WO2017071429A1 - Data access method and bus - Google Patents

Abstract

A data access method, comprising: a bus receives an access request sent by at least one host device, the access request carrying an access address corresponding to the at least one host device (S101); the bus determines a first host device from among the least one host devices (S102); the bus determines, on the basis of the access address of the first host device and a preset range of addresses of at least one slave device, whether the first host device corresponds to a target slave device of the at least one slave devices, the access address of the first host device being within the range of addresses of the target slave device (S103); if it is determined that the first host device corresponds to the target slave device, the bus determines whether the access request by the first host device with respect to target slave device is valid, and then determines whether the first host device realizes data access with respect to target slave device (S104). The embodiment further provides a corresponding bus.

Description

Data access method and bus Technical field

The present invention relates to digital integrated circuit IC design techniques in the field of communications, and more particularly to a data access method and bus.

Background technique

With the development of SoC (System On Chip) technology, more and more functional modules are integrated in one chip, and each module has higher and higher access requirements for memory. Therefore, the on-chip bus is in the chip architecture. It is very important that the on-chip bus realizes the control of each slave on the on-chip host is an indispensable part of the system on chip. At present, many chip designs use the Advanced High Performance Bus (AHB) protocol or the Advanced Peripheral Bus (APB) in the on-chip bus protocol of the Advanced Microcontroller Bus Architecture (AMBA). protocol.

The prior art generally does not support the security function with a slave. To implement the management of the slave of the AHB or APB protocol, the currently commonly used method is to utilize the NIC301/400, but such a bus matrix code is complicated and it is not easy to find a problem; The AHB bus is taken as an example. As shown in Figure 1, the NIC301/400 converts the host-side protocol into an AXI (Advanced eXtensible Interface) and converts it into a slave-side protocol. After the protocol is transferred, the access efficiency is reduced. This is a big bottleneck for a multi-efficiency slave; and there is a GPV inside the NIC301/400, which is used to configure the security attributes of the slaves. It takes up 1M of address space, which is a waste of address space. Complex protocol conversion introduces more logic, making timing worse.

Summary of the invention

In order to solve the above technical problem, embodiments of the present invention are expected to provide a data access method and a total The line can reduce the bus matrix logic, improve the transmission efficiency of the bus, and reduce the complexity of the bus system.

The technical solution of the embodiment of the present invention is implemented as follows:

An embodiment of the present invention provides a data access method, where the method includes:

Receiving an access request sent by at least one host, where the access request carries an access address of at least one host;

Determining a first host from the at least one host;

Determining, according to the access address of the first host and the preset address range of the at least one slave, whether the first host corresponds to the target slave from the at least one slave, and the access address of the first host is in the target Within the address range of the machine;

When it is determined that the first host corresponds to the target slave, determining whether the access request of the first host to the target slave is legal, and determining whether the first host implements data on the target slave access.

In the foregoing solution, the access request further includes a security access status of the first host, where the security access status of the first host includes: security and non-security; and determining that the first host corresponds to the target When it is determined, it is determined whether the access request of the first host to the target slave is legal, including:

When it is determined that the first host corresponds to the target slave, and the security access status of the first host is security, determining that the first host access request to the target slave is legal;

When it is determined that the first host corresponds to the target slave, and the secure access status of the first host is non-secure, obtaining a secure address range of the target slave; when the access address of the first host is not in the When the target slave is within the secure address range, determining that the first host access request to the target slave is legal; when the access address of the first host is within the secure address range of the target slave, Determining that the access request of the first host to the target slave is illegal.

In the above solution, the determining, from the at least one slave, whether the first host corresponds to a destination After the slave machine, the method further includes:

When it is determined that the first host does not correspond to the target slave, determining that the first host access request to the slave is illegal, and interrupting data access by the first host to the slave.

In the above solution, the determining whether the first host implements data access to the target slave includes:

Transmitting access data of the first host to the target slave when determining that the first host access request to the target slave is legal;

When it is determined that the access request of the first host to the target slave is illegal, interrupting data access by the first host to the target slave is interrupted.

In the above solution, the access request further carries a protocol type of the first host and a protocol type of the target slave; after determining the first host from the at least one host, the according to the first host The method further includes: an access address and a preset address range of the at least one slave, and determining, by the at least one slave, whether the first host corresponds to the target slave, the method further includes:

When the protocol type of the first host is inconsistent with the protocol type of the target slave, converting the protocol type of the first host to the protocol type of the target slave.

