Patent ID: 9239934
Filing Date: 2016-01-19
CPC Classification: G06F

Claim Text:
1. A mobile computing system for providing a high-security execution environment, comprising: one owner execution environment including an operating system (OS), a plurality of applications, and an owner hardware security module device driver; at least one user execution environment including an OS, a plurality of applications, and a user hardware security module device driver; a hardware security module configured to perform hardware security functions including integrity check of the owner execution environment or the user execution environment, authentication of an owner or a user, storage of data including personal information, cryptographic operation for an application requiring security, and generation and storage of a cryptographic key; and a virtual hardware security module device driver configured to perform execution environment management including setting of the user execution environment and notify the hardware security module of whether the execution environment is the owner execution environment or the user execution environment wherein the hardware security module comprises a byte of non-volatile memory including eight bits assigned as flag bits comprising a first flag bit indicating whether the execution environment is the owner execution environment and one or more other flag bits that respectively indicate one or more user execution environments according to the number of one or more user execution environments; wherein the flag bits are used to determine whether a command transferred to the hardware security module has been issued in the owner execution environment or the one or more user execution environments, and the hardware security module operates according to the determination to perform the hardware security functions for the owner execution environment or the respective one or more user execution environments.