CN103347017A - Data processing method and system on chip - Google Patents

Abstract

Embodiments of the present invention relate to a data processing method and a system-on-a-chip. The method includes: encrypting the embedded data of the application program, and obtaining the encrypted data of the application program after the encryption; when the application program is running, the application program Decrypt the encrypted data, obtain the decrypted data of the application program after the decryption, compare the embedded data of the application program with the decrypted data of the application program, and continue to run when the embedded data of the application program is the same as the decrypted data of the application program application, stop running the application when the embedded data of the application and the decrypted data of the application are different. Therefore, the present invention increases the difficulty of deciphering the application program and provides protection for the application program.

Description

Data processing method and system on chip

technical field

The invention relates to the technical field of communication, in particular to a data processing method and a system on chip.

Background technique

With the development of communication technology, embedded systems are more and more widely used, but there are few security protection means for application (Application, APP) programs of embedded systems. Therefore, how to encrypt the APP program of the embedded system and prevent plagiarism by other product designers has become a very important issue.

At present, the encryption method adopted for the APP program of the embedded system is: save the APP program in plain text in the flash memory (Flash Memory), and the peripheral protection chip and the APP program have the same encryption algorithm and key built in. When the APP program is running, the CPU regularly sends random numbers to the peripheral protection chip. After the protection chip receives the random number, it encrypts the random number with the built-in encryption algorithm and key, and returns the encrypted result to the CPU. , the CPU compares the received encrypted result with the encrypted result calculated by itself, and if the two encrypted results match, the APP program continues to run, otherwise the APP program stops.

Or, burn private data in the OTP memory through a one-time programmable (One Time Programmable, OTP) controller, which cannot be modified but can be read. During the running of the APP program, the APP program will read the private data, then calculate a result, and judge whether it is equal to the preset result. If yes, then the APP program can continue to run, otherwise stop.

However, both of the above two methods save the plain text of the APP program in the FLASH, making the APP program easy to be cracked and copied. Moreover, in the first method, a peripheral protection chip is required, which increases the cost of the product, and the encryption algorithm and key stored inside the peripheral protection chip are easily cracked; in the second method, private data can be read, so that the private Data can be easily plagiarized.

Contents of the invention

The invention provides a data processing method and an on-chip system to solve the problem in the prior art that the APP program is stored in plain text in FLASH, so that the APP program is easily cracked and plagiarized.

In a first aspect, the present invention provides a data processing method, the method comprising: encrypting the embedded data of the application program to obtain the encrypted data of the application program; Decrypt the encrypted data of the program to obtain the decrypted data of the application program; compare the embedded data of the application program with the decrypted data of the application program, when the embedded data of the application program and the decrypted data of the application program When the data are the same, continue to run the application; when the embedded data of the application is different from the decrypted data of the application, stop running the application.

In a first possible implementation manner, the encrypting the embedded data of the application includes: setting an encryption key and an encryption algorithm, and using the encryption key and the encryption algorithm to encrypt the embedded data of the application encryption.

With reference to the first possible implementation of the first aspect, in a second possible implementation, the setting the encryption key further includes: writing the encryption key into a one-time programmable OTP storage module, And using the OTP control module to lock the encryption key, the locked encryption key cannot be read and modified.

In a second aspect, the present invention provides a system-on-a-chip, the system-on-a-chip includes: an encryption and decryption module for encrypting the embedded data of the application program, and obtaining the encrypted data of the application program after the encryption; a processing module , for when the application program is running, use the encryption and decryption module to decrypt the encrypted data of the application program, obtain the decrypted data of the application program after the decryption, and embed the embedded data of the application program Compared with the decrypted data of the application program, when the embedded data of the application program is the same as the decrypted data of the application program, continue to run the application program; When the decrypted data is different, stop running the application.

In a first possible implementation manner, the processing module is further configured to set an encryption key and an encryption algorithm; and, the encryption and decryption module uses the encryption key and the encryption algorithm to perform encryption.

