Apparatus and method for partitioning, sandboxing and protecting external memories
    1.
    发明申请
    Apparatus and method for partitioning, sandboxing and protecting external memories 审中-公开
    用于分割,沙箱和保护外部存储器的装置和方法

    公开(公告)号:US20110191562A1

    公开(公告)日:2011-08-04

    申请号:US12714367

    申请日:2010-02-26

    IPC分类号: G06F12/14 G06F12/06

    CPC分类号: G06F12/06 G06F12/14

    摘要: A technique to provide an integrated circuit that performs memory partitioning to partition a memory into a plurality of regions, in which the memory is accessed by a plurality of heterogeneous processing devices that operate to access the memory. The integrated circuit also assigns a security level for each region of the memory and permits a memory access by a transaction to a particular region of the memory, only when a level of security assigned to the transaction meets or exceeds the assigned security level for the particular region. The integrated circuit also performs sandboxing by assigning which of the plurality of processing devices are permitted access to each of the plurality of regions. The integrated circuit may implement only the security level function or only the sandboxing function, or the integrated circuit may implement them both. In some instances, a scrambling/descrambling function is included to scramble/descramble data. In one application, the integrated circuit is included within a mobile phone.

    摘要翻译: 一种提供集成电路的技术,其执行存储器分区以将存储器分割成多个区域,其中存储器被操作以访问存储器的多个异构处理设备访问。 集成电路还为存储器的每个区域分配安全级别,并且仅当分配给事务的安全级满足或超过特定的分配的安全级别时才允许通过存储器的特定区域的事务的存储器访问 地区。 集成电路还通过分配多个处理设备中的哪一个被允许访问多个区域中的每一个来执行沙箱。 集成电路只能实现安全级别功能或仅实施沙盒功能,或者集成电路可以实现它们。 在一些情况下,加扰/解扰功能被包括以加扰/解扰数据。 在一个应用中,集成电路被包括在移动电话中。