An embodiment of the present invention provides a bus, where the bus includes:

An arbitration unit, configured to receive an access request sent by at least one host, where the access request carries an access address corresponding to at least one host; and determine a first host from the at least one host, and output an access address of the first host to Address decoding unit;

The address decoding unit is configured to determine, according to an access address of the first host received by the arbitration unit and a preset address range of the at least one slave, whether the first host corresponds to the target from the at least one slave The access address of the first host is within the address range of the target slave, and outputs the determination result to the security management unit;

The security management unit is configured to determine, when the determination result is that the first host corresponds to the target slave, whether the access request of the first host to the target slave is legal, And determining whether the first host implements data access to the target slave.

In the foregoing bus, the access request received by the arbitration unit further carries a security access status of the first host, and the security access status of the first host includes: security and non-security;

The security management unit is configured to determine, when the address decoding unit determines that the first host corresponds to the target slave, and the secure access status of the first host is secure, determine the first host The access request of the target slave is legal; and when the address decoding unit determines that the first host corresponds to the target slave, and the secure access status of the first host is non-secure, acquiring the target slave a security address range, when the access address of the first host is not within the secure address range of the target slave, determining that the first host access request to the target slave is legal; when the first host When the access address is within the secure address range of the target slave, it is determined that the access request of the first host to the target slave is illegal.

In the above bus, the security management unit is further configured to: after determining, from the at least one slave, whether the first host corresponds to the target slave, when determining that the first host does not correspond to the target slave And determining that the access request of the first host to the slave is illegal, and interrupting data access by the first host to the slave.

In the above bus, the security management unit is further configured to: when it is determined that the access request of the first host to the target slave is legal, transmit the access data of the first host to the target slave; When it is determined that the access request of the first host to the target slave is illegal, interrupting data access by the first host to the target slave.

In the above bus, the bus further includes: a protocol conversion unit; the access request further carries a protocol type of the first host and a protocol type of the target slave;

The protocol conversion unit is configured to: after the arbitration unit determines the first host from the at least one host, the address decoding unit is configured according to an access address of the first host and a preset address range of the at least one slave. Before determining, by the at least one slave, whether the first host corresponds to the target slave, when the protocol type of the first host is different from the protocol type of the target slave And converting the protocol type of the first host to a protocol type of the target slave.

The arbitration unit, the address decoding unit, the security management unit, and the protocol conversion unit may use a central processing unit (CPU) and a digital signal processor (DSP, Digital Singnal) when performing processing. Processor) or Field-Programmable Gate Array (FPGA) implementation.

The embodiment of the present invention provides a data access method and a bus. The bus receives an access request sent by at least one host, where the access request carries an access address corresponding to at least one host; and the first host is determined from at least one host; Determining, by the at least one slave, whether the first host corresponds to the target slave, the access address of the host and the preset address range of the at least one slave, the access address of the first host being within the address range of the target slave; When it is determined that the first host corresponds to the target slave, determining whether the access request of the first host to the target slave is legal, and determining whether the first host implements data access to the target slave. With the above technical implementation scheme, since the security management function is set in the bus, multiple groups of hosts can be accessed to access multiple sets of slaves, and the number and protocol types of the master and slave can be configured as needed; the bus can perform security management on its own without internal Excess protocol conversion and register unit can reduce the bus matrix logic, improve the transmission efficiency of the bus, and reduce the complexity of the bus system.

DRAWINGS

1 is a block diagram of a prior art bus system;

2 is a flowchart 1 of a data access method according to an embodiment of the present invention;

FIG. 3 is a schematic diagram of dividing a slave address range according to an embodiment of the present invention;

4 is a logic circuit diagram of an exemplary security management unit according to an embodiment of the present invention;

FIG. 5 is a diagram of generating a legal logic signal according to an embodiment of the present invention;

FIG. 6 is a block diagram of a bus access according to an embodiment of the present invention;

FIG. 7 is a second flowchart of a data access method according to an embodiment of the present invention;

FIG. 8 is a flowchart 3 of a data access method according to an embodiment of the present invention;

FIG. 9 is a schematic structural diagram 1 of a bus according to an embodiment of the present disclosure;

FIG. 10 is a schematic structural diagram 2 of a bus according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in the following with reference to the accompanying drawings.

