WO2016082185A1

WO2016082185A1 - Access isolation method and apparatus

Info

Publication number: WO2016082185A1
Application number: PCT/CN2014/092479
Authority: WO
Inventors: 赵福; 陈卫
Original assignee: 华为技术有限公司
Priority date: 2014-11-28
Filing date: 2014-11-28
Publication date: 2016-06-02
Also published as: CN105900070B; CN105900070A

Abstract

Embodiments of the present invention provide an access isolation method and apparatus. The access isolation method provided in the embodiments of the present invention comprises: a peripheral device receives a first access instruction corresponding to a channel group configuration space in the peripheral device, the first access instruction comprising an access address of the channel group configuration space and a mode identifier of a service communication mode; the peripheral device verifies the mode identifier of the service communication mode; and if the mode identifier of the service communication mode is valid, the peripheral device accepts access to the channel group configuration space. By means of the embodiments of the present invention, a peripheral device can realize physical isolation on access instructions of different service communication mode, thereby preventing mutual influence caused by abnormal running of concurrent software.

Description

Access isolation method and device

Technical field

The embodiments of the present invention relate to communication technologies, and in particular, to an access isolation method and apparatus.

Background technique

A network device for mobile communication in the field of wireless communication, such as a baseband chip inside a base station, needs to simultaneously run one platform software and at least two baseband service software corresponding to the wireless communication mode. Since the functions implemented by different baseband service software may belong to different wireless communication modes or belong to different communication carriers, in order to provide safer and more reliable communication service services, the physical software between the platform software and the baseband service software and the baseband service software The isolation of access becomes a very important requirement.

At present, most of the multi-mode baseband chips are configured at the software level by configuring different application programming interfaces (APIs) for concurrent software to implement software interface isolation between concurrent software. However, if an API invoked by a software is automatically falsified due to a defect in the software design, or is maliciously tampered with by an attacker, a software exception may result in an illegal address access of the physical entity, which may also cause other software exceptions. run.

However, whether for peripherals or memory, if the access of the concurrent software is isolated based on the software interface, and the software interface fails, the isolation between the concurrent software cannot be achieved. When one of the software in the concurrent software runs abnormally, other software may also run abnormally, that is, the interaction between the concurrent software runs abnormally.

Summary of the invention

The embodiment of the invention provides an access isolation method and device to solve the problem of mutual interaction between concurrent software.

In a first aspect, an embodiment of the present invention provides an access isolation method, including:

Receiving, by the peripheral device, a first access instruction corresponding to the channel group configuration space in the peripheral device; the first access instruction includes: an access address of the channel group configuration space and a mode identifier of a service communication mode;

The peripheral device verifies a mode identifier of the service communication mode;

If the mode identifier of the service communication mode is valid, the peripheral accepts access to the channel group configuration space.

According to the first aspect, in a first possible implementation manner of the first aspect, the peripheral device performs verification on a mode identifier of the service communication mode, including:

The peripheral device verifies the mode identifier of the service communication mode according to the preset mode identifier;

If the preset mode identifier is the same as the mode identifier of the service communication mode, the peripheral determines that the mode identifier of the service communication mode is valid.

According to a first possible implementation manner of the first aspect, in a second possible implementation manner, the peripheral device, before verifying the mode identifier of the service communication mode according to the preset mode identifier, further includes :

The peripheral device receives a second access instruction corresponding to the management configuration space in the peripheral device issued by the processor corresponding to the communication management mode; the second access instruction includes: an access address of the channel group configuration space;

Determining, by the peripheral device, the channel group configuration space according to the access address of the channel group configuration space, associating the channel group configuration space with at least one channel, and configuring the preset mode for the channel group configuration space Identifier.

According to a first aspect, in a third possible implementation manner of the first aspect, the peripheral device performs verification on a mode identifier of the service communication mode, including:

The peripheral device determines, according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group, where the preset mode identifier group includes at least one mode identifier;

If the mode identifier of the service communication mode is an identifier in the preset mode identification group, the peripheral device determines that the mode identifier of the service communication mode is valid.

