Root key generation and isolation method for multiple systems and root key module

Abstract

The invention discloses a root key generation and isolation method for multiple systems and a root key module. The method comprises the following steps: firstly, combining feature information corresponding to a system needing to generate a key with a chip root secret key to form secret key source data corresponding to the system, and then carrying out key generation operation on the key source data to obtain system root key data corresponding to the system. In this way, the obtained root keys corresponding to all the systems can be kept independent of one another due to the fact that the generated feature information is different. By applying the virtualization design of the invention, different system root keys can be generated for different systems, and security key isolation between different systems can be effectively realized. Because each system does not need to separately call the chip root key for encryption, the usage scenario of the chip root key is almost limited to the situation that the chip root key needs to be used when only the system root key is generated. Therefore, the probability of leakage of the root key information of the chip can be reduced.

Description

technical field [0001] The invention relates to the field of data security of a system on chip (SoC), in particular to a root key security technology. Background technique [0002] Virtualization (English: Virtualization) is a resource management technology, which abstracts and transforms physical resources, such as computing logic, interfaces, and storage resources, and presents them, breaking the inseparable barriers between physical structures, so that users can use Use these physical resources in a better way than the original configuration. These new virtual portions of resources are not constrained by how existing resources are set up, nor by geography or physical configuration. Such virtualized resources generally include the management of computing power and data storage. [0003] Nowadays, more and more chips can implement virtualization. The advantage of virtualization is that multiple virtual systems can run. These virtual systems have their own computing resour...

AI Technical Summary

Problems solved by technology

For the situation where multiple virtual systems need to be run on the same SoC system, if multiple virtual systems share the same root key, this is not only not conducive to the isolation and protection of data between systems, but also inevitably increases the usage scenarios of the root key And the frequency of use increases the probability of chip root key information entropy leakage

Images