METHOD FOR OPERATING A MICROPROCESSOR UNIT, IN PARTICULAR IN A MOBILE TERMINAL
The invention relates to a method for operating a microprocessor unit, in particular in a mobile terminal, wherein the microprocessor unit comprises a microprocessor (MP) on which a normal runtime environment (NZ) is implemented with a first operating system (B 1 ) and a secure runtime environment is implemented with a second, secure operating system (B 2 ). The microprocessor unit also comprises a RAM memory (R) outside the secure runtime environment (TZ), into which memory the first operating system (B 1 ) is loaded when executing the normal runtime environment (NZ). The invention is distinguished by the fact that the second operating system (B 2 ) is a secure version of the first operating system (B 1 ), which version is loaded into a section of the RAM memory intended for the secure runtime environment during the execution of the secure runtime environment (TZ).
1 . A method for operating a microprocessor unit, particularly in a mobile terminal, wherein the microprocessor unit comprises a microprocessor (MP), on which a normal runtime environment (NZ) having a first operating system (B 1 ) and a protected runtime environment having a second operating system (B 2 ) are implemented, and also a RAM store (R) outside the protected runtime environment (TZ), into which RAM store the first operating system (B 1 ) is loaded when a normal runtime environment (NZ) is executed;
characterized in that
the second operating system (B 2 ) is a protected version of the first operating system (B 1 ) that, in the course of the execution of the protected runtime environment (TZ), is loaded into a section of the RAM store (R) that is provided for the protected runtime environment (TZ).
2 . The method as claimed in claim 1 , characterized in that the second operating system (B 2 ) is loaded into a RAM store (R) in the form of an OnSoC RAM, wherein the OnSoC RAM is coupled to the microprocessor (MP) particularly by means of an AMBA bus (B).
3 . The method as claimed in claim 1 , characterized in that the microprocessor unit is controlled by means of a switch (SW) that a user can use to change between the execution of the normal and protected runtime environments (NZ, TZ).
4 . The method as claimed in claim 1 , characterized in that an indicator unit (L) is used to indicate to a user when the protected runtime environment (TZ) is being executed.
5 . The method as claimed in claim 1 , characterized in that the microprocessor unit is provided for a cell phone and contains a baseband processor (BP) for processing communication functionalities, wherein a portion of the communication functionalities of the baseband processor (BP) is implemented in the second operating system.
6 . The method as claimed in claim 5 , characterized in that the voice call function and/or the SMS function are implemented in the second operating system as communication functionalities of the baseband processor (BP).
7 . The method as claimed in claim 1 , characterized in that the protected runtime environment (TZ) is an ARM TrustZone®.
8 . A microprocessor unit, particularly for a mobile terminal, comprising a microprocessor (MP), on which a normal runtime environment (NZ) having a first operating system (B 1 ) and a protected runtime environment (TZ) having a second operating system (B 2 ) are implemented, and a RAM store (R) outside the protected runtime environment (TZ), into which RAM store the first operating system (B 1 ) is loaded when the normal runtime environment (NZ) is executed; characterized in that
the second operating system (B 2 ) is a protected version of the first operating system (B 1 ) and a section of the RAM store (R) is provided for the second operating system (B 2 ), into which section the second operating system (B 2 ) is loaded in the course of the execution of the protected runtime environment (TZ).
9 . The microprocessor unit as claimed in claim 8 , characterized in that the microprocessor unit comprises a microprocessor (MP), on which a normal runtime environment (NZ) having a first operating system (B 1 ) and a protected runtime environment having a second operating system (B 2 ) are implemented, and also a RAM store (R) outside the protected runtime environment (TZ), into which RAM store the first operating system (B 1 ) is loaded when a normal runtime environment (NZ) is executed;
characterized in that the second operating system (B 2 ) is a protected version of the first operating system (B 1 ) that, in the course of the execution of the protected runtime environment (TZ), is loaded into a section of the RAM store (R) that is provided for the protected runtime environment (TZ), characterized in that the second operating system (B 2 ) is loaded into a RAM store (R) in the form of an OnSoC RAM, wherein the OnSoC RAM is coupled to the microprocessor (MP) particularly by means of an AMBA bus (B).
10 . A mobile terminal, particularly a cell phone, characterized in that the mobile terminal comprises a microprocessor unit according to claim 8 .