US 12,353,611 B2
Hardware user interface firewall
Andrey Iaremenko, Bat Yam (IL); Eyal Moshe, Tel aviv (IL); and Ofir Avraham Swisa, Givatayim (IL)
Assigned to HUB DATA SECURITY LTD., Tel Aviv (IL)
Filed by Hub data security Ltd., Tel Aviv (IL)
Filed on Mar. 9, 2022, as Appl. No. 17/654,071.
Claims priority of provisional application 63/158,360, filed on Mar. 9, 2021.
Prior Publication US 2022/0300667 A1, Sep. 22, 2022
Int. Cl. G06F 21/85 (2013.01); G06F 3/041 (2006.01); G06F 3/14 (2006.01)
CPC G06F 21/85 (2013.01) [G06F 3/0416 (2013.01); G06F 3/14 (2013.01)] 14 Claims
OG exemplary drawing
 
1. A hardware controller for securing one or more parts of a man machine interface (MMI), the hardware controller comprises:
a MMI interface that is configured to communicate with the MMI;
a first security level processor interface that is configured to communicate with a first processor while maintaining the first security level;
a second security level processor interface that is configured to communicate with a second security level processor while maintaining the second security level; wherein the second security level differs from the first security level;
a third security level processor interface that is configured to communicate with a third security level processor; wherein the third security level equals the second security level;
a configuration interface that is configured to receive configuration information that divides the MMI to one or more first security level MMI areas to one or more second security level MMI areas and to one or more third security level MMI areas; and
a controller core that is configured to control, based on the configuration information, (a) a communication between the first security level processor and the one or more first security level MMI areas, and (b) a communication between the second security level processor and the one or second security level MMI areas;
wherein the configuration information is of a pixel resolution; wherein the controller core comprises an arbiter that arbitrates, based on the configuration information, between first pixel value information received by the first security level processor interface, second pixel value information received by the second security level processor interface, and third pixel value information received by the third security level processor interface; wherein the configuration interface is configured to dynamically change an MMI area selected out of the one or more first security level MMI areas, the one or more second security level MMI areas or the one or more third security level MMI areas, and to delete the MMI area by notifying the arbiter about the dynamic change of the MMI area.