Method and apparatus for configurable address mapping and protection architecture and hardware for on-chip systems

• US 7,266,786 B2
• Filed: 11/05/2002
• Issued: 09/04/2007
• Est. Priority Date: 11/05/2002
• Status: Expired due to Term

• Current Assignee: META Platforms Technologies LLC (Meta Platforms, Inc. (f/k/a Facebook, Inc.))
• Original Assignee: Sonics Incorporated (Meta Platforms, Inc. (f/k/a Facebook, Inc.))
• Inventors: Weber, Wolf-Dietrich, Chou, Chien-Chun, Tomlinson, Jay Scott, Wingard, Drew Eric, Kasetti, Sricharan
• Primary Examiner(s): RIMELL, SAMUEL G
• Application Number:
  US10/288,973
• Publication Number:
  US 20040088566A1
• Time in Patent Office: 1,764 Days
• Field of Search: 716/1, 716/7, 716/8, 716/14, 716/16, 707/104.1
• US Class Current: 716/105
• CPC Class Codes: G06F 12/10 Address translation
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: Y02D 10/00 Energy efficient computing, e.g. low power processors, power management or thermal management

Abstract

A method and apparatus of a configurable address mapping and protection architecture and hardware for on-chip systems have been described.

Claims

1. A method comprising:

inputting configuration parameters that identify a first address location to a service module;

inputting protection parameters, wherein the protection parameters are selected from the group consisting of a number of different protection keys that can exist for modules in a device and a number of different protection IDs that can exist for modules in the device; and

determining whether a request from a first module in the device should be passed on to the service module and executed based upon the inputted protection parameters and the first address location of the service module.

2. The method of claim 1 wherein said configuration parameters are selected from the group consisting of address width, number of segments, segment size, segment base, and number of regions.

3. The method of claim 2 further comprising for each region of said number of regions a field selected from the group consisting of region address size, region base address, region protection key register number, region enable, region address space, width of a service module connected to said region, and physical linkage information of a service module connected to said region.

4. The method of claim 3 wherein said physical linkage information of a service module connected to said region further comprises information selected from the group consisting of routing information, and a position.

5. The method of claim 4 wherein said routing information comprises hardware routing information passed to a request-delivery module in order to deliver a request to said service module.

6. The method of claim 4 wherein said position comprises a hardware signal bit position.

7. The method of claim 6 wherein if a request-delivery module asserts a signal at said hardware signal bit position a request is sent to said service module.

8. The method of claim 1 further comprising:

generating a database for configuring circuitry, wherein said circuitry further comprises a register.

9. The method of claim 8 wherein said configuring results in an operative mode selected from the group consisting of non-accessible register, read only register, and read-write register.

10. The method of claim 8 wherein said configuring said register further comprises specifying said register as an export constant so that in said database a netlist portion of said register is exported to a top level of a netlist.

11. The method of claim 10 wherein said configuring further comprises configuring said netlist in time after said configuring of said register.

29. A processing system comprising a processor, which when executing a set of requests performs the method of claim 1.

30. A machine-readable storage medium having stored instructions thereon, which when executed performs the method of claim 1.

31. The method of claim 1, further comprising:

receiving a product specification; and

generating a netlist that represents an optimized address mapping and hardware protection.

38. The method of claim 1, further comprising:

configuring the protection parameter information at design time of an implementation of the device.

12. An apparatus, comprising:

means for inputting configuration parameters that identify a first address location to a service module;

means for inputting protection parameters, wherein the protection parameters are selected from the group consisting of a number of different protection keys that can exist for modules in a device and a number of different protection IDs that can exist for modules in the device; and

means for determining whether a request from a first module in the device should be passed on to the service module and executed based upon the inputted protection parameters and the first address location of the service module.

13. The apparatus of claim 12, wherein the configuration parameters are selected from the group consisting of address width, number of segments, segment size, segment base, and number of regions.

14. The apparatus of claim 13, further comprising:

a first region from the number of regions, the first region having a field containing routing information and a position of a service module connected to the region.

15. The apparatus of claim 14, wherein the routing information comprises hardware routing information passed to a request-delivery module in order to deliver a request to the service module.

16. The apparatus of claim 14, wherein the position comprises a hardware signal bit position.

17. The apparatus of claim 15, wherein if a request-delivery module asserts a signal at the hardware signal bit position a request is sent to the service module.