In combination with the first possible implementation of the second aspect, in the second possible implementation, the system-on-chip further includes: a one-time programmable OTP storage module and an OTP control module; the OTP storage module is used to write Enter the encryption key, and use the OTP control module to lock the encryption key, the locked encryption key cannot be read and modified.

By applying the data processing method and the system-on-a-chip disclosed in the present invention, the embedded data of the application program is encrypted, the encrypted data of the application program is obtained after the encryption, and the encrypted data of the application program is decrypted when the application program is run. After decryption, the decrypted data of the application program is obtained, and the embedded data of the application program is compared with the decrypted data of the application program. When the embedded data of the application program is the same as the decrypted data of the application program, the application program continues to run; When the embedded data is different from the decrypted data of the application program, the application program is stopped, thereby increasing the difficulty of cracking the application program and providing protection for the application program.

Description of drawings

FIG. 1 is a flowchart of a data processing method provided in Embodiment 1 of the present invention;

FIG. 2 is a schematic diagram of a system-on-a-chip provided by Embodiment 2 of the present invention;

FIG. 3 is a schematic diagram of a system on chip provided by Embodiment 3 of the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments It is a part of embodiments of the present invention, but not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of the present invention.

The invention discloses a data processing method and a system on a chip. By encrypting the embedded data of the application program, the encrypted data of the application program is obtained after the encryption, and when the application program is running, the encrypted data of the application program is decrypted, so that The decrypted data of the application program is obtained after the above decryption, and the embedded data of the application program is compared with the decrypted data of the application program. When the embedded data of the application program is the same as the decrypted data of the application program, the application program continues to run; when the application program When the embedded data of the application program is different from the decrypted data of the application program, the application program is stopped, thereby increasing the difficulty of cracking the application program and providing protection for the application program.

FIG. 1 is a flowchart of a data processing method provided by Embodiment 1 of the present invention. As shown in the figure, this embodiment specifically includes the following steps:

Step 110, the System On Chip (SOC) encrypts the embedded data of the APP program to obtain the encrypted data of the APP program. Among them, the APP program is not installed casually, it needs to be controlled, and it must be a program that passes the verification before it can run. The process of APP embedding data is similar to signing. After APP embedding data is signed and encrypted, it is placed in FLASH. When it runs, it decrypts and then verifies. Verification is to compare the decrypted data with the data embedded in the APP.

This step 110 also includes that the system on chip sets an encryption key and an encryption algorithm for encrypting the embedded data of the APP program, and encrypts the embedded data of the APP program by using the encryption key and encryption algorithm set therefor. In order to prevent other product designers from copying the APP program and provide protection for the APP program, the key length of the encryption key set by the system on chip is generally 128 bits (bit) or 128 bits (bit), and the encryption algorithm strength reaches AES- 128ECB level. Among them, the AES-128ECB-level encryption algorithm is a recognized security encryption algorithm, which is difficult to crack and can also increase the difficulty of cracking applications.

The system-on-chip includes setting a one-time programmable (One Time Programmable, OTP) storage module and an OTP control module. The process of setting the encryption key by the system on chip is generally: write the encryption key into the OTP storage module by burning and writing, and use the OTP control module to lock the encryption key, so that the locked encryption key cannot be read and Revise. Wherein, in the OTP storage module, a lock bit with a length of 1 bit (bit) will be reserved. When the OTP control module controls the lock bit to be in a locked state, the encryption key stored in the OTP storage module is locked, so that the encryption key The key can no longer be read and modified, which also means that the interface and CPU outside the system-on-chip cannot change the locked encryption key. Among them, the locking function can be fully implemented in hardware logic. OTP has a feature: when a certain 1bit is programmed to 1, it will be fixed to 1 in the future. Using this bit as a lock bit, the control key cannot be read.