According to a third possible implementation manner of the first aspect, in a fourth possible implementation manner, the peripheral device determines, according to the preset mode identifier group, whether a mode identifier of the service communication mode is the preset Before setting the identifier in the pattern identification group, it also includes:

The peripheral device receives a third access instruction corresponding to the management configuration space in the peripheral device; the third access instruction is an instruction issued by a processor corresponding to the communication management mode, and the third access instruction includes: The access address of the channel group configuration space;

Determining, by the peripheral device, the channel group configuration space according to the access address of the channel group configuration space, associating the channel group configuration space with at least one channel, and configuring the preset mode for the channel group configuration space Identification group.

According to any one of the first aspect to the fourth possible implementation manner of the first aspect, in a fifth possible implementation manner, the first access instruction includes: a processor sent by the processor corresponding to the service communication mode Instruction; or,

The first access instruction includes an instruction issued by another peripheral.

In a second aspect, an embodiment of the present invention provides an access isolation method, including:

a fourth access instruction issued by the memory receiving peripheral, the fourth access instruction comprising: an access address of the memory, a mode identifier of a service communication mode, and a packet identifier of the service communication mode;

The memory sequentially checks a mode identifier of the service communication mode and a packet identifier of the service communication mode;

If the mode identifier of the service communication mode and the packet identifier of the service communication mode are both valid, the memory accepts access by the peripheral to the memory.

According to the second aspect, in a first possible implementation manner of the second aspect, the memory, in sequence, checks a mode identifier of the service communication mode and a packet identifier of the service communication mode, including:

The memory verifies the mode identifier of the service communication mode according to the preset mode identifier;

If the preset mode identifier is the same as the mode identifier of the service communication mode, the memory determines that the mode identifier of the service communication mode is valid;

And if the mode identifier of the service communication mode is valid, the memory checks a packet identifier of the service communication mode according to a preset packet identifier;

If the preset packet identifier is the same as the packet identifier of the service communication mode, the memory determines that the packet identifier of the service communication mode is valid.

According to a first possible implementation manner of the second aspect, in a second possible implementation manner, the memory sequentially checks a mode identifier of the service communication mode and a packet identifier of the service communication mode. Previously, it also included:

The memory receives a fifth access instruction issued by a processor corresponding to the communication management mode; The five access instructions include: an access address of the memory;

The memory determines a memory address segment to which the access address of the memory belongs according to the access address of the memory, and configures the preset mode identifier and the preset packet identifier for the memory address segment.

According to a second aspect, in a third possible implementation manner of the second aspect, the memory, in sequence, performs verification on a mode identifier of the service communication mode and a packet identifier of the service communication mode, including:

Determining, by the memory according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group; wherein the preset mode identifier group includes at least one mode identifier;

If the mode identifier of the service communication mode is an identifier in the preset mode identification group, the memory determines that a mode identifier of the service communication mode is valid;

If the mode identifier of the service communication mode is valid, the memory determines, according to the preset group identity group, whether the packet identifier of the service communication mode is an identifier in the preset group identity group; The preset group identification group includes at least one group identifier;

If the packet identifier of the service communication mode is an identifier in the preset packet identification group, the memory determines that the packet identifier of the service communication mode is valid.

According to a third possible implementation manner of the second aspect, in a fourth possible implementation manner, the memory sequentially checks a mode identifier of the service communication mode and a packet identifier of the service communication mode. Previously, it also included:

The memory receives a sixth access instruction issued by a processor corresponding to the communication management mode; the sixth access instruction includes: an access address of the memory;

The memory determines a memory address segment to which the access address of the memory belongs according to the access address of the memory, and configures the preset mode identifier group and the preset group identifier group for the memory address segment.

In a third aspect, an embodiment of the present invention provides an access isolation device, where the access isolation device is located in a peripheral device, where the access isolation device includes: a receiving port, and a verification module; wherein the receiving port and the verification Module connection

The receiving port is configured to receive a first access instruction corresponding to a channel group configuration space in the peripheral device, and send the first access instruction to the verification module; the first access instruction includes: The access address of the channel group configuration space and the mode identifier of the service communication mode;

The verification module is configured to check a mode identifier of the service communication mode, and if the mode identifier of the service communication mode is valid, accept access to the channel group configuration space.

