Access control apparatus, access control system, processor, access control method, memory access control apparatus, memory access control system, and memory access control method

• US 7,653,861 B2
• Filed: 09/19/2006
• Issued: 01/26/2010
• Est. Priority Date: 03/22/2006
• Status: Expired due to Fees

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Kanai, Tatsunori, Yoshii, Kenichiro
• Primary Examiner(s): Rizk; Sam
• Application Number:
  US11/523,003
• Publication Number:
  US 20070221724A1
• Time in Patent Office: 1,225 Days
• Field of Search: 714/49, 714/752, 714/758, 341/67, 370/465, 370/505
• US Class Current: 714/758
• CPC Class Codes: G06F 11/1016 Error in accessing a memory location, i.e. addressing error
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 12/1466 Key-lock mechanism
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories

Abstract

An access control apparatus includes a writer syndrome generator that generates a writer syndrome of writer mask data to mask the parity-added data, the writer syndrome being associated with a writer access ID used when a writer that requests writing of the write data in the memory accesses the memory; a write mask generator that generates the writer mask data based on the writer syndrome, the writer access ID, and a write address in the memory at which the writer writes the write data; a first XOR calculator that obtains first post-operation data by calculating an XOR between the parity-added data and the writer mask data; and a write address converter that converts the write address into another address determined by the writer access ID.

Claims

1. An access control apparatus to control an access among a writer, a reader, and a memory, comprising:

a parity generator that generates a parity of write data to be written in the memory;

a parity adder that adds the parity to the write data to generate parity-added data;

a writer syndrome generator that generates a writer syndrome of writer mask data to mask the parity-added data, the writer syndrome being associated with a writer access ID used when the writer accesses the memory, the writer requesting writing of the write data into the memory;

a write mask generator that generates the writer mask data based on the writer syndrome, the writer access ID, and a write address in the memory at which the writer writes the write data;

a first XOR calculator that obtains first post-operation data by calculating an XOR between the parity-added data and the writer mask data;

a write address converter that converts the write address into another address determined by the writer access ID;

a write unit that writes the first post-operation data to the address converted by the write address converter;

a reader syndrome generator that generates a reader syndrome of reader mask data to mask the first post-operation data, the reader syndrome being associated with a reader access ID used when the reader accesses the memory, the reader requesting reading of data from the memory;

a reader mask generator that generates the reader mask data based on the reader syndrome, the reader access ID, and a read address in the memory at which the reader reads the read data from;

a read address converter that converts the read address into another address determined based on the reader access ID;

a read unit that reads the first post-operation data from the address converted by the read address converter;

a second XOR calculator that obtains second post-operation data by calculating an XOR between the reader mask data and the first post-operation data;

a data syndrome calculator that calculates an actual data syndrome from the second post-operation data; and

an output determining unit that determines whether the second post-operation data is to be output as the read data which is requested by the reader to read, based on the actual data syndrome.

2. The apparatus according to claim 1, further comprising:

a first table that holds the writer access ID and write address convert information associated with each other, the write address convert information being used when the write address is converted to another address; and

a second table that holds the reader access ID and read address convert information associated with each other, the read address convert information being used when the read address is converted to another address, wherein

the write address converter converts the write address into another address by using the write address convert information associated with the writer access ID in the first table, and

the read address conversion unit converts the read address into another address by using the read address convert information associated with the reader access ID in the second table.

3. The apparatus according to claim 1, wherein

the write unit writes data in units of write sizes capable of writing the data continuously,

the write address converter converts the write addresses of a plurality of words corresponding to a unit for accessing to the memory included in the write size to other continuous addresses, and

the read unit reads the first post-operation data in units of read sizes capable of reading data continuously.

4. The apparatus according to claim 3, further comprising:

a data transfer unit that transfers the first post-operation data read by the read unit to the reader according to an order of the addresses associated with the respective words in units of the words.

