JP2007140620A - Microcomputer and debugging device connected to this microcomputer - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a microcomputer capable of materializing environment allowing execution of a program and debugging of only an objective portion, and to provide a debugging device connected to the microcomputer. <P>SOLUTION: When this microcomputer 30 is connected with the debugging device 10 having an incircuit emulator 12, a microcontroller 31 does not function. Accordingly, the microcomputer 30 is provided with a security control part 33 allowing a plurality of pieces of setting of effectiveness/ineffectiveness of a reading or writing function of a register or a memory of the microcontroller 31 in an optional address space. The microcomputer 30 has: a function producing data recorded with a series of operation encrypted by a password; and a function executing the series of operation by inputting the password. The microcomputer 30 has a function allowing analysis or the debugging of only an objective address space about control of the security control part 33 and the microcontroller 31 of the microcomputer 30 by executing the series of the encrypted operation. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a microcomputer to which a debugging device having an in-circuit emulator is connected, and a debugging device connected to the microcomputer.

  Usually, a microcomputer having a software debugging function (hereinafter referred to as a microcomputer) can read or write a memory or a register in the microcomputer by connecting an in-circuit emulator (ICE). Similarly, a ROM (Read Only Memory), a flash memory, or a RAM (Random Access Memory) connected to the outside through the microcomputer can be read or written. When an in-circuit emulator is used in this way, a program developer can analyze a program by reading it even if it is not the part that he / she develops.

  Some microcomputers allow memory contents to be read or written by special operations from an in-circuit emulator. This special operation can be performed by executing the normal function of the in-circuit emulator when debugging.

  Some microcomputers have a mass-produced product with the debug function removed. However, this causes a problem in the mass-produced microcomputer program because the specifications of the mass-produced microcomputer and the microcomputer used for debugging differ, but there is a risk that the problem will not occur in the microcomputer program used for debugging. There is.

By the way, when a debugging device corresponding to an in-circuit emulator is connected and predetermined data or signals are input, a semiconductor device (equivalent to a microcomputer) that can read internal data or a program, and an in-circuit emulator including the semiconductor device (For example, refer to Patent Document 1).
JP 2004-86525 A (Pages 6 to 13, FIGS. 1 to 9)

  However, such a technique has a protection circuit that prevents the memory from being read for each device around the microcomputer, such as a ROM and a RAM, and the ratio of the protection circuit is relatively large. In addition, when multiple or a large number of program developers develop a program, the necessity of managing these program developers is not taken into consideration, and the function of debug software which is a debugging means for controlling the in-circuit emulator However, there is no disclosure regarding specific implementation means.

  The present invention has been made in view of the above circumstances, and even when a program is created by a large number of projects or multiple companies, it is possible to realize an environment in which execution of the program and debugging of only a target part can be realized, There is provided a debugging device having an in-circuit emulator that enables debugging of a target portion without disclosing to a person who debugs a microcomputer that prevents analysis of a program other than the target, and a mechanism of such a microcomputer. For the purpose.

  In order to achieve the above object, according to the first aspect of the present invention, when a debugging device having an in-circuit emulator is connected to a microcomputer having a microcomputer controller, a microcomputer core and a microcomputer peripheral circuit through a connection connector. The microcomputer controller does not function, and a security control unit is provided that enables a plurality of memory controller / register read / write function enable / disable settings in an arbitrary address space. To do. The security control unit can realize an environment where the program can be executed and only the target part can be debugged, and the program other than the target cannot be analyzed, and the target part can be debugged.

  In the invention according to claim 2, there is provided a debugging device having an in-circuit emulator connected to a microcomputer, a function for creating data for recording a series of operations encrypted with a password, and a password for the debugging device. The in-circuit emulator is used by executing a series of encrypted operations for controlling the microcomputer controller and the security control unit of the microcomputer. It is controlled by a debugging means having a function that enables a person to debug or analyze only a target address space. The debug device can debug a target portion.

  When a debugging device having an in-circuit emulator is connected to a microcomputer having a microcomputer controller, a microcomputer core, and a microcomputer peripheral circuit via a connection connector, the microcomputer controller stops functioning, and the microcomputer controller memory or register read / write function By providing a security control unit that enables multiple enable / disable settings in any address space, it is possible to realize an environment in which the security control unit can execute programs and debug only the target part. In addition, the program other than the target cannot be analyzed, and the target portion can be debugged.

  Also, a debugging device having an in-circuit emulator connected to a microcomputer, a function for creating a data recording a series of operations encrypted with a password, and a series of operations are executed by inputting the password. In addition, the in-circuit emulator can debug or analyze only the target address space by executing a series of encrypted operations to control the microcomputer controller and security control unit of the microcomputer. By controlling with a debugging means having a function to do so, it becomes possible to debug a target portion.

