Patent ID: 8539602

Claim:
A method for establishing multiple secure environments within a system on a chip (SoC), the method comprising: defining a first secure region within a non-volatile memory in the SoC by receiving a first set of parameters written into a parameter region of the first secure region; defining a second secure region within the non-volatile memory of the SoC by receiving a second set of parameters written into a parameter region of the second secure region; initializing a security module each time the SoC is powered on by transferring the first set of parameters and the second set of parameters from the parameter regions to the security module in a manner that does not expose the first set of parameters or the second set of parameters to a program being executed by the processor; and enforcing the multiple secure regions of the SoC by the security module according to the first and second sets of parameters, wherein the first set of parameters is protected from change while enforcement of the first secure region is enabled and the second set of parameters is protected from change while enforcement of the second secure region is enabled.