5. An access control apparatus to control an access among a writer, a reader, a cache memory, and a memory, comprising:

a read request receiver that acquires a read address from a reader;

a cache monitor that determines whether the read address acquired by the read request receiver is stored in the cache memory, where the cache memory stores data requested by the writer or the reader, an address of the data, and a requester access ID used when the writer or the reader capable of accessing the data accesses the memory, the data, the address, and the requester access ID being associated with each other;

a reader syndrome generator that generates a reader syndrome of the reader mask data to mask the data stored in the memory, the reader syndrome being associated with the reader access ID used when the reader accesses the memory, when the cache monitor determines that the read address acquired by the read request receiver is not stored in the cache memory;

a reader mask generator that generates the reader mask data based on the reader syndrome, the reader access ID, and the read address;

a read address converter that converts the address acquired by the read request receiver to another address determined by the reader access ID;

a read unit that reads first post-operation data subjected to a predetermined calculation to the data from the address converted by the read address converter;

a first XOR calculator that obtains second post-operation data by calculating an XOR between the reader mask data and the first post-operation data read by the read unit;

a data syndrome calculator that calculates an actual data syndrome from the second post-operation data; and

an output determining unit that determines whether the second post-operation data is output as the data which is requested by the reader to be read, based on the actual data syndrome.

6. The apparatus according to claim 5, further comprising:

a first data transfer unit that uses the second post-operation data as the data, and writes a plurality of words in the data corresponding to a unit for accessing the memory in the cache memory associated with the addresses obtained before converting by the read address converter of the respective words, when the output determining unit determines that the data is output; and

a second data transfer unit that transfers the data written in the cache memory by the first data transfer unit from the cache memory to the reader according to an order of the addresses associated with the respective words in units of the words.

7. The apparatus according to claim 5, further comprising:

a second data transfer unit that transfers the data written in the cache memory from the cache memory to the reader according to an order of the addresses associated with the respective words in units of the word.

8. The apparatus according to claim 5, further comprising:

a write request receiver that acquires data to be written in the memory and a write address at which the data is to be written from a writer which requests the data to be written in the memory;

a parity generator that generates parity of data to be written in the memory;

a parity adder that adds the parity generated by the parity generator to the data to generate a parity-added data;

a writer syndrome generator that generates a writer syndrome of writer mask data to mask the parity-added data, the writer syndrome being associated with a writer access ID used when the writer accesses the memory;

a write mask generator that generates the writer mask data based on the writer syndrome, the writer access ID, and a write address;

a first XOR calculator that obtains first post-operation data by calculating an XOR between the parity-added data and the writer mask data;

a write address converter that converts the write address into another address determined by the writer access ID; and

a write unit that writes the first post-operation data to the address converted by the write address converter, wherein

the read unit reads the first post-operation data from the address converted by the write address converter.

9. The apparatus according to claim 8, further comprising:

a data storage that stores the data and the write address which are acquired by the write request receiver, and the writer access ID in the cache memory associated with each other.

10. An access control system comprising:

a processor;

a memory controller; and

a memory access control apparatus that controls access to a memory, wherein

the memory access control apparatus includes;

a parity generator that generates a parity of write data to be written in the memory;

a parity adder that adds the parity to the write data to generate parity-added data;

a writer syndrome generator that generates a writer syndrome of writer mask data to mask the parity-added data, the writer syndrome being associated with a writer access ID used when a writer accesses the memory, the writer requesting writing of the write data into the memory;

a write mask generator that generates the writer mask data based on the writer syndrome, the writer access ID, and a write address in the memory at which the writer writes the write data;

a first XOR calculator that obtains first post-operation data by calculating an XOR between the parity-added data and the writer mask data;

a write address converter that converts the write address into another address determined by the writer access ID;

a write unit that writes the first post-operation data to the address converted by the write address converter;

a reader syndrome generator that generates a reader syndrome of reader mask data to mask the first post-operation data, the reader syndrome being associated with a reader access ID used when a reader accesses the memory, the reader requesting reading of data from the memory;

a reader mask generator that generates the reader mask data based on the reader syndrome, the reader access ID, and a read address at which the reader data is to be read;

a read address converter that converts the read address into another address determined based on the reader access ID;

a read unit that reads the first post-operation data from the address converted by the read address converter;

a second XOR calculator that obtains second post-operation data by calculating an XOR between the reader mask data and the first post-operation data;

a data syndrome calculator that calculates an actual data syndrome from the second post-operation data; and

an output determining unit that determines whether the second post-operation data is to be output as the read data which is requested by the reader to read, based on the actual data syndrome.