According to the third aspect, in a first possible implementation manner of the third aspect, the verification module is further configured to: before the mode identifier of the service communication mode is verified, according to the preset mode identifier, And verifying the mode identifier of the service communication mode, and if the preset mode identifier is the same as the mode identifier of the service communication mode, determining that the mode identifier of the service communication mode is valid.

According to a first possible implementation manner of the third aspect, in a second possible implementation manner, the receiving port is further configured to: in the verifying module, the service according to the preset mode identifier Before the mode identifier of the communication mode is verified, receiving a second access instruction corresponding to the management configuration space in the peripheral device sent by the processor corresponding to the management channel mode; the second access instruction includes: the channel group configuration space Access address;

The verification module is further configured to determine the channel group configuration space according to the access address of the channel group configuration space, associate the channel group configuration space with at least one channel, and configure a space configuration for the channel group. The preset mode identifier.

According to the third aspect, in a third possible implementation manner of the third aspect, the verification module is further configured to determine, according to the preset mode identifier group, whether the mode identifier of the service communication mode is the pre- An identifier in the mode identification group, if the mode identifier of the service communication mode is an identifier in the preset mode identification group, determining that the mode identifier of the service communication mode is valid; wherein the preset mode The identification group includes at least one mode identifier.

According to a third possible implementation manner of the third aspect, in a fourth possible implementation manner, the receiving port is further configured to determine, by the verification module, the service according to the preset mode identifier group Receiving a third access instruction corresponding to the management configuration space in the peripheral device before the mode identifier of the communication mode is the identifier in the preset mode identification group; the third access instruction is a processor corresponding to the communication management mode An issued instruction, where the third access instruction includes: an access address of the channel group configuration space;

The verification module is further configured to determine the channel group configuration space according to the access address of the channel group configuration space, associate the channel group configuration space with at least one channel, and configure a space configuration for the channel group. The preset mode identifies a group.

According to any one of the third aspect to the fourth possible implementation manner of the third aspect, in a fifth possible implementation manner, the first access instruction includes: a processor sent by the processor corresponding to the service communication mode Instruction; or,

In a fourth aspect, an embodiment of the present invention provides an access isolation device, where the access isolation device is located in a memory; the access isolation device includes: a receiving port, and a verification module; and the receiving port is connected to the verification module;

The receiving port is configured to receive a fourth access instruction sent by the peripheral device, where the fourth access instruction includes: an access address of the memory, a mode identifier of a service communication mode, and a packet identifier of the service communication mode;

The verification module is configured to sequentially check a mode identifier of the service communication mode and a packet identifier of the communication mode, if a mode identifier of the service communication mode and a grouping of the service communication mode When the identifiers are both valid, the peripherals are accepted for access to the memory.

According to a fourth aspect, in a first possible implementation manner of the fourth aspect, the verification module is further configured to verify, according to the preset mode identifier, a mode identifier of the service communication mode, if Determining that the mode identifier of the service communication mode is valid if the preset mode identifier is the same as the mode identifier of the service communication mode, and if the mode identifier of the service communication mode is valid, according to a preset packet identifier And verifying, by the packet identifier of the service communication mode; if the preset packet identifier is the same as the packet identifier of the service communication mode, determining that the packet identifier of the service communication mode is valid.

According to a first possible implementation manner of the fourth aspect, in a second possible implementation manner, the receiving port is further configured to sequentially perform a mode identifier and a location identifier of the service communication mode in the verification module. Before verifying the packet identifier of the service communication mode, receiving a fifth access instruction issued by the processor corresponding to the management communication mode, and determining the access of the memory according to the access address of the memory in the fifth access instruction An associated memory address segment, and configuring the preset mode identifier and the preset packet identifier for the memory address segment.

