Method and apparatus for managing resource access control hardware in a system-on-chip device

An apparatus comprising:

• a secure hardware resource;
• and
• a processing circuit coupled to the secure hardware resource, the processing circuit configured to
• obtain, at one or more hardware configuration interfaces, a physical page number associated with a secure resource, a domain identifier, and at least one memory attribute, wherein the one or more hardware configuration interfaces is in communication with a resource protection unit that manages access to the secure resource;
• and
• configure, by the one or more hardware configuration interfaces, a page table entry in a page table maintained at the resource protection unit, wherein the page table entry is configured to include the physical page number associated with the secure resource, the domain identifier, and the at least one memory attribute,
• wherein the resource protection unit processes a resource access transaction when an access permission for the resource access transaction is determined in the page table.

A method for an apparatus comprising:

• obtaining, at a memory management unit, a resource access transaction;
• determining, at the memory management unit, whether to allow or reject the resource access transaction based on
• a first set of access control attributes associated with non-secure hardware resources when the resource access transaction is directed to the non-secure hardware resources, and
• a second set of access control attributes associated with secure hardware resources when the resource access transaction is directed to the secure hardware resources;
• and
• processing the resource access transaction based on the determination.

An apparatus comprising:

• a secure hardware resource and a non-secure hardware resource;
• and
• a processing circuit coupled to the secure hardware resource and the non-secure hardware resource, the processing circuit configured to
• obtain, at a memory management unit, a resource access transaction;
• determine whether to allow or reject the resource access transaction based on
• a first set of access control attributes associated with the non-secure hardware resources when the resource access transaction is directed to the non-secure hardware resources, and
• a second set of access control attributes associated with the secure hardware resources when the resource access transaction is directed to the secure hardware resources;
• and
• process the resource access transaction based on the determination.