  Hereinafter, the present invention will be specifically described with reference to an illustrated embodiment. 1 is a diagram for explaining a debugging device having a microcomputer and an in-circuit emulator according to an embodiment of the present invention, FIG. 2 is a diagram for explaining details of the microcomputer of the embodiment of the present invention, and FIG. 3 is a diagram for explaining the configuration of the debugging device, FIG. 4 is a flowchart for explaining the operation of debug software by a personal computer.

  As shown in FIG. 1, the debugging device 10 of this embodiment includes a personal computer 11 and an in-circuit emulator 12, and the in-circuit emulator 12 is connected to a microcomputer (microcomputer) 30 that constitutes the target system 20. The connection is made via the connection connector 21. The microcomputer 30 includes a microcomputer controller 31 controlled from the in-circuit emulator 11, a microcomputer core 32 connected to the microcomputer controller 31, a security control unit 33, and a microcomputer peripheral circuit 34 including a memory and a register. The security control unit 33 includes an address setting register that can set protection for each designated address, and detects the address for reading and writing the memory and the register from the microcomputer core 32 to the microcomputer peripheral circuit 34 by the protection setting. Thus, this part has a function that enables address protection or data protection. Further, the in-circuit emulator 12 is connected to the personal computer 11 and is controlled by debug software serving as debugging means having a security function that operates on the personal computer 11.

  As shown in FIG. 2, the security control unit 33 of the microcomputer 30 includes a security key detection unit 37, an ICE command analysis unit 38 that recognizes a control command, an address detection circuit 39, a protect circuit 40, and a protect address setting register. 41. The microcomputer peripheral circuit 34 has, for example, a ROM or flash memory 42, a RAM 43, other peripheral circuits 44, and a peripheral circuit 46 connected via a microcomputer external connection controller 46.

  When the microcomputer 30 enters a state in which the microcomputer 30 is controlled from the in-circuit emulator 12 connected to the ICE connector 21, the security control unit 33 protects reading and writing of registers and memories in all address spaces of the microcomputer 30. Is done. The microcomputer 30 includes a digital signal processor (DSP).

  Next, the in-circuit emulator 12 controls the security key detection unit 37 of the security control unit 33 and sets a security code for operating the security control unit 33.

  When the security key is set correctly, the ICE command analysis unit 37 for recognizing the control command from the in-circuit emulator 12 operates to determine whether it is a memory or register read command or write command sent from the in-circuit emulator 12. Alternatively, it is determined whether the instruction is for executing the program of the microcomputer 30 and a protection release signal is sent to the protection circuit unit 40. When an instruction for executing a program is received, the protection is released even in the protected address space so that the program execution is not hindered.

  Further, the in-circuit emulator 12 sets the read or write address space of the memory or register by setting the protect address setting register 41. Accordingly, the address detection circuit 39 generates a signal for protecting the address or data between the microcomputer core 32 and the microcomputer peripheral circuit 34, and transmits the signal to the protect circuit 40.

  The protect circuit 40 is connected between the microcomputer core 32 and the microcomputer peripheral circuit 34 by an access enable signal from the security key detection unit 37, a protection release signal from the ICE command analysis unit 38, and a protection signal from the address detection circuit 39. Connect or disconnect the address bus or data bus.

  As shown in FIG. 3, the personal computer 11 includes debugging means 13 and an ICE interface circuit 14 made of debugging software, and the in-circuit emulator 12 includes an interface circuit 16 with the personal computer 11, an interface protocol conversion circuit 16, and the like. Have The personal computer 11 is connected to the interface circuit 16 of the in-circuit emulator 12 by the ICE interface circuit 14, and the in-circuit emulator 12 is connected to the microcomputer 30 via the ICE connection connector 21. The in-circuit emulator 12 receives an instruction from the debug software that is the debugging unit 13, converts the instruction into a protocol suitable for the microcomputer 30 of the target system 20, and controls the target microcomputer controller 31 and the security control unit 33.

  As shown in FIG. 4, first, when the debug software as the debugging means 13 is activated (ST1), a control signal is transmitted from the in-circuit emulator 12 connected to the personal computer 11 to the microcomputer 30 of the present invention. The operation of the security control unit 33 makes it impossible to read or write memory or registers in all address spaces. However, in order to enable execution of the program, the debug software that is the debug means 13 controls to execute the program by releasing the protection when executing a command for executing the microcomputer 30 by the debug software. Thereby, even if the memory cannot be read by the debug software, the program already written in the ROM or flash memory 42 of the target system 20 can be executed (ST2). Further, it may be controlled so that the entire program can be written and executed, with the specification that the program writing by the debug software is not protected.