According to the fourth aspect, in a third possible implementation manner of the fourth aspect, the verification module is further configured to determine, according to the preset mode identifier group, whether the mode identifier of the service communication mode is the pre- Setting an identifier in the mode identifier group, if the mode identifier of the service communication mode is an identifier in the preset mode identifier group, determining that the mode identifier of the service communication mode is valid, if If the mode identifier of the service communication mode is valid, determining, according to the preset group identity group, whether the packet identifier of the service communication mode is an identifier in the preset group identity group, if the packet identifier of the service communication mode And determining, by the identifier in the group, the group identifier of the service communication mode is valid, where the preset mode identifier group includes at least one mode identifier; and the preset group identifier group includes at least A packet identifier.

According to a third possible implementation manner of the fourth aspect, in a fourth possible implementation manner, the receiving port is further configured to sequentially perform, in the verification module, a mode identifier and a location identifier of the service communication mode. Before verifying the packet identifier of the service communication mode, receiving a sixth access instruction issued by the processor corresponding to the management communication mode, and determining, according to the memory access address in the sixth access instruction, according to the memory access address The memory address segment to which the memory access address belongs, and the preset mode identifier group and the preset group identifier group are configured for the memory address segment.

The access isolation method and device provided by the embodiment of the present invention, because the peripheral device can verify the mode identifier of the service communication mode carried in the received access command, only the mode identifier of the service communication mode is valid. In case, the access to the channel group configuration space is accepted, so that the peripheral device can only accept the access channel group configuration space corresponding to the access instruction of the different service communication mode, and implement the access instruction of the peripheral for the received different service communication modes. The isolation of physical isolation avoids the interaction of abnormal operations between concurrent software.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any inventive labor.

FIG. 1 is a flowchart of an access isolation method according to Embodiment 1 of the present invention;

2 is a flowchart of an access isolation method according to Embodiment 2 of the present invention;

3 is a flowchart of another access isolation method according to Embodiment 2 of the present invention;

4 is a flowchart of an access isolation method according to Embodiment 3 of the present invention;

FIG. 5 is a schematic structural diagram of an access isolation device according to Embodiment 4 of the present invention; FIG.

6 is a schematic structural diagram of an access isolation device according to Embodiment 5 of the present invention;

FIG. 7 is a flowchart of an access isolation method according to Embodiment 6 of the present invention;

FIG. 8 is a flowchart of another access isolation method according to Embodiment 6 of the present invention; FIG.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

FIG. 1 is a flowchart of an access isolation method according to Embodiment 1 of the present invention. The solution provided by the embodiment of the present invention is applicable to a situation in which a network device of a mobile communication, such as an access corresponding to a different service communication mode running on a baseband chip received by a peripheral device in a base station, is isolated. A substrate is included inside the base station, wherein the substrate includes: a baseband chip, a peripheral device, a memory, and the like. The baseband chip includes at least one processor, and the processor may be a central processing unit (CPU) or a digital signal processing (DSP) module. The memory may be, for example, a Double Data Rate Synchronous Dynamic Random Access Memory (DDR SDRAM).

The baseband service software corresponding to the different service communication mode may be run on a processor inside the baseband chip, and the corresponding module in the base station is triggered to send an access instruction to the accessed module by calling a corresponding execution program, thereby implementing the internal base station. Mutual access between different modules. The method can be performed by an access isolation device, which can be located in a peripheral device. As shown in FIG. 1, the method specifically includes the following:

Step 101: The peripheral device receives a first access instruction corresponding to the channel group configuration space in the peripheral device. The first access instruction includes: an access address of the channel group configuration space and a mode identifier of the service communication mode.

Specifically, the peripheral device may be, for example, an input/output port, a storage, a hardware accelerator, or the like on a baseband processing chip in the base station. The service communication mode may be a radio access type (RAT). In the embodiment of the present invention, the RAT may be, for example, an access type corresponding to different communication network standards. The different communication system can be, for example, a Global System for Mobile in a 2nd Generation (2G) communication system (Global System for Mobile) Communications, referred to as GSM), Code Division Multiple Access (CDMA) system, or Time Division Multiple Access (TDMA) system, can also be third generation (3rd Generation, referred to as 3G) CDMA2000 system in communication system, Wideband Code Division Multiple Access (WCDMA) system or Time Division-Synchronous Code Division Multiple Access (TD-) The SCDMA system, the Worldwide Interoperability for Microwave Access (WiMAX) system, or the 4th Generation (4G) communication system or higher. The 4G communication system may be a Time Division Long Term Evolution (TD-LTE) system or a Frequency Division Duplexing Long Term Evolution (FDD-LTE) system.

