US5615263A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Dual purpose security architecture with protected internal operating system
Assignee: Intellectual Ventures II LLC
•
Filing: 1995-01-06
•
Granted: 1997-03-25
•
Expires: 2015-01-06
Abstract
Abstract A secure mode within a dual mode processor is implemented. In a general/external mode, the dual mode processor executes instructions provided from an external source. The instructions are supplied to the processor via input/output to the processor. Upon receiving a special software or hardware interrupt, the dual mode processor enters a secure/internal mode. The interrupt specifies a secure function stored in a read-only memory within the dual mode processor. Upon receiving such an interrupt, input/output to the dual mode processor is disabled. The identified secure function is executed by the processor. During execution of the secure function, any attempt to insert instructions not originating from the read-only memory are ignored. However, the processor may access data specifically identified by secure function being executed. Upon completion of performance of the secure function, an exit routine is executed to enable input/output to the processor and resume execution of instructions provided via input/output from the source external to the processor.
Inventors
- 👤 Richard J. Takahashi
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-29 04:57
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/30; G06F9/30181; G06F9/30189; G06F12/00; G06F12/14; G06F12/1416; G06F12/1425; G06F12/1433; G06F21/00; G06F21/70; G06F21/71; G06F21/74; G06F21/86; G06Q; G06Q20/00; G06Q20/30; G06Q20/32; G06Q20/322; G06Q20/3227
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
130 words
A computer implemented method for providing a secure mode within a processor, the method comprising the following steps: (a) executing instructions provided by a source external to the processor, the instructions being supplied to the processor via input/output to the processor; and, (b) upon receiving an interrupt specifying a secure function, performing the following substeps: (b. 1) disabling input/output to the processor, (b.2) performing the secure function specified by the interrupt, instructions for the secure function being stored in a read-only memory within the processor, and (b.3) upon completion of performing the secure function, executing an exit routine which enables input/output to the processor and allows resumption of execution of instructions provided by the source external to the processor, instructions for the exit routine being stored within the read-only memory.
Claim 2
Dependent Claim
130 words
A computer implemented method for providing a secure mode within a processor, the method comprising the following steps: (a) executing instructions provided by a source external to the processor, the instructions being supplied to the processor via input/output to the processor; and, (b) upon receiving an interrupt specifying a secure function, performing the following substeps: (b. 1) disabling input/output to the processor, (b.2) performing the secure function specified by the interrupt, instructions for the secure function being stored in a read-only memory within the processor, and (b.3) upon completion of performing the secure function, executing an exit routine which enables input/output to the processor and allows resumption of execution of instructions provided by the source external to the processor, instructions for the exit routine being stored within the read-only memory.
Claim 3
Dependent Claim
24 words
A computer implemented method as in claim 1 wherein in substep (b.3), enabling input/output to the processor is performed by a hardware control circuit.
Claim 4
Dependent Claim
66 words
A computer implemented method as in claim 1 additionally comprising the following steps: (c) upon the processor receiving a reset, performing the following step: (c.1) disabling input/output to the processor, (c.2) performing a self-test of the processor, instructions for the self test being stored in the read-only memory within the processor, and (c.3) upon successful completion of performing the self test function, executing the exit routine.
Claim 5
Dependent Claim
28 words
A computer implemented method as in claim 1, wherein substep (b.2) includes using an internal pointer identified by the interrupt, the internal pointer pointing to the secure function.
Claim 6
Dependent Claim
19 words
A computer implemented method as in claim 1 wherein substep (b.2) includes performing primitives which encrypt/decrypt a data stream.
Claim 7
Dependent Claim
109 words
A dual mode processor comprising: instruction execution means for executing instructions; input/output means for providing external instructions by a source external to the dual mode processor; and, read-only memory storing primitives for a secure operating system, the primitives including instructions which, when executed by the instruction execution means, perform the following functions: disable input/output to the dual mode processor, perform secure functions specified by interrupts to the dual mode processor, and upon completion of performing any of the secure functions, execute an exit routine which enables input/output to the dual mode processor and allows resumption of execution of instructions provided by the source external to the dual mode processor.
