PROGRAMMABLE VALIDATION OF TRANSACTION REQUESTS

摘要

A data processor includes an input/output bridge that provides enforcement of a security status on transactions between devices across the bridge. The bridge includes circuitry to parse a received request to obtain one or more identifiers, and compare the identifiers against one or more programmable lookup tables. Based on this comparison, the bridge can determine the security status of the transaction, as well as selectively forward the transaction based on the security status.

主权项

1. A method of controlling access, comprising:
receiving a request from a processor to access at least one of a plurality of devices; parsing an address portion of the request to obtain a bus identifier, a device identifier, and a function identifier; comparing at least one of the bus identifier and the device identifier against a bus table and a device table, respectively, to determine a first security status; comparing the function identifier against a function table to determine a second security status; and selectively forwarding the request to the at least one of the plurality of devices based on at least one of the first security status and the second security status.