The channel group configuration space in the peripheral device may be a space with a preset address range obtained by dividing the preset space in the peripheral device according to the address segment according to the number of service communication modes supported by the base station. One channel group configuration space in the peripheral device corresponds to at least one service communication mode, and the channel group configuration space with the preset address range can only accept access corresponding to the service communication mode.

The access address of the channel group configuration space included in the first access instruction may be any one of the address ranges corresponding to the channel group configuration space. The mode identifier of the service communication mode included in the first access instruction may be a RAT identifier. The RAT identifier may be, for example, a virtual mode identifier (VMID) corresponding to the service communication mode. Assuming that the base station supports two service communication modes, in this embodiment, at least the identifier corresponding to the two service communication modes, such as a VMID correspondence table, is stored in the peripheral device. The identifiers corresponding to the two service communication modes can be represented by one binary digits of 0 and 1, respectively. Assuming that the base station supports four service communication modes, the identifiers corresponding to the four service communication modes in this embodiment may be represented by two binary digits 00, 01, 10, and 11, respectively.

The peripheral can receive the first access command, for example, via its internal signaling receiving port. The signaling receiving port may be, for example, a slave interface in the peripheral device. Correspondingly, the peripheral device further includes at least a master interface for sending access commands to other modules or structures in the base station.

Step 102: The peripheral checks the mode identifier of the service communication mode.

Specifically, the peripheral device verifies the mode identifier of the service communication mode, and may be a correspondence table between the preset service communication mode and the mode identifier, and is included in the first access instruction. The mode identifier of the service communication mode is checked to determine whether the channel group configuration space is a configuration space corresponding to the service communication mode.

Step 103: If the mode identifier of the service communication mode is valid, the peripheral accepts access to the channel group configuration space.

Specifically, the mode identifier of the service communication mode is valid, that is, the channel group configuration space is a configuration space corresponding to the service communication mode, and thus, the peripheral accepts access to the channel group configuration space, that is, the peripheral device. The first access instruction is allowed to access the channel group configuration space. In the case that the mode identifier of the service communication mode is invalid, that is, the channel group configuration space is not the configuration space corresponding to the service communication mode, the peripheral device needs to reject the first access instruction to access the channel group configuration space. And issued an error warning.

In the access isolation method provided by the embodiment of the present invention, since the peripheral device can verify the mode identifier of the service communication mode carried in the received access command, only the mode identifier of the service communication mode is valid. In this case, access to the channel group configuration space of the peripheral is accepted, thereby ensuring that the peripheral can only allow access to the corresponding channel group configuration space of the access instruction of different service communication modes, and realize the different service communication modes of the peripheral for receiving. The isolation of the access instructions is physically isolated to avoid the interaction of abnormal operations between concurrent software.

Embodiment 2

The embodiment of the invention further provides an access isolation method. FIG. 2 is a flowchart of an access isolation method according to Embodiment 2 of the present invention. As shown in FIG. 2, the access isolation method provided in this embodiment is based on the method in the foregoing embodiment, wherein the step 102 performs verification on the mode identifier of the service communication mode, which may include:

Step 201: The peripheral device verifies the mode identifier of the service communication mode according to the preset mode identifier.

Step 202: If the preset mode identifier is the same as the mode identifier of the service communication mode, the peripheral determines that the mode identifier of the service communication mode is valid.

