Processor Secure Mode Transition for Software Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Processing systems used over networks or as shared resources face security issues due to unauthorized software execution and potential hacking, as conventional security measures can be compromised if the software is tampered with or not authenticated prior to execution.
Innovation Solution
A secure processing environment is established by transitioning from a trusted decryption function to a content authentication function, where a processor enters a secure mode, using trusted decryption code stored in secure memory to decrypt and authenticate software and data, ensuring only authorized data access and execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional security measures are implemented in processing systems, then processing speed and functionality are maintained, but security vulnerabilities arise when software is tampered with or not authenticated
Solution Approach 1:
The system performs authentication and decryption operations before executing or processing the software. A trusted decryption function is executed first to verify the authenticity of the software, and only after successful authentication is the software allowed to run. This preliminary security check prevents unauthorized or tampered software from being executed, resolving the contradiction between maintaining processing functionality and preventing security vulnerabilities.
2Reliability
If the processor enters a secure mode to prevent external data access, then security is improved, but processing capability and data accessibility are reduced
Solution Approach 1:
The processor dynamically transitions between different operational modes - a secure mode for authentication and decryption operations, and a normal processing mode for executing authenticated software. The system enters secure mode temporarily to perform security functions, then switches to normal mode to maintain full processing capability. This dynamic mode switching allows the system to achieve both high security during authentication and high productivity during software execution.
Data Source
AI summary
A processor and associated local memory are capable of operative connection to a main memory such that data may be read from the main memory for use in the local memory, and the processor is operable to carry out actions, including: entering a secure mode of operation where externally initiated requests to read data from or write data into the processor are not serviced but internally initiated data transfers are serviced; reading a decryption program from a storage medium into the local memory of the processor; reading an encrypted authentication program into the local memory of the processor; decrypting the encrypted authentication program using a decryption program; and transitioning functionality of the processor from the decryption program to the authentication program.