Phytium Technology Co., Ltd.

Qiang Dou

Zhuo Ma

Ming Zhang

Yanzhao Feng

Yufeng Guo

Xiaoyan Liu

Jun Gao

Yuan Yuan

Qingshan Zhu

Boqing You

Longpeng Sun

Xiaoli Zou

Jiahong Yuan

Chengyi Zhang

Shuijingtao Li

Zhe Ding

Hongbo Xue

Xiaofeng Wang

Wenzhe Li

Xiaodao Wang

Zhiqiang Chen

Tianlei Zhao

Wenhui Cao

Yujiao Wang

Shuaike Zheng

Qiaoqiao Hu

Yongpeng Liu

Yufeng Gou

A microprocessor includes a cryptographic engine and a controller. The cryptographic engine is configured to execute a cryptographic algorithm. The controller is connected to the cryptographic engine. The controller is configured to receive an access request from a first execution environment. The access request accesses the cryptographic engine to execute the cryptographic algorithm. The access request includes at least identification information. The identification information indicates that the access request is from the first execution environment. The first execution environment is an execution environment of a number N execution environments. N is an integer greater than or equal to 1. The controller is further configured to, based on the identification information, instruct the cryptographic engine to execute the cryptographic algorithm that needs to be executed required by the access request.

Microprocessor, data processing method, electronic device, and storage medium

A security architecture system includes a plurality of subsystems. The plurality of subsystems include a secure element subsystem. A first subsystem of the plurality of subsystems includes a trusted computing platform that has a trusted platform control module. The first subsystem is configured to, for a running object in one or more subsystems other than the first subsystem in the plurality of subsystems, use the trusted platform control module to perform security measurement on the running object based on a measurement strategy and a measurement benchmark value to obtain a measurement result. The measurement result is used to control a running state of the running object in one or more subsystems other than the first subsystem in the plurality of subsystems.

Security architecture system, security management method, and computing device

A method and a device for securing a cache against side channel attacks are provided. An allocator identifier ALLOCATOR field is added to each cache entry in the present disclosure. Whenever an entry is allocated in the cache, the identifier of the software domain currently running on the processor is filled into the ALLOCATOR field of the allocation entry. When accessing the cache, the cache entry can be hit only if the identifier of the software domain currently running on the processor is identical to the ALLOCATOR field in the cache entry. If the cache entry to be replaced is invalid or its ALLOCATOR field is identical to the identifier of the software domain currently running on the processor, then the existing entry in the cache is replaced directly; otherwise, the entire cache is emptied.

Cache securing method and device capable of resisting side channel attack

Growing community of inventors

Tianjin, China

Qiang Dou