Specifically, if a channel group configuration space in the peripheral device corresponds to a service communication mode, the preset mode identifier is a mode identifier corresponding to the one service communication mode. Thus, the peripheral device verifies the mode identifier of the service communication mode, that is, the mode identifier included in the first access instruction, according to the preset mode identifier. The peripheral device may be configured to compare whether the preset mode identifier is the same as the mode identifier of the service communication mode, thereby implementing a mode of the service communication mode. The identifier is verified. If the preset mode identifier is the same as the mode identifier of the service communication mode, the peripheral device may determine that the mode identifier of the service communication mode is valid, and if not, the peripheral may determine the service communication mode. The mode identifier is invalid.

Optionally, before the peripheral device checks the mode identifier of the service communication mode according to the preset mode identifier, the method further includes:

In step 201, the peripheral device receives a second access instruction corresponding to the management configuration space in the peripheral device issued by the processor corresponding to the communication management mode; the second access instruction includes: an access address of the channel group configuration space.

Specifically, the communication management mode may be an operation management platform of the baseband service software corresponding to the service communication, and the operation management platform may provide a running operating system platform for the baseband service software corresponding to the service communication mode.

The processor corresponding to the communication management mode may be any processor on the baseband chip operated by the platform software corresponding to the communication management mode, such as a CPU.

The management configuration space in the peripheral device may be, for example, a space having a preset address range corresponding to the communication management mode in the peripheral device. The peripheral device only allows the access instruction corresponding to the communication management mode to access the management configuration space, that is, the second access instruction further includes: an access address corresponding to the management configuration space.

Step 201b: The peripheral device determines the channel group configuration space according to the access address of the channel group configuration space, associates the channel group configuration space with at least one channel, and configures the preset mode identifier for the channel group configuration space.

In particular, different channels may be structures or modules that implement different functions in the peripheral. The channel group configuration space is associated with at least one channel, that is, the channel group configuration space divides the corresponding address range into at least one address segment, wherein different address segments can respectively correspond to different channels, so that Accessing an address in the channel group configuration space can implement the corresponding function through the channel corresponding to the address. The peripheral device associates the channel group configuration space with the at least one channel, and the channel group configuration space and the channel group correspondence table are established on the peripheral side, where one channel group configuration space corresponds to at least one channel. At the same time, the peripheral device also configures the preset mode identifier for the channel group, that is, in the solution of the embodiment, at least one channel in the same channel group configuration space has the same mode identifier, and a mode identifier corresponds to A business communication mode.

This embodiment also provides an alternative access isolation scheme. FIG. 3 is a flowchart of another access isolation method according to Embodiment 2 of the present invention. As shown in FIG. 3, the access isolation method provided by the embodiment is based on the method in the foregoing embodiment, wherein the peripheral device performs the verification of the mode identifier of the service communication mode in step 102, and may further include:

Step 301: The peripheral device determines, according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group, where the preset mode identifier group includes at least one mode identifier.

Step 302: If the mode identifier of the service communication mode is an identifier in the preset mode identification group, the peripheral determines that the mode identifier of the service communication mode is valid.

Specifically, if a channel group configuration space in the peripheral device corresponds to a service communication mode, the preset mode identifies at least one mode identifier included in the group, corresponding to a service communication mode. The peripheral device determines, according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group, and may be a mode identifier of the service communication mode in the preset mode identifier group. The symbol is searched. If it can be retrieved, the mode identifier of the service communication mode is the identifier in the preset mode identification group, that is, the mode identifier of the service communication mode is valid. Correspondingly, if not retrieved, the mode identifier of the service communication mode is invalid.

Optionally, in the foregoing step 301, the peripheral device determines, according to the preset mode identifier group, whether the mode identifier of the service communication mode is the identifier in the preset mode identifier group, the method further includes:

Step 301a: The peripheral device receives a third access instruction corresponding to the management configuration space in the peripheral device; the third access instruction is an instruction issued by a processor corresponding to the communication management mode, and the third access instruction includes: the channel group configuration space Access address.

Step 301b: The peripheral device determines the channel group configuration space according to the access address of the channel group configuration space, associates the channel group configuration space with at least one channel, and configures the preset mode identifier group for the channel group configuration space.