Embodiment 1

An embodiment of the present invention provides a data access method. As shown in FIG. 2, the method may include:

S101. The bus receives an access request sent by at least one host, where the access request carries an access address corresponding to at least one host.

In the embodiment of the present invention, host-to-slave data access is performed based on the structure of the host, the bus, and the slave. The embodiment of the present invention can be applied to a matrix/bus bridge, specifically a data access process between at least one master and at least one slave, that is, at least one host performs at least one slave through a bus. data access.

Specifically, at least one host sends an access request to the bus, and the bus determines which host to select for access to the slave. That is, the bus receives an access request sent by at least one host, wherein the access request includes an access address of a slave that each of the at least one host wants to access.

It should be noted that the arbitration unit in the bus performs the selection of the first host, and the specific selection process may be implemented by the prior art, and will not be described in detail herein.

S102. The bus determines the first host from the at least one host.

After the bus receives the access request sent by the at least one host, the bus selects one host from the at least one host as the first host to perform the first host-to-slave access request.

Specifically, the bus determines a secure access status of the first host and the first host from the at least one host. The arbitration unit of the bus determines the first host from the at least one host, and the first host obtains the access right.

It should be noted that each host has a security signal indicating whether the transmission initiated by the corresponding host is secure or not. The security signal indication in the embodiment of the present invention may be a secure access status of the host.

In an embodiment of the present invention, the security access status of a host may be represented by 0 and 1. Illustratively, 0 may indicate security, and 1 may indicate non-security. The security and non-secure representation of the security access status of the specific host is not limited in the embodiment of the present invention.

Exemplarily, five hosts have to access data from the slave. Therefore, five hosts respectively send access requests to the bus. At this time, the arbitration unit of the bus selects one of the five hosts by arbitration (first) The host) gains access to the slave.

S103. The bus determines, according to the access address of the first host and the preset address range of the at least one slave, whether the first host corresponds to the target slave from the at least one slave, and the access address of the first host is at the target Within the address range of the machine.

It should be noted that each slave in the embodiment of the present invention has an address range of the slave, and the address range of each slave is determined, that is, a slave corresponds to an address range, and access in the address range is The addresses correspond to the above one slave.

Specifically, the bus determines, according to the access address of the first host and the preset address range of the at least one slave, whether the access address of the first host corresponds to the target slave from the at least one slave, and the access address of the first host Within the address range of the target slave, that is, the access address of the first host may correspond to an address range of one of the at least one slave's address range, the corresponding slave being the target slave.

The address decoding unit of the bus compares the access address of the first host with the preset address range of the at least one slave, and determines, from the at least one slave, whether the access address of the first host corresponds to the target slave, When the access address of the first host can correspond to the address range of one of the at least one slave address range, the corresponding slave is the target slave.

In an embodiment of the present invention, when the access address of the first host is in the preset to When there is one slave in the address range of one slave, the address range of the slave is the target slave to be accessed by the first master. When the access address of the first host is not within the address range of any of the preset slaves of at least one slave (ie, not within the address range of any of the slaves), the access address characterizing the first host is an empty address. The access address is not the address of the slave.

Exemplarily, when the access address of the first host is 10, since the address range of the at least one slave includes a total of 15-50, the access address of the first host is not in the address range of the at least one slave, that is, the first The host's access address is empty.

S104. When it is determined that the first host corresponds to the target slave, the bus determines whether the access request of the first host to the target slave is legal, and further determines whether the first host implements data access to the target slave.

The bus determines, according to the access address of the first host and the preset address range of the at least one slave, whether the first host corresponds to the target after determining whether the access address of the first host corresponds to the target slave from the at least one slave When the slave is in the machine, the bus determines whether the access request of the first host to the target slave is legal, thereby determining whether the first host implements data access to the target slave.

Optionally, in the embodiment of the present invention, each slave has a separate address range and a secure address range, and the slave address range and the secure address range may be separately defined, and the slave device may be configured to be all secure and all non-negative. Safety, partial safety, non-security and other categories. Specifically, the secure address range of the configured slave can be made by the external system configuration module, and the range of the secure address of one slave is adjustable, that is, the range of the secure address of the slave in the address range of a slave is The division of the non-secure address range of the machine is variable, as shown in Figure 3, which is a schematic diagram of the division of the slave address range.

