Secure Mode Processing Unit Core for Multi-Service Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current processing units are limited to processing only one secure service at a time in secure mode, leading to inefficiencies and performance issues when switching between general and secure modes.
Innovation Solution
A method and device that allow a processing unit's core to remain in secure mode and process multiple secure services consecutively, using a storage unit to queue commands and only return to general mode after all queued services are processed, with the option to implement a time slice mechanism for multi-threading.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the core returns to general mode after processing each secure service, then security isolation is maintained, but processing efficiency deteriorates due to frequent mode switching
Solution Approach 1:
The patent allows the core to remain in secure mode and process multiple secure services consecutively without returning to general mode between them. This continuous operation in secure mode eliminates frequent mode switching overhead while maintaining security isolation through service ID-based identification and processing of individual secure services within the same secure mode session.
2Productivity
If the core processes multiple secure services in one secure mode session, then processing efficiency improves, but service management complexity increases
Solution Approach 1:
The patent segments secure service management by introducing service ID identification for each secure service. The core identifies and processes each secure service individually using its service ID, even while remaining in the same secure mode session. This segmentation approach enables efficient batch processing of multiple secure services while maintaining clear management boundaries through service ID-based identification.
Solution Approach 2:
The patent introduces service ID as an intermediary mechanism between the core and multiple secure services. The service ID acts as a identifier that enables the core to distinguish and manage different secure services within a single secure mode session, simplifying the management complexity by providing a standardized interface for service identification and processing.
3Stability of the object's composition
If the core waits for one secure service to complete before starting another, then service processing order is maintained, but wait time increases
Solution Approach 1:
The patent enables preliminary loading and identification of multiple secure services with their respective service IDs before the core enters secure mode. Once in secure mode, the core can efficiently process multiple secure services in sequence using the pre-established service ID identifiers, reducing wait time by avoiding repeated mode transitions while maintaining stable service processing order through systematic service ID-based management.
Data Source
AI summary
A method of processing secure services is provided. The method is applied to a processing unit of a computing device to control the processing unit to process multiple secure services. The computing device includes a storage unit. The method includes: controlling a core of the processing unit to perform following steps in a secure mode: accessing the storage unit to obtain a first command that includes first secure service information, processing a first secure service associated with the first secure service information according to the first command, and accessing the storage unit to obtain a second command that includes second secure service information. During a period from a time point that the core accesses the storage unit to obtain the first to a time point that the core accesses the second command, the core is controlled to stay in the secure mode.