18. The apparatus of claim 12, further comprising:

means for generating a database for configuring circuitry, wherein the configuring circuitry may be a register that is configured by specifying the register as an export constant so that in the database a netlist portion of the register is exported to a top level of a netlist.

19. The apparatus of claim 18, wherein the configuring further comprises configuring the netlist in time after the configuring of the register.

20. The apparatus of claim 18, wherein the register may be selected from the group consisting of not-accessible registers, read-only registers. read-write registers.

21. The apparatus of claim 18, wherein the register has register fields selected from the group consisting of not-accessible register fields, read-only register fields, and read-write register fields.

22. The apparatus of claim 12, further comprising:

means for checking the inputted protection and configuration parameters against predefined criteria set at design time for an integrated circuit.

23. The apparatus of claim 22, wherein the predefined criteria are selected from the group consisting of protection ID, destination address, request type, data, data type, and user provided request information.

24. The apparatus of claim 22, wherein the means for checking checks a segment address against one or more segment register fields, and checks a region address against one or more region register fields.

25. The apparatus of claim 22, wherein the means for checking checks a protection key against one or more protection register fields.

26. The apparatus of claim 22, wherein the means for checking checks requests received from a plurality of source units against an address map and a protection key map.

27. The apparatus of claim 22, further comprising:

means for generating a request for additional parameters if the predefined criteria is met.

28. The apparatus of claim 12, further comprising:

means for receiving a product specification; and

means for generating a netlist.

32. The apparatus of claim 12, further comprising:

means for associating a first address region in the system with at least one protection key; and

means for assigning a first processing unit at least one possible protection ID.

34. The apparatus of claim 12, further comprising:

a first processing unit having at least two possible protection IDs.

37. The apparatus of claim 12, wherein a first field of protection key registers can be re-configured at run-time because the first field is read/writable.

39. A machine-readable storage medium having stored instructions thereon, which when executed generates the apparatus of claim 12.

33. An apparatus comprising:

means for inputting configuration parameters that associate a first address location with a service module;

means for inputting protection parameters, wherein the protection parameters are selected from the group consisting of a number of different protection keys that can exist for modules in a device and a number of different protection IDs that can exist for modules in the device;

means for determining whether a request from a first module in the device should be passed on to the service module and executed based upon the inputted protection parameters; and

means for comparing a first protection ID assigned to the request to a map of one or more protection key registers to determine whether the request should be passed on to the service module and executed.

35. An apparatus comprising:

a configuration register to input configuration parameters that associate a first address location with a service module;

a protection key register to input protection parameters, wherein the protection parameters are selected from the group consisting of a number of different protection keys that can exist for modules in a device and a number of different protection IDs that can exist for modules in the device; and

security checking logic to determine whether a request from a first module in the device should be passed on to the service module and executed based upon the inputted protection parameters and the first address location of the service module; and

a first field in a software database to direct the security checking logic on which protection key register is to be used by the security checking logic when matching a first protection ID associated with the request to first address location of the service module.

36. An apparatus comprising:

a configuration register to input configuration parameters that associate a first address location with a service module;

a protection key register to input protection parameters, wherein the protection parameters are selected from the group consisting of a number of different protection keys that can exist for modules in a device and a number of different protection IDs that can exist for modules in the device;

security checking logic to determine whether a request from a first module in the device should be passed on to the service module and executed based upon the inputted protection parameters and the first address location of the service module; and

a bit vector to direct the security checking logic on which protection IDs associated with the request are allowed to access one or more service modules that are linked by region registers pointing to a first protection key register.

40. An apparatus, comprising:

a first set of registers for inputting configuration parameters that associate a first address location with service module;

a second set of registers for inputting protection parameters, wherein the protection parameters are selected from the group consisting of a number of different protection keys that can exist for modules in a device and a number of different protection IDs that can exist for modules in the device; and

a comparator to determine whether a request from a first module in the device should be passed on to the service module and executed based upon the inputted protection parameters in the second set of registers and the inputted configuration parameters in the first set of registers, wherein the comparator compares a first protection ID assigned to the request to a map of one or more protection key registers to determine whether the request should be passed on to the service module and executed.

41. A machine-readable storage medium having stored instructions thereon, which when executed generates the apparatus of claim 40.