Electrical computers and digital processing systems: memory – Address formation – Address mapping
Reexamination Certificate
1999-05-19
2001-07-24
Kim, Matthew (Department: 2186)
Electrical computers and digital processing systems: memory
Address formation
Address mapping
C711S163000, C711S152000, C713S152000
Reexamination Certificate
active
06266754
ABSTRACT:
TECHNICAL FIELD OF THE INVENTION
The technical field of this invention is secure computing systems, especially computer systems that may execute after manufacture field provided programs secured to prevent the user from unauthorized use of selected computer services. The computer system may also be functionally reprogrammable in a secure manner.
BACKGROUND OF THE INVENTION
There are currently many methods to deliver video programming to a users television besides over the air broadcast. Numerous service providers are available to supply this programming to television viewers. Most of these service providers vend a hierarchy of services. Typically there is a basic service for a basic fee and additional services available for an additional fee. The basic services typically include the broadcast network programming, cable superstations, music and sports programming. These basic services are typically supported by advertizing. These basic programming services thus operate on the same economics as over the air broadcast television. The additional services typically include the so called “premium” programming such as sports and movies. These premium programming services are typically not advertizer supported. These are perceived by the television user as higher value services and television users are willing to pay their service providers additional fees for these services. The service provider passes much of this additional fee to the content providers as their compensation for supplying the programming. There may be one or several tiers of these premium services made available by the service providers. At the top of this programming hierarchy is pay per view programming. Pay per view programming typically includes music concerts and sporting events perceived as time sensitive and highly valuable by the television users. Pay per view may also include video on demand, where the television user requests a particular movie be supplied. This hierarchy of service exists for all current alternative methods of program delivery including television cable, over the air microwave broadcast and direct satellite television.
Reception of such alternative programming services has required an additional hardware appliance beyond the user provided television receiver since the beginning of cable television. Initially this additional hardware appliance merely translated the frequency of the signal from the transmission frequency to a standard frequency used in broadcast television. Such a standard frequency is receivable by the user provided television receiver. This additional hardware appliance is commonly know as a “set top box” in reference to its typical deployment on top of the television receiver. Current set top boxes handle the hierarchy of security previously described.
In the past these set top boxes have been fixed function machines. This means that the operational capabilities of the set top boxes were fixed upon manufacture and not subject to change once installed. A person intending to compromise the security of such a set top box would need substantial resources to reverse engineer the security protocol. Accordingly, these such fixed function set top boxes are considered secure. The future proposals for set top boxes places the security assumption in jeopardy. The set top box currently envisioned for the future would be a more capable machine. These set top boxes are expected to enable plural home entertainment options such as the prior known video programming options, viewing video programming stored on fixed media such as DVD disks, Internet browsing via a telephone or cable modem and playing video games downloaded via the modem or via a video data stream. Enabling the set top box to be programmed after installation greatly complicates security. It would be useful in the art to have a secure way to enable field reprogramming of set top boxes without compromising the hierarchy of video programming security.
SUMMARY OF THE INVENTION
The invention is a secure computing system. A diagnostic program can check the security of a program. The program is stored at predetermined physical address in memory. Relocation of these physical addresses where the program is stored is prevented. The diagnostic program is loaded and checks the program at the predetermined physical address against a standard. The diagnostic program then indicates that the program is verified as secure if it meets the standard or non-verified as secure if it does not meet the standard.
If the program is verified as secure, then the diagnostic program permits normal operation of the program. If the program is not verified as secure, then the diagnostic program may take remedial action. The remedial action may be disabling normal operation of the program. The remedial action may be transmitting a predetermined message via the system modem to a predetermined phone number. The diagnostic program may also download another copy of the program via the modem.
The program is made non-relocatable using a special table look-aside buffer. The table look-aside buffer has a fixed virtual address register and a plurality of writable virtual address registers. Each of these virtual address registers has a comparator and a corresponding physical address register. The physical address register corresponding to the fixed virtual address register is also fixed. The fixed virtual address register and the fixed physical address register encompass the range of addresses where the program is stored. The fixed virtual address register and the fixed physical address register are preferably mask programmable in manufacture via a metal layer.
The multiplexer of the table look-aside buffer is responsive to an indication of a match by the comparator corresponding to the fixed virtual and physical address registers to lock out other virtual address regardless of any by any of other comparators. This is achieved using a plurality of AND gates. Each AND gate has an inverting input receiving the match signal from the first comparator and an noninverting input connected to a corresponding one of the other comparators. Each AND gate provides an output to the multiplexer. A match by the first comparator prevents transmission of a match by any of other comparator. Thus the computer cannot be programmed to relocate the program within the address space and disguise the relocation using virtual memory. This prevents the interference with the verification process.
The fixed virtual address register and the fixed physical address register may be registers ostensibly writable via the instruction set architecture. In this case, attempts to write to these registers do not change their contents. In addition, it is preferable that attempts to write to these registers produce no faults or exceptions. Alternatively, the fixed virtual address register and the fixed physical address register may not be accessible via the instruction set architecture.
REFERENCES:
patent: 5319758 (1994-06-01), Arai et al.
patent: 5628023 (1997-05-01), Bryant et al.
patent: 6006328 (1999-12-01), Drake
patent: WO 98/15086 (1998-04-01), None
Laczko, Sr. Frank L.
Steiss Donald E.
Brady III W. James
Kim Matthew
Marshall, Jr. Robert D.
Telecky , Jr. Frederick J.
Texas Instruments Incorporated
LandOfFree
Secure computing device including operating system stored in... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Secure computing device including operating system stored in..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Secure computing device including operating system stored in... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2530717