Systems and methods for configuring a secure computing environment on an integrated circuit
AssigneeAltera Corporation
InventorChin Liang See
Life of this patent
Estimating the term…
Abstract
A method of dividing a set of components of an integrated circuit is disclosed. Two or more different security labels are assigned to two or more non-overlapping subsets of the set of components. A handoff file is generated based on the non-overlapping subsets and sent to the integrated circuit. The set of components of the integrated circuit is divided according to the non-overlapping subsets based on the system handoff file.
Claims20
A method of dividing a set of components of an integrated circuit comprising:
- receiving, using a computer-implemented application, information regarding first and second non-overlapping subsets of the set of components, wherein the information indicates that each component in the first non-overlapping subset is assigned by a user of the computer-implemented application to a first security label, and wherein the information further indicates that each component in the second non-overlapping subset is assigned by the user to a second security label;
- generating, using the computer-implemented application, a first system handoff file based on the information regarding the first and second non-overlapping subsets;
- sending, using the computer-implemented application, the first system handoff file to a system monitor of the integrated circuit;
- and
- dividing, using the system monitor, the set of components of the integrated circuit according to the first and second security labels based on the first system handoff file.
A method of assigning a plurality of security labels to a set of components of an integrated circuit comprising:
- displaying, using a computer-implemented application, an interactive system design depicting the set of components;
- assigning, using the computer-implemented application, a first security label of the plurality of security labels to a first subset of the set of components in response to user input;
- assigning, using the computer-implemented application, a second security label of the plurality of security labels to a second subset of the set of components in response to user input, wherein the first and second subsets are non-overlapping;
- and
- generating, using the computer-implemented application, a first system handoff file for a system monitor of the integrated circuit based on the first and second subsets of the set of components.
A non-transitory computer-readable storage medium storing one or more sequences of instructions, which instructions, when executed by at least one processor, causes the at least one processor to perform a method of dividing a set of components of an integrated circuit comprising:
- receiving information regarding first and second non-overlapping subsets of the set of components, wherein the information indicates that each component in the first non-overlapping subset is assigned by a user of the processor to a first security label, and wherein the information further indicates that each component in the second non-overlapping subset is assigned by the user to a second security label;
- generating a system handoff file based on the information regarding the first and second non-overlapping subsets;
- sending the system handoff file to a system monitor of the integrated circuit;
- and
- dividing, using the system monitor, the set of components of the integrated circuit according to the first and second security labels based on the system handoff file.
Dependencies are inferred from the claim text.