利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

38 条记录 (耗时 0.063 秒)

    Vectored interrupt control within a system having a secure domain and a non-secure domain
    1.
    发明授权
    Vectored interrupt control within a system having a secure domain and a non-secure domain 有权
    具有安全域和非安全域的系统内的向量中断控制

    公开(公告)号：US07117284B2

    公开(公告)日：2006-10-03

    申请号：US10714562

    申请日：2003-11-17

    申请人： Simon Charles Watt ,  Christopher Bentley Dornan ,  Luc Orion ,  Nicolas Chaussade ,  Lionel Belnet ,  Stephane Eric Sebastien Brochier ,  David Hennah Mansell ,  Jonathan Sean Callan

    发明人： Simon Charles Watt ,  Christopher Bentley Dornan ,  Luc Orion ,  Nicolas Chaussade ,  Lionel Belnet ,  Stephane Eric Sebastien Brochier ,  David Hennah Mansell ,  Jonathan Sean Callan

    IPC分类号： G06F13/24

    CPC分类号： G06F9/4812

    摘要： A data processing apparatus is operable in a plurality of modes and in either a secure domain or a non-secure domain. When operating in a secure mode within the secure domain a program has access to secure data which is not accessible when the processor is operating in a non-secure mode. A vectored interrupt controller is provided to generate an exception handler address in response to an occurrence of an except condition. The vectored interrupt controller is programmable with parameters specifying for each exception condition whether an exception handler in the secure or the non-secure domain should be triggered and an exception handler address for use if the exception occurs when in the appropriate domain. The vectored interrupt controller also includes a parameter specifying a domain switching exception handler address for use if the exception condition occurs when the processor is not in the appropriate domain.

    摘要翻译： 数据处理装置可以以多种模式操作，也可以在安全域或非安全域中操作。 当在安全域内以安全模式操作时，程序可以访问当处理器以非安全模式操作时无法访问的安全数据。 提供向量中断控制器以响应于发生除了条件而产生异常处理程序地址。 向量中断控制器是可编程的，参数指定每个异常情况是否应触发安全或非安全域中的异常处理程序，如果在适当的域中发生异常，则使用异常处理程序地址。 向量中断控制器还包括指定域切换异常处理程序地址的参数，以便在处理器不在适当域中时发生异常情况时使用。

    Control of access to a memory by a device
    6.
    发明授权
    Control of access to a memory by a device 有权
    控制设备对存储器的访问

    公开(公告)号：US07305534B2

    公开(公告)日：2007-12-04

    申请号：US10714561

    申请日：2003-11-17

    申请人： Simon Charles Watt ,  Lionel Belnet ,  David Hennah Mansell ,  Nicolas Chaussade ,  Peter Guy Middleton

    发明人： Simon Charles Watt ,  Lionel Belnet ,  David Hennah Mansell ,  Nicolas Chaussade ,  Peter Guy Middleton

    IPC分类号： G06F12/00

    CPC分类号： G06F12/1491 ,  G06F21/6218 ,  G06F21/71 ,  G06F21/74 ,  G06F21/79 ,  G06F21/85 ,  G06F2221/2105 ,  G06F2221/2141 ,  G06F2221/2149

    摘要： The present invention provides a data processing apparatus and method for controlling access to a memory. The data processing apparatus has a secure domain and a non-secure domain, in the secure domain the data processing apparatus having access to secure data which is not accessible in the non-secure domain. The data processing apparatus comprises a device coupled to a memory via a device bus, and operable, when an item of data in the memory is required by the device, to issue onto the device bus a memory access request pertaining to either the secure domain or the non-secure domain. The memory is operable to store data required by the device, and contains secure memory for storing secure data and non-secure memory for storing non-secure data. In accordance with the present invention, the data processing apparatus further comprises partition checking logic coupled to the device bus and operable whenever the memory access request as issued by the device pertains to the non-secure domain, to detect if the memory access request is seeking to access the secure memory and upon such detection to prevent the access specified by that memory request. This approach significantly improves the security of data contained within a secure portion of memory.

