SoC Interconnect Bus Access Gating by Safety Level
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In automotive electronic systems, unintended communication between hardware devices or IP blocks can compromise user safety due to differing safety integrity levels, potentially leading to abnormal operations and safety risks.
Innovation Solution
A system-on-chip with an interconnect bus that selectively blocks transactions based on the safety levels of devices, using a safety function protection controller to manage access requests and ensure that devices with lower safety levels do not interfere with those having higher safety levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If devices with different safety levels are allowed to communicate freely, then system connectivity and functionality are improved, but safety risks and unintended communications increase
Solution Approach 1:
The interconnect bus acts as an intermediary between master and slave devices, implementing safety level-based access control. The bus controller mediates communications by evaluating safety levels of both master and slave devices before allowing transactions, thus preventing unauthorized access while maintaining legitimate communications.
Solution Approach 2:
The system changes the parameter of access permission based on safety level comparisons. When the master device's safety level is lower than the slave device's safety level, the interconnect bus blocks the access request. This parameter-based control mechanism ensures that only devices with compatible safety levels can communicate.
2Reliability
If access control based on safety levels is implemented, then system safety and integrity are improved, but device complexity and communication overhead increase
Solution Approach 1:
The interconnect bus is designed to handle multiple functions: data transmission, safety level evaluation, access control decision-making, and communication blocking/allowing. By making the bus multi-functional, separate dedicated safety control hardware is avoided, reducing overall system complexity while maintaining safety integrity.
Data Source
AI summary
A system-on-chip including: a first slave having a first safety level; a second slave having a second safety level; a first master having a third safety level, the first master outputs a first access request for the first slave and a second access request for the second slave; a safety function protection controller that outputs first attribute information corresponding to the first safety level, second attribute information corresponding to the second safety level, and third attribute information corresponding to the third safety level; and an interconnect bus that receives the first, second and third attribute information, transfers the first access request to the first slave when it is determined that the third safety level is higher than or equal to the first safety level, and blocks the second access request when it is determined that the third safety level is lower than the second safety level.