Partition Maintenance via Masked Configuration in Programmable Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In shared programmable devices, partial reconfiguration of integrated circuits is challenging due to the need to maintain isolation between different user partitions without altering adjacent regions, especially in multi-user scenarios where proprietary information must be protected and permissions managed efficiently.
Innovation Solution
The implementation of a configuration controller that generates and uses masks to reconfigure specific partitions without affecting adjacent regions, ensuring that only authorized changes are made to resources owned by a partition, using a MASK/OR process to isolate and update resources within the programmable logic device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If partial reconfiguration is performed on a shared programmable device, then reconfigurability and adaptability are improved, but isolation between partitions and security may be compromised
Solution Approach 1:
The configuration memory is divided into multiple banks, each associated with a specific partition. Reconfiguration operations are performed on a partition-by-partition basis using partition-specific configuration data, allowing one partition to be reconfigured without affecting others. This segmentation enables independent control of each partition's configuration state.
Solution Approach 2:
A configuration controller acts as an intermediary between the reconfiguration interface and the configuration memory banks. It receives reconfiguration requests, determines the target partition, and selectively loads configuration data into the appropriate banks while preventing unauthorized access to other partitions' configuration data, thus maintaining isolation.
2Ease of operation
If configuration data is shared across partitions, then ease of operation is improved, but security and authorization control deteriorate
Solution Approach 1:
Different configuration memory banks have different access permissions assigned to partitions. Each partition can only access and modify configuration data in its designated banks, while other banks remain protected. This local quality control ensures that each partition operates with appropriate permissions without exposing other partitions' proprietary information.
3Reliability
If centralized control is used for reconfiguration, then security is improved, but device complexity and operational efficiency worsen
Solution Approach 1:
Configuration data for each partition is prepared and stored in dedicated configuration memory banks in advance. The partition owner can load configuration data into their own partition's banks without requiring real-time intervention from a central authority, enabling autonomous reconfiguration while maintaining security through pre-established access controls.
Data Source
AI summary
A system for maintaining reconfigurable partitions in an integrated device includes a first buffer having channels that store configuration data and a mask. The system also includes first decompression circuitry having a second buffer coupled to the first buffer that stores the configuration data and second decompression circuitry having a third buffer coupled to the first buffer that stores the mask. The system also includes partition maintenance circuitry that applies the mask to the configuration data after the first decompression circuitry has decompressed the configuration data and the second decompression circuitry has decompressed the mask.