Claim 8
Dependent Claim
109 words
A dual mode processor comprising: instruction execution means for executing instructions; input/output means for providing external instructions by a source external to the dual mode processor; and, read-only memory storing primitives for a secure operating system, the primitives including instructions which, when executed by the instruction execution means, perform the following functions: disable input/output to the dual mode processor, perform secure functions specified by interrupts to the dual mode processor, and upon completion of performing any of the secure functions, execute an exit routine which enables input/output to the dual mode processor and allows resumption of execution of instructions provided by the source external to the dual mode processor.
Claim 9
Dependent Claim
43 words
A dual mode processor as in claim 6 additionally comprising specialty circuitry which, when called by the exit routine, enables input/output to the dual mode processor and which is used when entering a secure mode to disable input/output to the dual mode processor.
Claim 10
Dependent Claim
33 words
A dual mode processor as in claim 7 additionally including assurance hardware which provides physical and electrical security to the dual mode processor when the dual mode processor is in the secure mode.
Claim 11
Dependent Claim
66 words
A dual mode processor as in claim 6 wherein the read-only memory additionally stores primitives which, when executed by the instruction execution means, perform the following functions in response to the dual mode processor receiving a reset: disable input/output to the dual mode processor, perform a self-test of the dual mode processor, and upon successful completion of performing the self test function, execute the exit routine.
Claim 12
Dependent Claim
32 words
A dual mode processor as in claim 6, wherein the read-only memory includes internal pointers which point to secure functions, the internal pointers being indicated by interrupts to the dual mode processor.
Claim 13
Dependent Claim
19 words
A dual mode processor as in claim 6 wherein the secure functions include primitives which encrypt/decrypt a data stream.
Claim 14
Independent Claim
145 words
A system for performing a cryptographic function on data in a data stream, the system comprising: interception means for intercepting the data stream; and, a dual mode processor including, instruction execution means for executing instructions; input/output means for providing external instructions by a source external to the dual mode processor; read-only memory storing primitives for a secure operating system, the primitives including instructions which, when executed by the instruction execution means, perform the following functions: disable input/output to the dual mode processor, perform secure functions specified by interrupts to the dual mode processor, the special functions including primitives which encrypt/decrypt the data in the data stream, and upon completion of performing any of the secure functions, execute an exit routine which enables input/output to the dual mode processor and allows resumption of execution of instructions provided by the source external to the dual mode processor.
Claim 15
Independent Claim
145 words
A system for performing a cryptographic function on data in a data stream, the system comprising: interception means for intercepting the data stream; and, a dual mode processor including, instruction execution means for executing instructions; input/output means for providing external instructions by a source external to the dual mode processor; read-only memory storing primitives for a secure operating system, the primitives including instructions which, when executed by the instruction execution means, perform the following functions: disable input/output to the dual mode processor, perform secure functions specified by interrupts to the dual mode processor, the special functions including primitives which encrypt/decrypt the data in the data stream, and upon completion of performing any of the secure functions, execute an exit routine which enables input/output to the dual mode processor and allows resumption of execution of instructions provided by the source external to the dual mode processor.
Claim 16
Dependent Claim
29 words
A system as in claim 12, wherein the dual mode processor additionally includes specialty circuitry which, when called by the exit routine, enables input/output to the dual mode processor.
Claim 17
Dependent Claim
64 words
A system as in claim 12, wherein the read-only memory additionally stores primitives which, when executed by the instruction execution means, perform the following functions in response to the dual mode processor receiving a reset: disable input/output to the dual mode processor, perform a self-test of the dual mode processor, and upon successful completion of performing the self test function, execute the exit routine.
Claim 18
Dependent Claim
30 words
A system as in claim 12, wherein the read-only memory includes internal pointers which point to secure functions, the internal pointers being indicated by interrupts to the dual mode processor.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-03-24 | 2000-09-23 | 2001-03-25 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-03-24 | 2004-09-23 | 2005-03-25 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-03-24 | 2008-09-23 | 2009-03-25 | $7700.00 | Window Closed / Lapsed |