C-sky Microsystems Co., Ltd.

Alibaba Group Holding Limited

Peng Jiang

Jie Wang

Huanhuan Huang

Youfei Wu

Jun Yang

Jiaqi Xi

Aiyong Ma

Xianshao Chen

Yucan Gu

Shu Bao

Embodiments of the present disclosure provide a protective apparatus for an indirect access memory controller. The apparatus can include: a bus monitoring unit configured to monitor a bus address and detect an operation type of a bus accessing the indirect access memory controller, update a corresponding window register if the operation type is a window register operation, initiate permission authentication if the operation type is a register controlling operation, and perform list entry configuration if the operation type is a permission list configuration operation; a window register unit configured to store operation addresses of different access types; a permission list unit configured to partition a memory space into several virtual memory protection areas, and independently set a access permission attribute for each memory area; and an unauthorized operation processing unit configured to process a subsequent operation performed when a permission violating access occurs. Embodiments of the present disclosure can implement security protection for this type of memory by merely adding the protective apparatus between a bus and an indirect access memory controller, and a security function can be added to an original memory control module without modifying the indirect access memory controller.

Memory protective apparatus for indirect access memory controller

The present disclosure provides an off-chip memory address scrambling apparatus and method for a system on chip. The apparatus includes a true random number generator, a key memory and an on-chip security controller. The on-chip security controller is connected to the true random number generator, the key memory and an off-chip memory respectively and is configured to read or write data in the off-chip memory and perform address scrambling processing on the data. The on-chip security controller includes: a memory interface module, and an address scrambling module configured to read a random key stored in the key memory, to select according to a valid/invalid state of the random key to directly invoke the read random key or read again a random key that is generated by the true random number generator and stored into the key memory, and then to perform according to the random key scrambling algorithm processing on an unscrambled address inputted by the memory interface module to form a scrambled address, and output the scrambled address to an address scrambling module of the off-chip memory. The present disclosure can improve the security while high efficiency.

Off-chip memory address scrambling apparatus and method for system on chip

Embodiments of the disclosure provide an apparatus for adding a protection function for an indirect access memory controller. The apparatus can include: a bus monitoring unit configured to monitor a bus address, perform permission authentication if a register controlling operation is detected, and configure a list entry if a permission list configuring operation is detected; an permission list unit configured to partition a memory space into several virtual memory protection areas and independently set an access permission attribute (i.e.: readable, writable, erasable, etc.) of each memory area; a window register information bus configured to provide window register information, i.e., transmit window register information in the memory controller to the protective apparatus, wherein the window register information includes a read window address, a write window address, and an erase window address, and multiple window addresses can correspond to the same bus window register; and an unauthorized operation processing unit configured to process a subsequent operation performed when a permission violating access occurs. The present disclosure can add a memory protection function by merely making simple modifications, thereby achieving an objective of memory protection.

Apparatus for adding protection function for indirect access memory controller

Growing community of inventors

Hangzhou, China

Peng Jiang