Resource sequester mechanism
View Patent ↗A method and system for controlling access to selected resources in a computer system. The system includes a processor and a device coupled to the processor. The device includes one or more sub-devices and one or more access locks. The access locks are configured to prevent access to the sub-devices when the access locks are engaged. The device may include a bridge. The sub-devices may include a duration timer, mailbox RAM, locks for a storage device, overrides for the locks for the storage device, a TCO counter, a monotonic counter, scratchpad RAM, and/or a random number generator. The method includes unlocking security hardware and accessing a first device. The method also includes locking the security hardware and calling an SMM exit routine.
1. A method of operating a computer system in System Management Mode (SMM), the computer system including a processor coupled to a memory, to security hardware, and to a first device, the method comprising:
unlocking security hardware;
accessing the first device;
locking the security hardware; and
calling an SMM exit routine.
2. The method of claim 1 , further comprising:
checking a lock status of the security hardware.
3. The method of claim 1 , further comprising:
processing SMM code instructions.
4. A computer system configured to operate in System Management Mode (SMM), the computer system comprising:
means for unlocking security hardware;
means for accessing the first device;
means for locking the security hardware; and
means for calling an SMM exit routine.
5. A computer readable program storage device encoded with instructions that, when executed by a computer system including a processor coupled to a memory, to security hardware, and to a first device, performs a method of operating a computer system in System Management Mode (SMM), the computer system, the method comprising:
unlocking security hardware;
accessing the first device;
locking the security hardware; and
calling an SMM exit routine.
6. The computer readable program storage device of claim 5 , the method further comprising:
checking a lock status of the security hardware.
7. The computer readable program storage device of claim 5 , the method further comprising:
processing SMM code instructions.
8. A method of operating a computer system in System Management Mode (SMM), the computer system including a processor coupled to a memory, to security hardware, and to a first device that is accessible when the security hardware is unlocked and is not accessible when the security hardware is locked, the method comprising:
unlocking security hardware;
accessing the first device;
locking the security hardware; and
calling an SMM exit routine.
9. The method of claim 8 , further comprising:
checking a lock status of the security hardware.
10. The method of claim 8 , further comprising:
processing SMM code instructions.