    摘要翻译： 本发明提供一种用于控制对存储器的访问的数据处理装置和方法。 数据处理装置具有安全域和非安全域，在安全域中，数据处理装置具有对非安全域中不可访问的安全数据的访问。 数据处理装置包括经由设备总线耦合到存储器的设备，并且当设备需要存储器中的数据项时，可以向设备总线发出存储器访问请求，该存储器访问请求涉及安全域或 非安全域。 存储器可操作以存储设备所需的数据，并且包含用于存储安全数据的安全存储器和用于存储非安全数据的非安全存储器。 根据本发明，数据处理装置还包括耦合到设备总线的分区检查逻辑，每当由设备发布的存储器访问请求与非安全域相关时，可操作，以检测存储器访问请求是否正在寻找 以访问安全存储器并且在这种检测时防止由该存储器请求指定的访问。 这种方法显着提高了包含在存储器安全部分内的数据的安全性。

    Access control in a data processing apparatus
    7.
    发明授权
    Access control in a data processing apparatus 有权
    数据处理装置中的访问控制

    公开(公告)号：US07149862B2

    公开(公告)日：2006-12-12

    申请号：US10933478

    申请日：2004-09-03

    申请人： Andrew David Tune ,  Peter James Aldworth ,  Simon Charles Watt ,  Lionel Belnet ,  David Hennah Mansell

    发明人： Andrew David Tune ,  Peter James Aldworth ,  Simon Charles Watt ,  Lionel Belnet ,  David Hennah Mansell

    IPC分类号： G06F12/00

    CPC分类号： G06F12/1441

    摘要： A data processing apparatus and method are provided for controlling access to a slave device, the slave device having an address range associated therewith. The apparatus comprises control storage programmable to define a partition identifying a secure region and a non-secure region in the address range, with the data processing apparatus supporting a plurality of modes of operation including a secure mode, and the control storage being programmable only by software executing in the secure mode. A master device is arranged to issue an access request onto a bus, the access request identifying a sequence of addresses within the address range and including a control signal indicating whether the access request is a secure access request or a non-secure access request. The secure region is only accessible by a secure access request. Further, access control logic is provided which is associated with the slave device, the access control logic being operable to receive the access request from the bus and an indication of the partition from the control storage and, if the access request is a non-secure access request, to prevent access to the secure region.

    摘要翻译： 提供了一种用于控制对从设备的访问的数据处理设备和方法，该从设备具有与之相关联的地址范围。 该装置包括可编程的控制存储器，用于定义识别地址范围中的安全区域和非安全区域的分区，数据处理设备支持包括安全模式的多种操作模式，并且控制存储器仅可由 软件在安全模式下执行。 主设备被布置为在总线上发出访问请求，该访问请求标识地址范围内的一系列地址，并且包括指示该访问请求是安全访问请求还是非安全访问请求的控制信号。 安全区域只能通过安全访问请求访问。 此外，提供与从设备相关联的访问控制逻辑，访问控制逻辑可操作以从总线接收访问请求以及来自控制存储器的分区的指示，以及如果访问请求是非安全的 访问请求，以防止访问安全区域。

    Apparatus and method for generating constant values
    8.
    发明授权
    Apparatus and method for generating constant values 有权
    用于产生常数值的装置和方法

    公开(公告)号：US07146491B2

    公开(公告)日：2006-12-05

    申请号：US10972769

    申请日：2004-10-26

    申请人： Jonathan Sean Callan ,  David Hennah Mansell ,  Christopher Pedley ,  David James Seal

    发明人： Jonathan Sean Callan ,  David Hennah Mansell ,  Christopher Pedley ,  David James Seal

    IPC分类号： G06F9/302 ,  G06F9/315

    CPC分类号： G06F9/30181 ,  G06F9/30032 ,  G06F9/30167

    摘要： A data processing apparatus and method for generating constant values is provided. The data processing apparatus comprises a data processing unit operable in response to an instruction to perform a data processing operation on one or more data values. Shift logic is operable to selectively apply a shift operation to data to produce one of the data values for the data processing operation. Further, a plurality of registers are provided for storing data. The instruction has a register specifier field for identifying a register and a shift specifier field for specifying a shift to be applied to that register's data in order to produce one of the data values for the data processing operation. The register specifier field is allocatable a distinguished value, and if the register specifier field has that distinguished value, the shift logic is provided with a predetermined value and generates therefrom one of a plurality of constant values dependent on the shift specified by the shift specifier field, the generated constant value then being used as one of the data values for the data processing operation.