  Next, a person who builds an environment for debugging with the debug software and the in-circuit emulator 12 knows a series of controls for releasing the security of the microcomputer 30, and a series of control scripts (performed by the debug software, A debugging software is used to test the execution of the security key code writing operation that must be set in the microcomputer 30 and the protection address setting register 41 to be protected or the protection address release address space is set. Confirm that reading and writing of registers and memories in the address space becomes possible.

  Next, if it is confirmed, the script file describing the series of operations is converted into an encrypted file with a password set (ST3). In this file, when developing or debugging a program by sharing multiple or large numbers, set a debuggable address space (address space where memory or registers can be read or written by debug software) according to each, Create a type. Since the file is encrypted and it is difficult to analyze what operation of the debugging software was performed, it is possible to create a script file without attaching a password.

  The development administrator is responsible for the development and debugging of the program to execute the encrypted file to unprotect the reading and writing of the address space for debugging, and the encrypted file to be executed by the debugging software. Pass the password. As a result, the development environment is distributed without disclosing information on the parts that are difficult to analyze the program and data. A person who develops and debugs a program executes the program by developing and debugging the distributed script file by inputting the password with debug software (ST4).

  Here, the debugging means 13 can have a function of not only reading out the memory or register of the target portion but also reading out the memory of the portion other than the debugging purpose, but only writing. In this way, the entire program can be written, but the reading can be limited to only the part intended for debugging.

  Also, the debugging means 13 is convenient for a person who manages the person who uses the debugging means when the program creating software automatically provides debuggable address space information when the program is created in cooperation with the program creating software. .

  According to the above configuration, when a plurality of programs are developed and debugged, the development manager can create and manage a development environment in which only the necessary address space can be operated. Further, the manufacturer of the microcomputer 30 does not need to disclose the detailed specification of the security specification by distributing the encrypted file used in the debug software of the present invention. Therefore, with the debugging device 10 having the microcomputer 30 and the in-circuit emulator 12 having such specifications, each of the microcomputer core developer, the microcomputer manufacturer, the application program development management company, and each program development manager ensures security. Program development can be easily realized.

  A file for performing a series of encrypted operations (scripts) created by some persons who know the details of the security control unit 33 of the microcomputer 30 by the debugging device 10 of the present invention configured as described above. Executed by the personal computer 11 that operates with the debug software that is the debugging means 13 that controls the in-circuit emulator 12, the person who performs debugging inputs the password, and reads and writes the program, data, and registers of the target portion. And only the target program can be debugged.

  It can be used for a microcomputer when an in-circuit emulator is connected, an in-circuit emulator connected to such a microcomputer, and debug software for controlling the in-circuit emulator.

It is a figure explaining the debugging apparatus which has the microcomputer and in-circuit emulator of this invention embodiment. It is a figure explaining the detail of the microcomputer of embodiment of this invention. It is a figure explaining the structure of the debugging apparatus of this invention embodiment. It is a flowchart explaining the operation | movement of the debug software by the personal computer of embodiment of this invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 10 Debugging device 11 Personal computer 12 In-circuit emulator 13 Debugging means 14 ICE interface circuit 15 Interface circuit with personal computer 16 Interface protocol conversion circuit 20 Target system 21 ICE connection connector 30 Microcomputer 31 Microcomputer controller 32 Microcomputer core 33 Security control unit 34 Microcomputer peripheral circuit 37 Security key detection unit 38 ICE command analysis unit 39 Address detection circuit 40 Protection circuit 41 Protection setting register 42 ROM or flash memory 43 RAM
44 Other peripheral circuits 45 Microcontroller external connection controller 46 Peripheral circuits

Claims (2)

When a debugging device having an in-circuit emulator is connected to a microcomputer having a microcomputer controller, a microcomputer core, and a microcomputer peripheral circuit via a connection connector, the microcomputer controller does not function, and the microcomputer controller memory or register can be read or A microcomputer of a target system, comprising a security control unit that enables a plurality of write function valid / invalid settings to be set in an arbitrary address space. A debugging device having an in-circuit emulator connected to the microcomputer according to claim 1, wherein a function for creating data for recording a series of operations encrypted with a password and a series of operations by inputting the password And the microcomputer controller of the microcomputer and the control of the security control unit execute a series of encrypted operations, so that the person using the in-circuit emulator can perform only the target address space. A debugging device controlled by a debugging means having a function enabling debugging or analysis.

Images