Optionally, in the embodiment of the present invention, the bus may be an AHB or an APB. When the bus is an AHB bus, the address range of the slave in the embodiment of the present invention can be safe, all non-secure, and some security parts are non-secure, and the like. When the bus is an APB bus, the slave in the embodiment of the present invention The address range of the machine can be safe, all non-secure, and other types of address ranges.

The security access status of the first host is included in the foregoing access request, and the security access status of the first host includes: security and non-security. Therefore, when it is determined that the first host corresponds to the target slave, the bus determines whether the access request of the first host to the target slave is legal: when determining that the first host corresponds to the target slave, and the first host has secure access. When the status is secure, the bus determines that the first host has a legitimate access request to the target slave.

Alternatively, when it is determined that the first host corresponds to the target slave, and the secure access status of the first host is non-secure, the bus acquires a secure address range of the target slave; when the access address of the first host is not at the target slave When the security address is within the range, the bus determines that the access request of the first host to the target slave is legal; when the access address of the first host is within the secure address range of the target slave, the bus determines that the first host The target slave's access request is illegal.

In an embodiment of the present invention, the determining result of the determining that the first host corresponds to the target slave may be marked by the address decoding unit of the bus in the form of a selection signal of the slave, and the selection signal of the specific slave may be 0 and 1 indicate that, exemplarily, 0 indicates that the first host corresponds to the target slave, the target slave is the slave to be accessed by the first host; and 1 indicates that the first host does not correspond to the target slave, that is, the first The access address to be accessed by a host does not belong to any one of the at least one slaves. Therefore, the access address of the first host is an empty address. Specifically, the representation mode of the slave selection signal is not limited in the embodiment of the present invention.

In an embodiment of the present invention, the bus determines whether the first host implements data access to the target slave, specifically: when determining that the first host access request to the target slave is legal, the bus transmits the first host. Access data to the target slave. When it is determined that the access request of the first host to the target slave is illegal, the bus interrupts the data access of the first host to the target slave.

It should be noted that the security management unit of the bus acquires the secure address range of the target slave, and determines the first host to target according to the secure address range of the target slave, the access address of the first host, and the secure access status of the first host. Whether the access request of the slave is legal, thereby determining whether the first host implements data access to the target slave. The above process is in the bus security management unit The logic circuit is implemented as shown in FIG. 4, which is a logic circuit diagram of an exemplary security management unit, Addrlegal outputs a signal for the logic circuit of the security management unit, and Legal_reg is a registered feedback signal.

Specifically, in general, by generating a map of a legal logic signal as shown in FIG. 5, it can be known that when the current first host transmission is normal (Trans_req is used to indicate whether the first host transmission is normal, Represented by 0 and 1, the legal logic signal is determined by logical operation by the secure address range of the target slave, the access address of the first host, and the secure access state of the first host. The legal logic signal may be represented by 0 and 1. exemplarily, when the legal logic signal is 0, it indicates that the first host has a legitimate access request to the target slave; when the legal logic signal is 1, it indicates that the first host pair The target slave's access request is illegal. The specific legal logic signal representation manner is not limited in the embodiment of the present invention.

It should be noted that, as a whole, the true value relationship of the legal logic signal is determined by logical operation by the secure address range of the target slave, the access address of the first host, and the secure access state of the first host as follows:

(1) The secure host (the secure access status of the host is secure) accesses the secure address (the access address of the host is within the secure address range of the slave), and the legal logic signal is legal;

(2) The secure host accesses the non-secure address (the access address of the host is within the range of the non-secure address of the slave), and the legal logic signal is legal;

(3) The non-secure host (the host's secure access status is non-secure) accesses the secure address, and the legal logic signal is illegal;

(4) The non-secure host accesses the non-secure address, and the legal logic signal is legal.

The slave device's address range minus the slave's secure address range is the non-secure address range of the slave.

In an embodiment of the present invention, as shown in FIG. 6, the security management unit of the bus outputs a legal logic signal, and the first host accesses the target slave through the logic circuit of FIG. Terminating the transmission of the data access of the first host to the target slave by the termination signal, that is, the first host can access the target slave through the "trapezoid", and the idle signal is given to the slave through the termination signal (ie, the termination is terminated). The first host accesses the target slave).

