How to read non-secure SP_EL1 in BL31?

I am using Linaro's Android release on Juno r1. While the Android OS is running, i switched into EL3 by smc instruction. Then, in the smc handler of BL31, i want to read the value of SP_EL1 register in the Android to verify the current process in the OS.