to serve multiple environments, while simultaneously preventing collisions and security hazards through physical isolation of data buffers for each environment.
Solution Approach 2:
Each buffer unit within the cryptographic engine is assigned specific local quality characteristics tailored to its corresponding execution environment's security requirements. High-security environments receive buffer units with stricter access controls and isolation mechanisms, while lower-security environments use buffer units with相应 relaxed requirements, optimizing both security and resource utilization.
3Reliability
If cryptographic operations are isolated for each execution environment, then security reliability improves, but device complexity increases due to multiple buffer units and management overhead
Solution Approach 1:
The cryptographic engine is designed as a universal multi-functional unit that can serve multiple execution environments through its multiple buffer units. Each buffer unit maintains security isolation specific to its environment while the cryptographic engine itself provides common cryptographic processing capabilities, reducing overall device complexity compared to having separate cryptographic engines for each environment.
Data Source
AI summary
A microprocessor includes a cryptographic engine and a controller. The cryptographic engine is configured to execute a cryptographic algorithm. The controller is connected to the cryptographic engine. The controller is configured to receive an access request from a first execution environment. The access request accesses the cryptographic engine to execute the cryptographic algorithm. The access request includes at least identification information. The identification information indicates that the access request is from the first execution environment. The first execution environment is an execution environment of a number N execution environments. N is an integer greater than or equal to 1. The controller is further configured to, based on the identification information, instruct the cryptographic engine to execute the cryptographic algorithm that needs to be executed required by the access request.