Mask-Value Pair Generation for Memory Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing programmable integrated circuits (ICs) face challenges in efficiently managing access to shared memory segments, particularly as the number of logic circuits increases, leading to potential memory conflicts and malicious access violations, which are difficult to manually configure and require computationally intensive processes to determine optimal mask-value pairs for access control.
Innovation Solution
A method and system for determining and generating mask-value pairs to protect memory segments by identifying a first set of pairs matching allowed and non-allowed IDs, removing redundant pairs, and selecting the subset with the highest processing efficiency to configure a memory management circuit for optimal access control, thereby reducing processing resources needed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual configuration of mask-value pairs is used for memory access control, then access control can be implemented, but the complexity and time required for configuration increases significantly as the number of logic circuits increases
Solution Approach 1:
The system automatically generates and optimizes mask-value pairs without requiring manual configuration. The processor executes algorithms to determine the optimal set of mask-value pairs based on the master ID list, enabling the system to self-configure access control policies according to the current circuit topology and security requirements.
Solution Approach 2:
The system transforms the configuration process from manual parameter entry to automated parameter generation. By changing the approach from human configuration to computational generation, the complexity of configuring access control for numerous logic circuits is significantly reduced while maintaining security reliability.
2Reliability
If a comprehensive set of mask-value pairs is generated to cover all allowed IDs, then access control coverage is improved, but the number of combinations to evaluate increases computationally intensive
Solution Approach 1:
The system extracts and removes redundant mask-value pairs from the generated set. By identifying and eliminating unnecessary combinations that cover the same allowed IDs, the system reduces the evaluation burden while maintaining complete access control coverage for all authorized circuits.
Solution Approach 2:
The system generates a comprehensive set of mask-value pairs initially, then selectively reduces it to the minimal necessary set. This approach ensures all allowed IDs are covered while avoiding the computational overhead of evaluating every possible combination, achieving optimal balance between coverage and processing efficiency.
3Productivity
If redundant mask-value pairs are removed to reduce processing resources, then processing efficiency is improved, but the complexity of determining the optimal subset increases
Solution Approach 1:
The system performs preliminary generation of all possible mask-value pairs before optimization. By pre-generating the complete set and then systematically removing redundancies through defined algorithms, the system simplifies the overall process of determining the optimal subset, reducing both processing time and algorithmic complexity.
Data Source
AI summary
Methods and systems are disclosed for determining mask-value pairs for controlling access to a memory segment for a plurality of IDs. A first set of mask-value pairs is determined for a set of allowed identifiers (IDs) and a set of non-allowed IDs. Each mask-value pair of the first set matches at least one ID of the set of allowed IDs and does not match any of the IDs of the set of non-allowed IDs. Redundant mask-value pairs are removed from the first set to produce a second set. Subsets of mask-value pairs in the second set that match the entire set of allowed IDs are determined. The subset having the highest processing efficiency is determined and selected. A set of configuration data is generated that is configured to cause a memory management circuit to enforce access to the memory segment based on the selected subset of mask-value pairs.