Patent ID: 8656191

Claim:
A secure system-on-chip for processing data, the system-on-chip comprising: at least a central processing unit (CPU); an input channel connected to the CPU, the input channel including an input encryption module; an output channel connected to the CPU, the output channel including an output decryption module; a CPU encryption module connected to the CPU; a CPU decryption module connected to the CPU; at least one key register connected to the input encryption module and the output decryption module; and a memory connected to the CPU; wherein said input encryption module is configured to add an internal encryption layer to all incoming data, said output decryption module is configured to remove the internal encryption layer on all outgoing data, and said central processing unit is configured to perform the steps of receiving encrypted data from the input encryption module; storing the encrypted data in the memory; when processing the stored data, reading the stored data from the memory, requesting the removal of the internal encryption layer by the CPU decryption module, processing the data and requesting encryption of the result by the CPU encryption module to add the internal encryption layer and storing the encrypted result; and outputting the result stored in the memory to the output decryption module for removing the internal encryption layer and outputting the result via the output channel; wherein data encrypted with the internal encryption layer is never present outside the system-on-chip.