Wherein, the locked state of the locked bit can be that the OTP control module controls the locked bit to enter the locked state when it is at a high level, wherein the locked state can only be entered at a high level. After burning the key, make sure that the key is burned correctly, and then burn the lock bit, which can no longer be read out. The above-mentioned locking control function of the OTP control module makes it impossible for the interface and CPU other than the system on chip to tamper with the encryption key, and at the same time cannot read the encryption key, which obviously increases the difficulty of cracking the encryption key. Moreover, the OTP storage module, the OTP control module and the encryption and decryption module are all integrated in the system-on-chip, especially the encryption key stored in the OTP storage module, which is not easy to be cracked by the outside world, and the hardware logic is integrated in the system-on-chip, increasing the cost negligible.

In addition, step 110 also includes: the system on chip saves the encrypted data of the APP program, for example, saves the encrypted data of the APP program in a flash memory (Flash).

Step 120, when running the APP program, the system on chip decrypts the encrypted data of the APP program to obtain the decrypted data of the APP program.

Step 130, the system on chip compares the embedded data of the APP program with the decrypted data of the APP program, and when the embedded data of the APP program is the same as the decrypted data of the APP program, continue to run the APP program; when the embedded data of the APP program and the decrypted data of the APP program When the decrypted data is different, stop running the APP program.

Therefore, in the data processing method provided by the embodiment of the present invention, by encrypting the embedded data of the application program, the encrypted data of the application program is obtained after the encryption, and when the application program is running, the encrypted data of the application program is decrypted. After decryption, the decrypted data of the application program is obtained, and the embedded data of the application program is compared with the decrypted data of the application program. When the embedded data of the application program is the same as the decrypted data of the application program, the application program continues to run; When the embedded data is different from the decrypted data of the application program, the application program is stopped, thereby increasing the difficulty of cracking the application program and providing protection for the application program.

FIG. 2 is a schematic diagram of a system on chip provided by Embodiment 2 of the present invention. The system on chip is used to execute the data processing method provided in Embodiment 1 of the present invention. As shown in the figure, the system on chip provided by this embodiment specifically includes: an encryption and decryption module 21 and a processing module 22 .

The encryption and decryption module is used to encrypt the embedded data of the APP program, and the encrypted data of the APP program is obtained after the encryption; the processing module is used to decrypt the encrypted data of the APP program by using the encryption and decryption module when the APP program is running. After decryption, the decrypted data of the APP program is obtained, and the embedded data of the APP program is compared with the decrypted data of the APP program. When the embedded data of the APP program is the same as the decrypted data of the APP program, the APP program continues to run; when the embedded data of the APP program When the data and the decrypted data of the APP program are different, stop running the APP program.

In one embodiment, the processing module 12 is further configured to set an encryption key and an encryption algorithm; and, the encryption and decryption module 11 uses the encryption key and the encryption algorithm to encrypt the embedded data of the APP program.

In another embodiment, the system on chip provided by this embodiment further includes an OTP storage module 23 and an OTP control module 24 .

The OTP storage module 23 is used to write the encryption key, which is the key used when encrypting the embedded data of the APP program, and utilizes the OTP control module 24 to lock the encryption key. The locked encryption key cannot be read and modified. Wherein, the OTP control module is also used to control the lock bit of the OTP storage module 23. When the lock bit of the OTP storage module 23 was in a locked state, the encryption key in the OTP storage module 23 was locked, and the locked state was a high level or Low level, which is determined according to the actual situation.

In yet another embodiment, the system on chip provided by this embodiment further includes a memory 25 . The memory 25 is used to store encrypted data of the APP program. Wherein, the memory 25 can also be outside the system-on-chip, and also specifically store the encrypted data of the APP program, for example, the memory 25 is a flash memory (Flash).

Therefore, the system-on-a-chip provided by the embodiment of the present invention encrypts the embedded data of the application program, obtains the encrypted data of the application program after the encryption, and decrypts the encrypted data of the application program when the application program is running. After obtaining the decrypted data of the application program, and comparing the embedded data of the application program with the decrypted data of the application program, when the embedded data of the application program is the same as the decrypted data of the application program, continue to run the application program; when the embedded program of the application program When the decrypted data of the data and the application program are different, the application program is stopped, thereby increasing the difficulty of cracking the application program and providing protection for the application program.

