Input-output memory management unit with memory protection

A computing device, comprising:

• a plurality of intellectual property (IP) cores, each being represented by an access identification (AID);
• a dynamic random access memory (DRAM) with a management table configured to store secure range information corresponding to a physical address or a virtual address;
• and
• a secure range permission checker, embedded in a dynamic random access memory (DRAM) controller or a bus, configured to check access permissions of secure ranges according to the access identification (AID) and the secure range information obtained by the management table in accordance with a DRAM access request issued by the IP core, wherein the virtual address or the physical address is conveyed in the access request.

A method for controlling access permissions to a memory, comprising:

• issuing an access request with an address information to the memory by a master represented by an access identification;
• checking the address information is a virtual address or a physical address in a translation lookaside buffer (TLB);
• fetching a physical address and a first secure range information (SR_info) from an IOMMU table when the address information is the virtual address;
• and
• fetching the first secure range information (SR_info) from a IOMPU table when the address information is the physical address.