In an embodiment of the present invention, after S103, as shown in FIG. 7, a data access method provided by an embodiment of the present invention may further include: S105. details as follows:

S105. When it is determined that the first host does not correspond to the target slave, the bus determines that the access request of the first host to the target slave is illegal, and the bus interrupts data access of the first host to the target slave.

When it is determined that the access address of the first host does not correspond to the target slave, that is, when the selection signal of the slave is 1, the bus determines that the access request of the first host to the slave is illegal, and the bus interrupts the first host pair. The slave's data access.

In an embodiment of the present invention, after S102, and before S103, as shown in FIG. 8, the data access method provided by the embodiment of the present invention may further include: S106. details as follows:

S106. When the protocol type of the first host is inconsistent with the protocol type of the target slave, the bus converts the protocol type of the first host to the protocol type of the target slave.

It should be noted that when the host performs data access with the target slave through the bus, the protocol type of the host needs to be the same as the protocol type of the target slave to be accessed. Therefore, when the protocol type of the first host and the protocol type of the target slave are used, If they are inconsistent, execute S106. If the protocol type of the first host is the same as the protocol type of the target slave, no protocol conversion is required.

It can be understood that each slave in the embodiment of the present invention has a separate address and a range of secure addresses, and the address range and the secure address range of the slave can be separately defined, and the slave can be configured to be all secure and all non-secure. Part of the security part is not secure, and the security attributes are configured through the security management unit, which greatly facilitates the user's use and makes the bus wiring easier, reduces the chip area, and saves costs.

A data access method provided by an embodiment of the present invention, the bus receives at least one main The access request sent by the machine, the access request carrying the access address corresponding to the at least one host; determining the first host from the at least one host; according to the access address of the first host and the preset address range of the at least one slave, from at least Determining, by a slave, whether the first host corresponds to the target slave, the access address of the first host is within the address range of the target slave; when determining that the first host corresponds to the target slave, determining that the first host is the target slave Whether the access request is legal, and then determines whether the first host implements data access to the target slave. With the above technical implementation scheme, since the security management function is set in the bus, multiple groups of hosts can be accessed to access multiple sets of slaves, and the number and protocol types of the master and slave can be configured as needed; the bus can perform security management on its own without internal Excess protocol conversion and register unit can reduce the bus matrix logic, improve the transmission efficiency of the bus, and reduce the complexity of the bus system.

Embodiment 2

As shown in FIG. 9, an embodiment of the present invention provides a bus 1, which may include:

The arbitrating unit 10 is configured to receive an access request sent by at least one host, where the access request carries an access address corresponding to at least one host, and determine a first host from the at least one host, and output an access address of the first host To address decoding unit 11.

The address decoding unit 11 is configured to determine, according to the access address of the first host received by the arbitration unit 10 and the preset address range of the at least one slave, whether the first host corresponds to the at least one slave. The target slave, the access address of the first host is within the address range of the target slave, and the determination result is output to the security management unit 12.

The security management unit 12 is configured to determine, when the determination result is that the first host corresponds to the target slave, whether the access request of the first host to the target slave is legal, and further determine the Whether the first host implements data access to the target slave.

Optionally, the access request received by the arbitrating unit 10 further carries a security access status of the first host, and the security access status of the first host includes: security and non-security.

The security management unit 12 is specifically configured to determine, when the address decoding unit 11 determines the first When a host corresponds to the target slave, and the secure access status of the first host is secure, determining that the first host access request to the target slave is legal; and when the address decoding unit 11 determines When the first host corresponds to the target slave, and the secure access status of the first host is non-secure, the secure address range of the target slave is obtained, when the access address of the first host is not in the target When the slave device has a secure address range, it is determined that the access request of the first host to the target slave is legal; when the access address of the first host is within the secure address range of the target slave, The access request of the first host to the target slave is illegal.

Optionally, the security management unit 12 is further configured to: after determining, by the at least one slave, whether the first host corresponds to the target slave, when determining that the first host does not correspond to the target slave And determining that the access request of the first host to the slave is illegal, and interrupting data access by the first host to the slave.

Optionally, the security management unit 12 is further configured to: when determining that the first host access request to the target slave is legal, transmitting, by the first host, access data of the target slave When it is determined that the access request of the first host to the target slave is illegal, interrupting data access by the first host to the target slave.

