Program execution device
View Patent ↗A program execution device capable of protecting a program against unauthorized analysis and alteration is provided. The program execution device includes an execution unit, a first protection unit, and a second protection unit. The execution unit executes a first program and a second program, and is connected with an external device that is capable of controlling the execution. The first protection unit disconnects the execution unit from the external device while the execution unit is executing the first program. The second protection unit protects the first program while the execution unit is executing the second program.
1. A method for operating a portable terminal having a hardware processor and a non-transitory memory, the method comprising:
processing, using a hardware processor, a first component including at least a first program for tamper detection and a second component including at least a second program for executing a task; and
loading, in a non-transitory memory, at least the second component from the non-transitory memory,
wherein, the first program of the first component judges whether or not at least part of the second program of the second component is tampered with, by using a tamper detection value in a secure environment,
the tamper detection value is a first hash value, and
the secure environment cannot be accessed outside of the secure environment.
2. The method according to claim 1 ,
wherein the first hash value is calculated for the second component prior to the loading.
3. The method according to claim 1 ,
wherein the first program of the first component judges whether or not at least part of the second program of the second component is tampered with, by comparing the first hash value and a second hash value which is calculated after the calculation of the first hash value.
4. The method according to claim 1 ,
wherein the secure environment is a higher security level than a normal environment in which the second program is executed.
5. The method according to claim 1 ,
wherein the second component executes the second program after receiving a decryption key from the first component.
6. The method according to claim 1 ,
wherein the second component receives the decryption key from the first component after the first component judges whether or not at least part of the second program of the second component is tampered with.