Patent ID: 8370641

Claim:
An apparatus providing for a secure execution environment, comprising: a microprocessor, configured to execute non-secure application programs and a secure application program, wherein said non-secure application programs are accessed from a system memory via a system bus, said microprocessor comprising: secure execution mode initialization logic, configured to provide for initialization of a secure execution mode within said microprocessor for execution of said secure application program, wherein said secure execution mode initialization logic employs an asymmetric key algorithm to decrypt an enable parameter that directs said microprocessor to enter said secure execution mode; and an authorized public key, configured for employment by a cryptographic unit within said microprocessor to decrypt said enable parameter, said enable parameter having been encrypted according to said asymmetric key algorithm using an authorized private key that corresponds to said authorized public key; and a secure non-volatile memory, coupled to said microprocessor via a private bus, configured to store said secure application program following initialization of said secure execution mode, wherein, following successful decryption of said enable parameter, said microprocessor fetches said secure application program, employs said authorized public key to decrypt said secure application program, encrypts said secure application program using a processor unique key according to a symmetric key algorithm, and stores an encrypted version of said secure application program in said secure non-volatile memory, and wherein said processor unique key is programmed into said microprocessor at fabrication time.