Resource domain partioning in a data processing system

Patent metadata

Field	Value
Publication number	US-9830295-B2
Application number	US-201514598199-A
Country	US
Kind code	B2
Filing date	Jan 15, 2015
Priority date	Jan 15, 2015
Publication date	Nov 28, 2017
Grant date	Nov 28, 2017

Abstract

A resource domain controller in a data processing system stores information that is used to group various resources, such as bus masters and peripherals, into common domains. Each group can be referred to as a resource domain and can include one or more data processor and peripheral devices. The resource domain information is then used to determine whether a particular access request from a data processor is authorized to access its intended target, e.g., one of the peripheral devices, by determining whether the access request and the intended target each belong to a common resource domain. If so, the access request is allowed, otherwise the access request is prevented from being successfully completed.

First claim

What is claimed is:

1. A method, comprising:
assigning, by a resource domain controller, a plurality of bus masters to corresponding at least one resource domain of a plurality of resource domains, including assigning a first bus master of the plurality of bus masters to a first at least one resource domain;
assigning, by the resource domain controller, a first peripheral to a second at least one resource domain of the plurality of resource domains;
receiving at a first peripheral access control module a first access request from the first bus master to access the first peripheral, the first access request comprising a resource domain identifier that is indicative of the first at least one resource domain;
receiving, from the resource domain controller, a first peripheral resource domain indicator at the first peripheral access control module indicating the second at least one resource domain is assigned to the first peripheral; and
allowing the first access request in response to determining at the first peripheral access control module that the first at least one resource domain and the second at least one resource domain have a common resource domain, otherwise, preventing the first access request in response to determining at the first peripheral access control module that the first at least one resource domain and the second at least one resource domain do not have a common resource domain;
subsequent to receiving the first peripheral resource domain indicator, removing power from the first peripheral access control module while maintaining power to the resource domain controller;
subsequent to removing the power from the first peripheral access control module, restoring power to the first peripheral access control module; and
in response to restoring the power, preventing the access requests until the first peripheral resource domain identifier being received at the first peripheral access control module.

2. The method of claim 1 , further comprising:
in response to receiving the first peripheral resource domain identifier, storing the first peripheral resource domain identifier at a volatile storage location local to the first peripheral access control module.

3. The method of claim 1 further comprising:
programming the resource domain controller to store resource domain information that indicates the first bus master is a member of the first at least one resource domain and that the first peripheral is a member of the second at least one resource domain.

4. A method, comprising:
assigning, by a resource domain controller, a plurality of bus masters to corresponding at least one resource domain of a plurality of resource domains, including assigning a first bus master of the plurality of bus masters to a first at least one resource domain;
assigning, by the resource domain controller, a first peripheral to a second at least one resource domain of the plurality of resource domains;
receiving at a first peripheral access control module a first access request from the first bus master to access the first peripheral, the first access request comprising a resource domain identifier that is indicative of the first at least one resource domain;
receiving, from the resource domain controller, a first peripheral resource domain indicator at the first peripheral access control module indicating the second at least one resource domain is assigned to the first peripheral; and
allowing the first access request in response to determining at the first peripheral access control module that the first at least one resource domain and the second at least one resource domain have a common resource domain, otherwise, preventing the first access request in response to determining at the first peripheral access control module that the first at least one resource domain and the second at least one resource domain do not have a common resource domain; and
subsequent to receiving the first peripheral resource domain indicator, removing power from the first peripheral access control module while maintaining power to the resource domain controller, and continuing to provide the first peripheral resource domain indicator to the first peripheral access control module from the resource domain controller while power is removed from the first peripheral access control module.

5. A method, comprising:
assigning, by a resource domain controller, a plurality of bus masters to corresponding at least one resource domain of a plurality of resource domains, including assigning a first bus master of the plurality of bus masters to a first at least one resource domain;
assigning, by the resource domain controller, a first peripheral to a second at least one resource domain of the plurality of resource domains;
receiving at a first peripheral access control module a first access request from the first bus master to access the first peripheral, the first access request comprising a resource domain identifier that is indicative of the first at least one resource domain;
receiving, from the resource domain controller, a first peripheral resource domain indicator at the first peripheral access control module indicating the second at least one resource domain is assigned to the first peripheral; and
allowing the first access request in response to determining at the first peripheral access control module that the first at least one resource domain and the second at least one resource domain have a common resource domain, otherwise, preventing the first access request in response to determining at the first peripheral access control module that the first at least one resource domain and the second at least one resource domain do not have a common resource domain; and
after applying power to the resource domain controller, and prior to programming any resource domain information at the resource domain controller, allowing the first bus master to access the first peripheral.

6. The method of claim 5 , wherein the first peripheral is accessible at a plurality of addresses and only a portion of the plurality of addresses are assigned to the second at least one resource domain.

7. The method of claim 5 , wherein the first peripheral is accessible at a plurality of addresses, wherein each one of the plurality of addresses is assigned to the second at least one resource domain.

8. A method, comprising:
assigning, by a resource domain controller, a plurality of bus masters to corresponding at least one resource domain of a plurality of resource domains, including assigning a first bus master of the plurality of bus masters to a first at least one resource domain;
assigning, by the resource domain controller, a first peripheral to a second at least one resource domain of the plurality of resource domains;
receiving at a first peripheral access control module a first access request from the first bus master to access the first peripheral, the first access request comprising a resource domain identifier that is indicative of the first at least one resource domain;
receiving, from the resource domain controller, a first peripheral resource domain indicator at the first peripheral access control module indicating the second at least one resource domain is assigned to the first peripheral; and
allowing the first access request in response to determining at the first peripheral access control module that the first at least one resource domain and the second at least one resource domain have a common resource domain, otherwise, preventing the first access request in response to determining at the first peripheral access control module that the first at least one resource domain and the second at least one resource domain do not have a common resource domain;
detecting a tamper event at the

Assignees

• Case Lawrence L
• Cannon Charles E
• Gallimore Simon J
• Wienecke Glen G
• Nxp Usa Inc

Inventors

• Case Lawrence L
• Cannon Charles E
• Gallimore Simon J
• Wienecke Glen G

Classifications

• G06F13/4068 Primary

  Electrical coupling · CPC title

• G06F9/5011

  the resources being hardware resources other than CPUs, Servers and Terminals · CPC title