Patent ID: 9536111
Date: 2017-01-03
CPC Classifications: G06F,G06Q,H04L

Claim:
1. A method comprising: establishing a secure environment within a secure processing unit, wherein establishing the secure environment comprises generating a first cryptographic key and a second cryptographic key, the first cryptographic key and second cryptographic key being unique to the secure processing unit; setting, in response to establishing the secure environment, a secure flag indicating that the secure processing unit is operating in a secure state; storing, in a first region of a secure memory associated with the secure processing unit, secret information based on a determination that the secure flag is set and a determination that a first indication in an erasure control register associated with the secure memory indicates that the first region will be erased in response to a change in a state of the secure flag; encrypting a first portion of the secret information using the first cryptographic key to generate an encrypted copy of the first portion of the secret information; storing, in a second region of the secure memory, the encrypted copy of the first portion of the secret information based on a determination that a second indication in the erasure control register indicates that the second region will be persisted in response to a change in the state of the secure flag; encrypting a second portion of the secret information using the second cryptographic key to generate an encrypted copy of the second portion of the secret information; storing, in the second region of the secure memory, the encrypted copy of the second portion of the secret information based on the determination that the second indication in the erasure control register indicates that the second region will be persisted in response to a change in the state of the secure flag; and implementing, by a monitoring module executing on the secure processing unit, at least one protective action in response to a determination that the secure processing unit has been tampered with, wherein the at least one protective action comprises erasing the first region of the secure memory containing the secret information based on the first indication.