Phytium Technology Co., Ltd.

Zhuo Ma

Ming Zhang

Yanzhao Feng

Yufeng Guo

Qiang Dou

Qingshan Zhu

Zhiqiang Chen

Yongpeng Liu

Yufeng Gou

Qiaoqiao Hu

A security architecture method suitable for a security architecture system is provided. The security architecture system includes a first execution environment subsystem and a secure element subsystem. The secure element subsystem is configured to store a key. A hardware isolation mechanism is arranged between the secure element subsystem and the first execution environment subsystem. The method includes: obtaining a key derivation request from the first execution environment subsystem, the key derivation request carrying key identifier information; and allowing a derived key to be generated by using the key corresponding to the key identifier information in response to the first execution environment subsystem have an access authority to access the key corresponding to the key identifier information. The derived key is used to perform a cryptographic operation.

Key management method, key management device, and computing device

A microprocessor includes a cryptographic engine and a controller. The cryptographic engine is configured to execute a cryptographic algorithm. The controller is connected to the cryptographic engine. The controller is configured to receive an access request from a first execution environment. The access request accesses the cryptographic engine to execute the cryptographic algorithm. The access request includes at least identification information. The identification information indicates that the access request is from the first execution environment. The first execution environment is an execution environment of a number N execution environments. N is an integer greater than or equal to 1. The controller is further configured to, based on the identification information, instruct the cryptographic engine to execute the cryptographic algorithm that needs to be executed required by the access request.

Microprocessor, data processing method, electronic device, and storage medium

A security architecture system includes a plurality of subsystems. The plurality of subsystems include a secure element subsystem. A first subsystem of the plurality of subsystems includes a trusted computing platform that has a trusted platform control module. The first subsystem is configured to, for a running object in one or more subsystems other than the first subsystem in the plurality of subsystems, use the trusted platform control module to perform security measurement on the running object based on a measurement strategy and a measurement benchmark value to obtain a measurement result. The measurement result is used to control a running state of the running object in one or more subsystems other than the first subsystem in the plurality of subsystems.

Security architecture system, security management method, and computing device

Growing community of inventors

Tianjin, China

Zhuo Ma