11. An access control system comprising:

a processor; and

a memory access control apparatus that controls access to a memory, wherein

the memory access control apparatus includes;

a parity generator that generates a parity of write data to be written in the memory;

a parity adder that adds the parity generated by the parity generator to the write data to generate parity-added data;

a writer syndrome generator that generates a writer syndrome of writer mask data to mask the parity-added data, the writer syndrome being associated with a writer access ID used when a writer accesses the memory, the writer requesting writing of the write data into the memory;

a write mask generator that generates the writer mask data based on the writer syndrome, the writer access ID, and a write address in the memory at which the writer writes the write data;

a first XOR calculator that obtains first post-operation data by calculating an XOR between the parity-added data and the writer mask data;

a write address converter that converts the write address into another address determined by the writer access ID;

a write unit that writes the first post-operation data to the address converted by the write address converter;

a reader syndrome generator that generates a reader syndrome of reader mask data to mask the first post-operation data, the reader syndrome being associated with a reader access ID used when a reader accesses the memory, the reader requesting reading of data from the memory;

a reader mask generator that generates the reader mask data based on the reader syndrome, the reader access ID, and a read address at which the reader data is to be read;

a read address converter that converts the read address into another address determined based on the reader access ID;

a read unit that reads the first post-operation data from the address converted by the read address converter;

a second XOR calculator that obtains second post-operation data by calculating an XOR between the reader mask data and the first post-operation data;

a data syndrome calculator that calculates an actual data syndrome from the second post-operation data; and

an output determining unit that determines whether the second post-operation data is to be output as the read data which is requested by the reader to read, based on the actual data syndrome.

12. An access control system comprising:

a processor;

a memory controller; and

a memory access control apparatus that controls access to a memory, wherein

the memory access control apparatus includes;

a read request receiver that acquires data to be read from the memory, and a read address of the data from a reader which requests read out of data from the memory;

a cache monitor that determines whether the read address acquired by the read request receiver is stored in a cache memory, where the cache memory stores data requested by a writer which requests data to be written in the memory or the reader, an address of the data, and a requester access ID used when the writer or the reader capable of accessing the data accesses the memory, the data, the address, and the requester access ID being associated with each other;

a reader syndrome generator that generates a reader syndrome of the reader mask data to mask the data stored in the memory, the reader syndrome being associated with the reader access ID used when the reader accesses the memory, when the cache monitoring unit determines that the read address acquired by the read request receiver is not stored in the cache memory;

a reader mask generator that generates the reader mask data based on the reader syndrome, the reader access ID, and the read address;

a read address converter that converts the address acquired by the read request receiver to another address determined by the reader access ID;

a read unit that reads first post-operation data subjected to a predetermined calculation to the data from the address converted by the read address converter;

a first XOR calculator that obtains second post-operation data by calculating an XOR between the reader mask data and the first post-operation data read by the read unit;

a data syndrome calculator that calculates an actual data syndrome from the second post-operation data; and

an output determining unit that determines whether the second post-operation data is output as the data which is requested by the reader to be read, based on the actual data syndrome.

13. An access control system comprising:

a processor; and

a memory access control apparatus that controls access to a memory, wherein

the memory access control apparatus includes;

a read request receiver that acquires data to be read from the memory, and a read address of the data from a reader which requests read out of data from the memory;

a cache monitor that determines whether the read address acquired by the read request receiver is stored in a cache memory, where the cache memory stores data requested by a writer which requests data to be written in the memory or the reader, a address of the data, and a requester access ID used when the writer or the reader capable of accessing the data accesses the memory, the data, the address, and the requester access ID being associated with each other;

a reader syndrome generator that generates a reader syndrome of the reader mask data to mask the data stored in the memory, the reader syndrome being associated with the reader access ID used when the reader accesses the memory, when the cache monitoring unit determines that the read address acquired by the read request receiver is not stored in the cache memory;

a reader mask generator that generates the reader mask data based on the reader syndrome, the reader access ID, and the read address;

a read address converter that converts the address acquired by the read request receiver to another address determined by the reader access ID;

a read unit that reads first post-operation data subjected to a predetermined calculation to the data from the address converted by the read address converter;

a first XOR calculator that obtains second post-operation data by calculating an XOR between the reader-mask data and the first post-operation data read by the read unit;

a data syndrome calculator that calculates an actual data syndrome from the second post-operation data; and

an output determining unit that determines whether the second post-operation data is output as the data which is requested by the reader to be read, based on the actual data syndrome.

