SoC Debug Access Control via Dynamic Configuration Diagrams
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems on chip (SoCs) face challenges in managing access restrictions to slave resources dynamically, particularly across multiple cores and applications, which is essential for ensuring reliability and security, especially during debugging processes when different microprocessors have varying security levels and are developed by different companies.
Innovation Solution
The system on chip implements a configuration mechanism using a set of configuration pieces of information to manage isolation between master and slave resources, allowing selective access control through identification, security, and privileged mode settings, enabling flexible access management and debugging by assigning specific resources to selected microprocessors and prohibiting access when necessary.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access restrictions to slave resources are restricted to ensure reliability and security, then system security is improved, but access flexibility and debugging capability deteriorate
Solution Approach 1:
The patent implements dynamic access control where the isolation configuration can be changed at runtime through configuration diagrams. The system allows switching between different access restriction levels and debugging modes without requiring physical system changes, enabling flexible adaptation between security and debugging needs
Solution Approach 2:
The patent introduces configuration diagrams as an intermediary layer between master pieces of equipment and slave resources. These diagrams define access rules and isolation policies that mediate the interactions, allowing security restrictions to be enforced while still permitting authorized access for debugging and normal operation
2Reliability
If isolation architecture is implemented to restrict access between master and slave resources, then system security is improved, but system complexity increases
Solution Approach 1:
The patent creates a universal configuration diagram mechanism that can be applied to any master-slave resource combination in the system. Rather than implementing separate isolation mechanisms for each resource type, a single configurable framework handles all isolation requirements, reducing overall system complexity while maintaining security
Solution Approach 2:
The system uses configurable parameters within the isolation architecture that can be adjusted through configuration diagrams. By changing parameters such as access permissions, isolation levels, and debugging enablement flags, the system adapts to different security requirements without structural modifications, simplifying the isolation implementation
3Measurement precision
If selective debugging access is implemented for different microprocessors, then debugging precision is improved, but access management complexity increases
Solution Approach 1:
The patent segments the debugging access control by creating separate configuration diagrams for each microprocessor or group of microprocessors. This allows precise control over which debugging tools can access which processors, improving debugging precision while managing complexity through modular configuration rather than monolithic access control
Data Source
AI summary
In an embodiment a system on chip includes a plurality of microprocessors, a plurality of slave resources, an interconnection circuit coupled between the microprocessors and the slave resources, the interconnection circuit configured to route transactions between the microprocessors and the slave resources and a processing controller configured to allow a user of the system to implement within the system at least one configuration diagram of the system defined by a set of configuration pieces of information used to define an assignment of at least one microprocessor to at least some of the slave resources, select the at least one microprocessors, and authorise an external debugging tool to access, for debugging purposes, only the slave resources assigned to the at least one microprocessor.