METHOD FOR INTERCHANGING DATA IN A SECURE RUNTIME ENVIRONMENT

1 . A method for interchanging data between a secure runtime environment (SWd), in which a number of secure applications (TL) can be executed, and a non-secure environment (NWd) of a microprocessor unit (MP), in particular in a mobile terminal, in which application data (AD) and control data (MCP, NQ) are transmitted via different buffers.

2 . The method as claimed in claim 1 , characterized in that different types of control data (MCP, NQ) are transmitted via different buffers.

3 . The method as claimed in claim 1 , characterized in that monitoring data (FC) relating to the changeover between the secure runtime environment (SWd) and the non-secure environment (NWd) are transmitted via a separate secure buffer.

4 . The method as claimed in claim 1 , characterized in that the transmission of the application data (AD) and the control data (MCP, NQ) and optionally the monitoring data (FC) is based on an ARM monitor code implemented in a monitor unit (M) having interfaces to the secure runtime environment (SWd) and the non-secure environment (NWd).

5 . The method as claimed in claim 1 , characterized in that the application data (AD) and the control data (MCP, NQ) are transmitted between the secure runtime environment (SWd) and a driver (MCD) of the non-secure environment (NWd).

6 . The method as claimed in claim 5 , characterized in that a scheduler implemented in the non-secure environment (NWd), in particular in an interface of the driver (MCD) for the control data (MCP), stipulates which of the secure applications (TL) is executed in the secure runtime environment (SWd).

7 . The method as claimed in claim 1 , characterized in that the data are interchanged using a memory area of a memory (WSM), which memory area can be read and/or written to by the secure runtime environment (SWd) and the non-secure environment (NWd).

8 . The method as claimed in claim 7 , characterized in that control messages are used to inform the secure runtime environment of data in the memory area which are intended for said environment.

9 . The method as claimed in claim 8 , characterized in that the control messages are provided with a unique session identifier which can be used by the secure runtime environment (SWd) to assign the control message to one of the applications (TL) executed in the secure runtime environment (SWd).

10 . The method as claimed in claim 1 , characterized in that a defined computation time which cannot be exceeded is allocated to each process running in the secure runtime environment (SWd).

11 . The method as claimed in claim 10 , characterized in that a respective process has the following thread structure: thread identifier (ID); current state of the thread; local exception handler for the threads; priority of the thread.

12 . The method as claimed in claim 10 , characterized in that a respective process has the following task structure: current state of the task; task identifier of the generator task; external exception handler for the task; computation time quota for the task; number of threads which can be activated or provided by the task; priority and rights of the task.

13 . A microprocessor unit with a secure runtime environment (SWd) and a non-secure environment (NWd), which unit is configured in such a manner that application data (AD) and control data (MCP, NQ, FC) are transmitted via different buffers in order to interchange data between the secure runtime environment (SWd) and the non-secure environment (NWd).

14 . The microprocessor unit as claimed in claim 13 , characterized in that the unit is configured in such a manner that it can be used to carry out a method for interchanging data between a secure runtime environment (SWd), in which a number of secure applications (TL) can be executed, and a non-secure environment (NWd) of a microprocessor unit (MP), in particular in a mobile terminal, in which application data (AD) and control data (MCP, NQ) are transmitted via different buffers, wherein different types of control data (MCP, NQ) are transmitted via different buffers.

15 . A mobile terminal comprising a microprocessor unit as claimed in claim 13 .