Multiple level soc resource allocation and isolation system and method

A method of providing multiple level resource isolation in a System-on-a-Chip (SoC) including a plurality of initiator devices that are configured to conduct transactions with a plurality of slave devices via an interconnect, the method comprising:

• providing a plurality of access identifier assignment (AIDA) devices including an AIDA device for each of the plurality of initiator devices, and configuring each AIDA device to append an access identifier (AID) to each transaction of a corresponding initiator device, wherein each AID comprises one of a plurality of group identifiers (GID) and one of a plurality of domain identifiers (DID) in which each GID uniquely identifies a corresponding one of a plurality of groups and in which each DID distinguishes between one or more domains in each group;
• providing and configuring a plurality of access control (AC) devices to control access to at least one slave device or slave device range based on an AID provided with a transaction;
• configuring each of one or more of the plurality of initiator devices as a partition manager to program GIDs into the AIDA devices, and to program GIDs into the AC devices for assigning each of the slave devices or slave device ranges to one of the plurality of groups;
• and
• configuring, by the partition manager, each of a plurality of the initiator devices as a corresponding one of a plurality of group managers with corresponding group identifiers for the plurality for groups;
• and
• configuring each of the plurality of group managers to program at least one DID into one or more of the AIDA devices for each matching GID programmed therein and to program one or more of the AC devices with access rights to one or more DIDs for each slave device or slave device range assigned to a corresponding group with a matching GID programmed therein.