    摘要翻译： 提供了一种用于产生常数值的数据处理装置和方法。 数据处理装置包括数据处理单元，该数据处理单元响应于对一个或多个数据值执行数据处理操作的指令而可操作。 移位逻辑可操作以选择性地对数据应用移位操作以产生用于数据处理操作的数据值之一。 此外，提供多个用于存储数据的寄存器。 指令具有用于识别寄存器的寄存器说明符字段和用于指定要应用于该寄存器的数据的移位的移位说明符字段，以便产生数据处理操作的数据值之一。 寄存器说明符字段是可分配的识别值，并且如果寄存器说明符字段具有该识别值，则向移位逻辑提供预定值，并由此产生取决于由移位说明符字段指定的移位的多个常数值之一 ，然后将所生成的常数值用作数据处理操作的数据值之一。

    Technique for accessing memory in a data processing apparatus
    9.
    发明授权
    Technique for accessing memory in a data processing apparatus 有权
    用于访问数据处理设备中的存储器的技术

    公开(公告)号：US07185159B2

    公开(公告)日：2007-02-27

    申请号：US10714520

    申请日：2003-11-17

    申请人： Lionel Beinet ,  David Hennah Mansell ,  Simon Charles Watt

    发明人： Lionel Beinet ,  David Hennah Mansell ,  Simon Charles Watt

    IPC分类号： G06F12/00

    CPC分类号： G06F21/85 ,  G06F12/1491 ,  G06F21/629 ,  G06F21/74 ,  G06F2221/2105 ,  G06F2221/2141 ,  G06F2221/2149

    摘要： The present invention provides a data processing apparatus and method for accessing memory. The data processing apparatus has a secure domain and a non-secure domain, in the secure domain the data processing apparatus having access to secure data which is not accessible in the non-secure domain. The data processing apparatus comprises a device coupled via a device bus with the memory, the device being operable, when an item of data in the memory is required by the device, to issue onto the device bus a memory access request pertaining to either the secure domain or the non-secure domain. The memory is operable to store data required by the device, and contains secure memory for storing secure data and non-secure memory for storing non-secure data. In accordance with the invention, the memory access request as issued by the device includes a domain signal identifying whether the memory access request pertains to either the secure domain or the non-secure domain. The presence of this domain signal issued as part of the memory access request enables checking to be performed to ensure that secure data within the secure memory is not accessed by the device when the memory access request pertains to the non-secure domain.

    摘要翻译： 本发明提供一种访问存储器的数据处理装置和方法。 数据处理装置具有安全域和非安全域，在安全域中，数据处理装置具有对非安全域中不可访问的安全数据的访问。 数据处理设备包括经由设备总线与存储器耦合的设备，当设备需要存储器中的数据项时，该设备可操作地向设备总线发出与安全性相关的存储器访问请求 域或非安全域。 存储器可操作以存储设备所需的数据，并且包含用于存储安全数据的安全存储器和用于存储非安全数据的非安全存储器。 根据本发明，由设备发布的存储器访问请求包括识别存储器访问请求是否属于安全域或非安全域的域信号。 作为存储器访问请求的一部分而发布的该域信号的存在使得能够执行检查，以便当存储器访问请求与非安全域相关时，确保安全存储器内的安全数据不被设备访问。

    Diagnostic data capture control for multi-domain processors
    10.
    发明授权
    Diagnostic data capture control for multi-domain processors 有权
    多域处理器的诊断数据捕获控制

    公开(公告)号：US08082589B2

    公开(公告)日：2011-12-20

    申请号：US10714178

    申请日：2003-11-17

    申请人： Luc Orion ,  David Hennah Mansell

    发明人： Luc Orion ,  David Hennah Mansell

    IPC分类号： H04N7/16

    CPC分类号： G06F21/71 ,  G06F2221/2105

    摘要： There is provided a processor operable in a first domain and a second domain, the processor comprising: monitoring logic operable to monitor the processor and capture diagnostic data; a storage element operable to contain at least one control parameter; control logic operable to control the monitoring logic in dependence on the at least one control parameter and the domain in which the processor is operating, to suppress capturing of diagnostic data relating to predetermined activities of the processor in the first domain. In some embodiments the first domain is a secure domain and the second domain is a non-secure domain, the monitoring function being debug or trace.

    摘要翻译： 提供了可在第一域和第二域中操作的处理器，所述处理器包括：监视逻辑，可操作以监视处理器并捕获诊断数据; 存储元件，其可操作以包含至少一个控制参数; 控制逻辑可操作以根据所述至少一个控制参数和所述处理器在其中操作的所述域来控制所述监视逻辑，以抑制与所述第一域中的所述处理器的预定活动有关的诊断数据的捕获。 在一些实施例中，第一域是安全域，而第二域是非安全域，监视功能是调试或跟踪。