Optionally, as shown in FIG. 10, the bus 1 further includes: a protocol conversion unit 13; the access request further carries a protocol type of the first host and a protocol type of the target slave.

The protocol conversion unit 13 is configured to: after the arbitration unit 10 determines the first host from the at least one host, the address decoding unit 11 is configured according to the access address of the first host and the preset at least one slave An address range, before determining, by the at least one slave, whether the first host corresponds to the target slave, when the protocol type of the first host is inconsistent with the protocol type of the target slave, the first host is The protocol type is converted to the protocol type of the target slave.

It should be noted that, because the protocol type of the first host is consistent with the protocol type of the target slave, the access address of the first host can be sent to the address decoding unit 11, and therefore, when the protocol type and target of the first host are When the protocol types of the machines are inconsistent, there is a protocol conversion unit 13, The cutting unit 10 transmits the access address of the first host to the address decoding unit 11 through the protocol conversion unit 13. If the protocol type of the first host matches the protocol type of the target slave, the protocol conversion unit 13 does not need to exist.

The bus provided by the embodiment of the present invention, the bus receives the access request sent by the at least one host, where the access request carries the access address corresponding to the at least one host; the first host is determined from the at least one host; Accessing the address and the preset address range of the at least one slave, determining, from the at least one slave, whether the first host corresponds to the target slave, and the access address of the first host is within the address range of the target slave; When a host corresponds to the target slave, it is determined whether the access request of the first host to the target slave is legal, and then it is determined whether the first host implements data access to the target slave. With the above technical implementation scheme, since the security management function is set in the bus, multiple groups of hosts can be accessed to access multiple sets of slaves, and the number and protocol types of the master and slave can be configured as needed; the bus can perform security management on its own without internal Excess protocol conversion and register unit can reduce the bus matrix logic, improve the transmission efficiency of the bus, and reduce the complexity of the bus system.

Those skilled in the art will appreciate that embodiments of the present invention can be provided as a method, system, or computer program product. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or a combination of software and hardware. Moreover, the present invention may employ computer-usable storage media (including but not limited to disk storage and optical storage, etc.) or functional slaves, such as UART, in one or more of the register states including computer usable program code, data, and function registers. The registers of peripherals such as IIC, and the form of computer program products implemented on them.

The present invention has been described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (system), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flowchart illustrations and/or FIG. These computer program instructions can be provided to a processor of a general purpose computer, a special purpose computer, an embedded processor or other programmable data processing device to produce a machine such that Instructions executed by a processor of a computer or other programmable data processing device generate means for implementing the functions specified in a block or blocks of a flow or a flow and/or a block diagram of the flowchart.

The computer program instructions can also be stored in a computer readable memory that can direct a computer or other programmable data processing device to operate in a particular manner, such that the instructions stored in the computer readable memory produce an article of manufacture comprising the instruction device. The apparatus implements the functions specified in one or more blocks of a flow or a flow and/or block diagram of the flowchart.

These computer program instructions can also be loaded onto a computer or other programmable data processing device such that a series of operational steps are performed on a computer or other programmable device to produce computer-implemented processing for execution on a computer or other programmable device. The instructions provide steps for implementing the functions specified in one or more of the flow or in a block or blocks of a flow diagram.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Industrial applicability

The embodiment of the present invention provides a data access method and a bus. The bus receives an access request sent by at least one host, where the access request carries an access address corresponding to at least one host; and the first host is determined from at least one host; Determining, by the at least one slave, whether the first host corresponds to the target slave, the access address of the host and the preset address range of the at least one slave, the access address of the first host being within the address range of the target slave; When it is determined that the first host corresponds to the target slave, determining whether the access request of the first host to the target slave is legal, and determining whether the first host implements data access to the target slave. With the above technical implementation scheme, since the security management function is set in the bus, multiple groups of hosts can be accessed to access multiple sets of slaves, and the number and protocol types of the master and slave can be configured as needed; the bus can perform security management on its own without internal Excess protocol conversion and register units can reduce bus matrix logic and improve total The transmission efficiency of the line reduces the complexity of the bus system.

