Distributed Resource Access Protection in Integrated Circuits
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Highly integrated devices face challenges in managing resource access without the cost and complexity of a centralized Memory Management Unit (MMU), which is often required to prevent conflicts in resource utilization among multiple high-speed processing components.
Innovation Solution
A distributed resource access protection scheme where requesting components determine a protection key based on an address and transmit it to resource components, which authorize access requests using a key table, allowing for decentralized authorization without the need for a centralized MMU.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized Memory Management Unit (MMU) is used to control access to resources by multiple processing components, then resource access conflict is prevented, but device complexity and cost increase
Solution Approach 1:
The patent divides the centralized MMU function into distributed segments located at individual resource components. Each resource component maintains its own authorization table and protection key generation logic, eliminating the need for a single centralized MMU while maintaining access control capabilities across multiple processing components.
Solution Approach 2:
Resource components autonomously generate protection keys and manage their own access authorization using local authorization tables. The system eliminates dependency on a centralized MMU by enabling each resource component to self-manage access control for its resources, reducing overall device complexity.
2Reliability
If a centralized Memory Management Unit (MMU) is used to control access to resources by multiple processing components, then resource access conflict is prevented, but implementation cost increases
Solution Approach 1:
The patent segments the MMU functionality across multiple distributed resource components rather than implementing a single centralized unit. This distribution reduces the complexity and cost of each individual component while maintaining the overall reliability of resource access control across the system.
Solution Approach 2:
Instead of implementing one expensive centralized MMU, the patent uses simplified copies of authorization logic at each resource component. Each component maintains a local authorization table and protection key mechanism, reducing implementation cost while preserving access control functionality.
3Reliability
If access authorization is performed centrally in an MMU, then resource access control is maintained, but processing delays increase
Solution Approach 1:
The patent segments the access authorization process from a centralized MMU to distributed resource components. Each resource component independently manages its own access control using local protection keys and authorization tables, eliminating the processing delays associated with centralized authorization while maintaining robust access control.
Solution Approach 2:
Protection keys are generated in advance by requesting components and transmitted to resource components before access is needed. The resource components store these keys in authorization tables, enabling rapid access control decisions without real-time centralized processing, thus reducing delays while maintaining security.
Data Source
AI summary
A method includes determining, at a first requesting component of an integrated circuit device, a first key value based on a first set of one or more bits of a first address associated with a first access request of the first requesting component. The method further includes transmitting the first key value from the first requesting component to a resource component of the integrated circuit device. The method also includes determining, at the resource component, an authorization of the first access request based on the first key value and a second set of one or more bits of the first address.