Electronic apparatus and control method of electronic apparatus
According to one embodiment, an electronic apparatus includes a first processor, a second processor with a security capability higher than a security capability of the first processor, a first nonvolatile memory to store a program which is to be executed by the first processor, and a volatile second memory to store the program and data that is to be referred to by the first processor while the first processor executes the program. The second processor is configured to authenticate a rewrite command requesting to change the data in the second memory and selectively execute the rewrite command based on the authentication.
1. An electronic apparatus comprising:
a first hardware processor;
a second hardware processor with a security capability higher than a security capability of the first hardware processor;
a first hardware memory that is nonvolatile and configured to store a program which is to be executed by the first hardware processor, the first hardware memory including a first region configured to store the program and a second region configured to store log data of the electronic apparatus;
a second hardware memory that is volatile and configured to store the program, data that is to be referred to by the first hardware processor while the first hardware processor executes the program, and control data indicating whether to permit the log data to be read from the second region; and
a command execution circuit configured to set a specific region of the second hardware memory as an access prohibition region before a rewrite command is executed, the rewrite command requesting to change data in the second hardware memory, the rewrite command including a command configured to change a value of the control data stored in the second hardware memory into a value indicating that the log data is permitted to be read from the second region, the specific region of the second hardware memory including a region configured to store security information of the first hardware processor,
wherein the second hardware processor is configured to authenticate the rewrite command, selectively execute the rewrite command based on the authentication, and execute the rewrite command if the authentication succeeds.
2. The electronic apparatus according to claim 1 ,
wherein the second hardware processor is configured to perform secure booting processing.
3. The electronic apparatus according to claim 1 ,
wherein an initial value of the control data is configured to indicate that the log data is not permitted to be read from the second region.
4. The electronic apparatus according to claim 1 ,
wherein the control data includes data indicating whether to permit use of an interface for outputting the log data.
5. The electronic apparatus according to claim 1 ,
wherein the first hardware memory includes a first region configured to store the program and a second region configured to store log data of the electronic apparatus, the program stored in the first region not permitting the log data to be read from the first hardware memory,
wherein the second hardware memory includes a third region configured to store the program read from the first region,
wherein the rewrite command includes a command configured to change at least a part of the program stored in the third region to permit the log data to be read from the second region,
wherein the second hardware processor is configured to execute the rewrite command if the authentication succeeds.
6. The electronic apparatus according to claim 5 ,
wherein the rewrite command includes a command configured to change at least a part of the program stored in the third region to permit use of an interface for outputting the log data.
7. The electronic apparatus according to claim 1 ,
wherein the rewrite command includes a command configured to change data of a register that is to be referred to by the first hardware processor while the first hardware processor executes the program.
8. A control method, comprising:
storing, in a first hardware memory that is nonvolatile, a program to be executed by a first hardware processor, wherein the first hardware memory includes a first region configured to store the program and a second region configured to store log data of the electronic apparatus;
storing, in a second hardware memory that is volatile, the program and data that is to be referred to by the first hardware processor while the first hardware processor executes the program and control data indicating whether to permit the log data to be read from the second region;
setting, by a command execution circuit, a specific region of the second hardware memory as an access prohibition region before a rewrite command is executed, wherein the specific region of the second hardware memory includes a region configured to store security information of the first hardware processor;
authenticating, by a second hardware processor with a security capability higher than a security capability of the first hardware processor, the rewrite command requesting to change the data in the second hardware memory, wherein the rewrite command includes a command configured to change a value of the control data stored in the second hardware memory into a value indicating that the log data is permitted to be read from the second region; and
selectively executing, by the second hardware processor, the rewrite command based on the authentication;
executing, by the second hardware processor, the rewrite command if the authentication succeeds.
9. The method according to claim 8 , further comprising:
performing, by the second hardware processor, secure booting processing.
10. The method according to claim 8 ,
wherein an initial value of the control data is configured to indicate that the log data is not permitted to be read from the second region.
11. The method according to claim 8 ,
wherein the control data includes data indicating whether to permit use of an interface for outputting the log data.
12. The method according to claim 8 ,
wherein the first hardware memory includes a first region configured to store the program and a second region configured to store log data of the electronic apparatus, the program stored in the first region not permitting the log data to be read from the first hardware memory,
wherein the second hardware memory includes a third region configured to store the program read from the first region, and
wherein the rewrite command includes a command configured to change at least a part of the program stored in the third region to permit the log data to be read from the second region, the method further comprising:
executing, by the second hardware processor, the rewrite command if the authentication succeeds.
13. The method according to claim 12 ,
wherein the rewrite command includes a command configured to change at least a part of the program stored in the third region to permit use of an interface for outputting the log data.
14. The method according to claim 8 ,
wherein the rewrite command includes a command configured to change data of a register that is to be referred to by the first hardware processor while the first hardware processor executes the program.