Claims (10)

A data access method, the method comprising: Receiving an access request sent by at least one host, where the access request carries an access address of at least one host; Determining a first host from the at least one host; Determining, according to the access address of the first host and the preset address range of the at least one slave, whether the first host corresponds to the target slave from the at least one slave, and the access address of the first host is in the target Within the address range of the machine; When it is determined that the first host corresponds to the target slave, determining whether the access request of the first host to the target slave is legal, and determining whether the first host implements data on the target slave access. The method of claim 1, wherein the access request further carries a secure access status of the first host, the secure access status of the first host includes: secure and non-secure; When the host corresponds to the target slave, it is determined whether the access request of the first host to the target slave is legal, including: When it is determined that the first host corresponds to the target slave, and the security access status of the first host is security, determining that the first host access request to the target slave is legal; When it is determined that the first host corresponds to the target slave, and the secure access status of the first host is non-secure, obtaining a secure address range of the target slave; when the access address of the first host is not in the When the target slave is within the secure address range, determining that the first host access request to the target slave is legal; when the access address of the first host is within the secure address range of the target slave, Determining that the access request of the first host to the target slave is illegal. The method of claim 1, wherein the method further comprises: after determining, by the at least one slave, whether the first host corresponds to a target slave, the method further comprising: When it is determined that the first host does not correspond to the target slave, determining that the first host is slave The access request of the machine is illegal, and the data access of the first host to the slave is interrupted. The method of claim 2, wherein the determining whether the first host implements data access to the target slave comprises: Transmitting access data of the first host to the target slave when determining that the first host access request to the target slave is legal; When it is determined that the access request of the first host to the target slave is illegal, interrupting data access by the first host to the target slave is interrupted. The method according to any one of claims 1 to 4, wherein the access request further carries a protocol type of the first host and a protocol type of the target slave; the determining from the at least one host After a host, the method further includes: determining, according to the access address of the first host and the preset address range of the at least one slave, from the at least one slave, whether the first host corresponds to the target slave, the method further includes: When the protocol type of the first host is inconsistent with the protocol type of the target slave, converting the protocol type of the first host to the protocol type of the target slave. A bus, the bus comprising: An arbitration unit, configured to receive an access request sent by at least one host, where the access request carries an access address corresponding to at least one host; and determine a first host from the at least one host, and output an access address of the first host to Address decoding unit; The address decoding unit is configured to determine, according to an access address of the first host received by the arbitration unit and a preset address range of the at least one slave, whether the first host corresponds to the target from the at least one slave The access address of the first host is within the address range of the target slave, and outputs the determination result to the security management unit; The security management unit is configured to determine, when the first host corresponds to the target slave, whether the access request of the first host to the target slave is legal, and further determine the Whether a host implements data access to the target slave. The bus according to claim 6, wherein the access request received by the arbitration unit further carries a security access status of the first host, and the security access status of the first host includes: security and non-security; The security management unit is configured to determine, when the address decoding unit determines that the first host corresponds to the target slave, and the secure access status of the first host is secure, determine the first host The access request of the target slave is legal; and when the address decoding unit determines that the first host corresponds to the target slave, and the secure access status of the first host is non-secure, acquiring the target slave a security address range, when the access address of the first host is not within the secure address range of the target slave, determining that the first host access request to the target slave is legal; when the first host When the access address is within the secure address range of the target slave, it is determined that the access request of the first host to the target slave is illegal. The bus according to claim 6, wherein The security management unit is further configured to determine, after determining, by the at least one slave, whether the first host corresponds to the target slave, and when determining that the first host does not correspond to the target slave, determining the A host-to-slave access request is illegal, interrupting data access by the first host to the slave. The bus according to claim 7, wherein The security management unit is further configured to: when determining that the first host access request to the target slave is legal, transmitting, by the first host, access data of the target slave; When a host's access request to the target slave is illegal, the data access of the first host to the target slave is interrupted. The bus according to any one of claims 6 to 9, wherein the bus further comprises: a protocol conversion unit; the access request further carrying a protocol type of the first host and a protocol type of the target slave; The protocol conversion unit is configured to determine, by the arbitration unit, from the at least one host After the first host, the address decoding unit determines, according to the access address of the first host and the preset address range of the at least one slave, from the at least one slave, whether the first host corresponds to the target slave, When the protocol type of the first host is inconsistent with the protocol type of the target slave, the protocol type of the first host is converted to the protocol type of the target slave.

Images