14. A processor comprising:

a memory controller; and

a memory access control apparatus that controls access to a memory, wherein

the memory access control apparatus includes;

a parity generator that generates a parity of write data to be written in the memory;

a parity adder that adds the parity generated by the parity generator to the write data to generate parity-added data;

a writer syndrome generator that generates-a writer syndrome of writer mask data to mask the parity-added data, the writer syndrome being associated with a writer access ID used when a writer accesses the memory, the writer requesting writing of the write data into the memory;

a write mask generator that generates the writer mask data based on the writer syndrome, the writer access ID, and a write address in the memory at which the writer writes the write data;

a first XOR calculator that obtains first post-operation data by calculating an XOR between the parity-added data and the writer mask data;

a write address converter that converts the write address into another address determined by the writer access ID;

a write unit that writes the first post-operation data to the address converted by the write address converter;

a reader syndrome generator that generates a reader syndrome of reader mask data to mask the first post-operation data, the reader syndrome being associated with a reader access ID used when a reader accesses the memory, the reader requesting reading of data from the memory;

a reader mask generator that generates the reader mask data based on the reader syndrome, the reader access ID, and a read address at which the reader data is to be read;

a read address converter that converts the read address into another address determined based on the reader access ID;

a read unit that reads the first post-operation data from the address converted by the read address converter;

a second XOR calculator that obtains second post-operation data by calculating an XOR between the reader mask data and the first post-operation data;

a data syndrome calculator that calculates an actual data syndrome from the second post-operation data; and

an output determining unit that determines whether the second post-operation data is to be output as the read data which is requested by the reader to read, based on the actual data syndrome.

15. An access control method to control an access among a writer, a reader, and a memory, comprising:

generating a parity of write data to be written in the memory;

adding the parity generated to the write data to generate parity-added data;

generating a writer syndrome of writer mask data to mask the parity-added data, the writer syndrome being associated with a writer access ID used when the writer accesses the memory, the writer requesting writing of the write data into the memory;

generating the writer mask data based on the writer syndrome, the writer access ID, and a write address in the memory at which the writer writes the write data;

obtaining first post-operation data by calculating an XOR between the parity-added data and the writer mask data;

converting the write address into another address determined by the writer access ID;

writing the first post-operation data to the address converted;

generating a reader syndrome of reader mask data to mask the first post-operation data, the reader syndrome being associated with a reader access ID used when the reader accesses the memory, the reader requesting reading of data from the memory;

generating the reader mask data based on the reader syndrome, the reader access ID, and a read address at which the reader data is to be read;

converting the read address into another address determined based on the reader access ID;

reading the first post-operation data from the address converted;

obtaining second post-operation data by calculating an XOR between the reader mask data and the first post-operation data;

calculating an actual data syndrome from the second post-operation data; and

determining whether the second post-operation data is to be output as the read data which is requested by the reader to read, based on the actual data syndrome.

16. A memory access control method to control an access among a writer, a reader, and a memory, comprising:

acquiring data to be read from the memory, and a read address of the data from the reader which requests read out of data from the memory;

determining whether the read address is stored in a cache memory, where the cache memory stores data requested by the writer which requests data to be written in the memory or the reader, a address of the data, and a requester access ID used when the writer or the reader capable of accessing the data accesses the memory, the data, the address, and the requester access ID being associated with each other;

generating a reader syndrome of the reader mask data to mask the data stored in the memory, the reader syndrome being associated with the reader access ID used when the reader accesses the memory, when the read address is determined not to be stored in the cache memory;

generating the reader mask data based on the reader syndrome, the reader access ID, and the read address;

converting the address to another address determined by the reader access ID;

reading first post-operation data subjected to a predetermined calculation to the data from the address converted;

obtaining second post-operation data by calculating an XOR between the reader mask data and the first post-operation data;

calculating an actual data syndrome from the second post-operation data; and

determining whether the second post-operation data is output as the data which is requested by the reader to be read, based on the actual data syndrome.