FIG. 3 is a schematic diagram of a system on chip provided by Embodiment 3 of the present invention. The system on chip is used to execute the data processing method provided in Embodiment 1 of the present invention. As shown in the figure, the system on chip provided by this embodiment specifically includes: a system port 31 , a processor 32 and a memory 33 . The system bus 34 is used to connect the system port 31 , the processor 32 and the memory 33 .

The system port 31 may be connected to a memory other than the SoC, such as a flash memory.

The memory 33 can be a permanent memory, such as a hard disk drive and a flash memory, and has software modules and device drivers in the memory 33 . The software modules can execute various functional modules of the above method of the present invention; the device driver can be a network and interface driver.

At startup, these software components are loaded into the memory 33 and then accessed by the processor 32 to execute the method shown in FIG. 1 .

Professionals should further realize that the units and algorithm steps described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the relationship between hardware and software Interchangeability. In the above description, the composition and steps of each example have been generally described according to their functions. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

The steps of the methods or algorithms described in connection with the embodiments disclosed herein may be implemented by hardware, software modules executed by a processor, or a combination of both. Software modules can be placed in random access memory (RAM), internal memory, read-only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other Any other known storage medium.

The specific embodiments described above have further described the purpose, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above descriptions are only specific embodiments of the present invention and are not intended to limit the scope of the present invention. Protection scope, within the spirit and principles of the present invention, any modification, equivalent replacement, improvement, etc., shall be included in the protection scope of the present invention.

Claims (10)

1. A data processing method, characterized in that the method comprises: Encrypting the embedded data of the application program to obtain the encrypted data of the application program; When the application program is running, decrypt the encrypted data of the application program to obtain the decrypted data of the application program; Comparing the embedded data of the application program with the decrypted data of the application program, when the embedded data of the application program is the same as the decrypted data of the application program, continuing to run the application program; When the embedded data of the application program is different from the decrypted data of the application program, the application program is stopped. 2. The data processing method according to claim 1, wherein said encrypting the embedded data of the application program comprises: An encryption key and an encryption algorithm are set, and the embedded data of the application program is encrypted by using the encryption key and the encryption algorithm. 3. The data processing method according to claim 2, wherein said setting an encryption key further comprises: Writing the encryption key into the one-time programmable OTP storage module, and using the OTP control module to lock the encryption key, the locked encryption key cannot be read and modified. 4. The data processing method according to claim 3, wherein said utilizing the OTP controller to lock said encryption key comprises: The OTP control module controls the lock bit of the OTP storage module. When the lock bit is in a locked state, the encryption key is locked, and the locked state is a high level or a low level. 5. The data processing method according to any one of claims 1 to 4, wherein said encrypting the embedded data of the application program, and obtaining the encrypted data of the application program after said encryption further comprises: Save the encrypted data. 6. A system on a chip, characterized in that the system on a chip comprises: An encryption and decryption module, configured to encrypt the embedded data of the application program, and obtain the encrypted data of the application program after the encryption; A processing module, configured to use the encryption and decryption module to decrypt the encrypted data of the application program when the application program is running, obtain the decrypted data of the application program after the decryption, and convert the encrypted data of the application program to comparing the embedded data with the decrypted data of the application program, and when the embedded data of the application program is the same as the decrypted data of the application program, continue to run the application program; When the decrypted data of the application program is different, the application program stops running. 7. The system-on-chip according to claim 6, wherein the processing module is also used to set an encryption key and an encryption algorithm; and, the encryption and decryption module uses the encryption key and the encryption algorithm to The application's embedded data is encrypted. 8. system on chip according to claim 7, is characterized in that, described system on chip also comprises: one-time programmable OTP storage module and OTP control module; The OTP storage module is used for writing the encryption key, and the encryption key is locked by the OTP control module, and the locked encryption key cannot be read and modified. 9. The system-on-chip according to claim 8, wherein the OTP control module is also used to control the lock bit of the OTP storage module, and when the lock bit is locked, the encryption key is locked locked, the locked state is high or low. 10. The system-on-chip according to any one of claims 6-9, wherein the system-on-chip further comprises: a memory; The memory is used to save the encrypted data.

Images