Patent ID: 8843769
Filing Date: 2014-09-23
Classification: G06F

Abstract:
1. A method for establishing a secure environment within a system on a chip (SoC), the method comprising: producing a set of security parameters by a configuration program executed by a processor within the SoC, wherein the configuration program is read from a first non-volatile memory within the SoC; creating a set of stored parameters in a second non-volatile memory within the SoC by writing the set of security parameters into the second non-volatile memory by the configuration program; sealing the second non-volatile memory by the configuration program such that the second non-volatile memory cannot be read or written by the processor after being sealed, such that the stored parameters can then be accessed only by control circuitry coupled to the second non-volatile memory; configuring security circuitry within the SoC using the stored parameters each time the SoC is initialized, wherein the security circuitry enforces the secure environment within the SoC; establishing one or more entry gates by storing a branch instruction to a target address at a known address in the first non-volatile memory prior to sealing the second non-volatile memory; and establishing a secure region within the first non-volatile memory by the security circuitry, wherein the secure region can only be accessed by first executing the branch instruction at the known address to the target address within the secure region by an access program.