Method and system for multi-level security initialization and configuration
Aspects of a method and system for multi-level security initialization and configuration are provided. A security system may comprise a security processor, a host processor, and at least one security component, such as a descrambler. The security processor may enable a security component based on information stored within a non-volatile memory integrated within the security processor. The host processor may enable generation of at least one configuration command communicated to the security processor for configuring the enabled security component. The configuration command may correspond to a security control operational mode for the security component that may indicate, for example, activation or deactivation of the security component. The security processor may authenticate a digital signature in the configuration command. Initialization and configuration may be performed during a system boot sequence of the security system.
1. A method for system initialization, the method comprising:
enabling a security component in a security system based on a value of an enable bit stored within a non-volatile memory integrated within a security processor in said security system; and
activating, by said security processor, said security component in response to a configuration command communicated to said security processor by a host processor in said security system if said security component is enabled,
wherein said host processor is prevented from modifying said enable bit stored within said non-volatile memory to enable said security component.
2. The method according to claim 1 , comprising authenticating a digital signature in said configuration command.
3. The method according to claim 1 , further comprising deactivating, by said security processor, said security component in response to another configuration command communicated to said security processor by said host processor if said security component is enabled.
4. The method according to claim 1 , further comprising enabling said security component during a system boot sequence of said security system.
5. The method according to claim 1 , further comprising activating said security component during a system boot sequence of said security system.
6. The method according to claim 1 , wherein said security component is a descrambler.
7. A non-transitory computer readable medium having stored thereon, a computer program having at least one code section for system initialization, said at least one code section being executable by a computer for causing said computer to perform steps comprising:
enabling a security component in a security system based on a value of an enable bit stored within a non-volatile memory integrated within a security processor in said security system; and
activating, by said security processor, said security component in response to a configuration command communicated to said security processor by a host processor in said security system if said security component is enabled,
wherein said host processor is prevented from modifying said enable bit stored within said non-volatile memory to enable said security component.
8. The non-transitory computer readable medium according to claim 7 , further comprising code for authenticating a digital signature in said configuration command.
9. The non-transitory computer readable medium according to claim 7 , further comprising code for deactivating, by said security processor, said security component in response to another configuration command communicated to said security processor by said host processor and if said security component is enabled.
10. The non-transitory computer readable medium according to claim 7 , further comprising code for enabling said security component during a system boot sequence of said security system.
11. The non-transitory computer readable medium according to claim 7 , further comprising code for activating said security component during a system boot sequence of said security system.
12. The non-transitory computer readable medium according to claim 7 , wherein said security component is a descrambler.
13. A system for system initialization, the system comprising:
a security system comprising a security processor, a host processor, and a security component;
wherein said security processor is configured to enable said security component based on a value of an enable bit stored within a non-volatile memory integrated within said security processor;
wherein said host processor is configured to generate a configuration command for communication to said security processor to activate said security component,
wherein said security processor is configured to activate said security component in response to said configuration command if said security component is enabled, and
wherein said host processor is prevented from modifying said enable bit stored within said non-volatile memory to enable said security component.
14. The system according to claim 13 , wherein said security processor is further configured to authenticate a digital signature in said configuration command.
15. The system according to claim 13 , wherein said security processor is further configured to deactivate said security component in response to another configuration command communicated to said security processor by said host processor if said security component is enabled.
16. The system according to claim 13 , wherein said security processor is further configured to enable said security component during a system boot sequence of said security system.
17. The system according to claim 13 , wherein said security processor is further configured to activate said security component during a system boot sequence of said security system.
18. The system according to claim 13 , wherein said security component is a descrambler.
19. A system for system initialization, the system comprising:
a security processor configured to enable a security component in a security system based on a value of an enable bit stored within a non-volatile memory integrated within said security processor in said security system;
wherein said security processor configured to activate said security component in response to a configuration command communicated to said security processor by a host processor in said security system if said security component is enabled, and
wherein said host processor is prevented from modifying said enable bit stored within said non-volatile memory to enable said security component.
20. The system according to claim 19 , wherein said security processor is further configured to authenticate a digital signature in said configuration command.
21. The method according to claim 1 , wherein enabling said security component in said security system further comprises:
writing a bit to a register in said security component using a secure bus not accessible to said host processor.