Specifically, the solution for verifying according to the preset mode identifier group is similar to the foregoing scheme for verifying according to the preset mode identifier, wherein the step 301b is similar to the foregoing step 302b, except that the space configuration is configured for the channel group. The preset mode identifies the group, that is, configures at least one mode identifier.

Based on the solution of the embodiment described above, further, the first access instruction includes: The instruction sent by the processor corresponding to the business communication mode.

Specifically, the processor corresponding to the service communication mode may be at least one processor on a baseband chip operated by the baseband service software corresponding to the service communication mode, where each processor corresponds to an implementation of a service communication mode. Features. The first access instruction includes an instruction issued by a processor corresponding to the service communication mode, that is, the embodiment of the present invention can isolate the different service communication modes of the channel configuration space in the peripheral access of the processor.

Alternatively, the first access instruction includes instructions issued by other peripherals.

Specifically, if the first access instruction includes an instruction issued by another peripheral, the embodiment of the present invention may also isolate other peripherals from accessing different service communication modes of the channel group configuration space in the peripheral.

In the embodiment of the present invention, multiple achievable solutions of the access isolation method are provided by verifying the mode identifiers of two different service communication modes. At the same time, since the first access instruction includes an instruction issued by a processor corresponding to the service communication mode, or an instruction issued by another peripheral device, the solution of the embodiment may also provide a communication mode isolation scheme in which a plurality of different physical structures access each other. This access isolation scheme is more versatile.

Embodiment 3

Embodiment 3 of the present invention further provides an access isolation method. The method can be performed by an access isolation device that can be located in memory. FIG. 4 is a flowchart of an access isolation method according to Embodiment 3 of the present invention. As shown in FIG. 4, the method may specifically include the following steps:

Step 401: The memory receives a fourth access instruction sent by the peripheral, where the fourth access instruction includes: an access address of the memory, a mode identifier of the service communication mode, and a packet identifier of the service communication mode.

Specifically, the peripheral device includes at least one channel group corresponding to the service communication mode, wherein each channel group corresponds to an implementation function of the service communication mode. In the step 401, the memory, in combination with the received fourth access instruction, may be an instruction issued by the peripheral. If the peripheral needs to access the memory to implement the preset function of the preset communication mode, the fourth access instruction includes: a mode identifier of the service communication mode and a packet identifier of the service communication mode.

The mode identifier of the service communication mode may be the virtual mode identifier described in the foregoing embodiment, and details are not described herein again. The packet identifier (Group ID) of the service communication mode may be an identifier corresponding to a function required to be implemented by the service communication mode. The packet identifier can pass The identifier or indication information of the function may also be represented by a preset address identifier, which corresponds to a function required to be implemented by the service communication mode.

Step 402: The memory sequentially checks the mode identifier of the service communication mode and the packet identifier of the service communication mode.

Step 403: If the mode identifier of the service communication mode and the packet identifier of the service communication mode are both valid, the memory accepts access of the peripheral to the memory.

Specifically, the memory checks the mode identifier of the service communication mode, and actually checks whether the access address of the memory included in the fourth access instruction is a preset address segment corresponding to the service communication mode. The memory verifies the packet identifier of the service communication mode, and actually checks whether the access address of the memory included in the fourth access instruction is a preset address segment corresponding to an implementation function in the service communication mode. . Therefore, the memory sequentially checks the mode identifier and the packet identifier of the service communication mode, and actually checks the service communication mode of the access address of the memory, and based on this, performs the service communication mode here. Verification of the corresponding function. In this embodiment, only when the mode identifier of the service communication mode and the packet identifier of the service communication mode are valid, the memory accepts the access address of the memory by the fourth access instruction. If not, the memory rejects the fourth access instruction accessing the memory access address and issues an error warning.

In this embodiment, the mode identifier and the packet identifier of the service communication mode included in the access instruction sent by the received peripheral are sequentially verified by the memory, and only the mode identifier and the packet identifier are valid. In the case of accepting the access of the peripheral to the memory, on the basis of ensuring the isolation of the service communication mode of the peripheral access to the memory, the function of the service communication mode can be further finely isolated to avoid concurrent The interaction between abnormal operations between software.

On the basis of the foregoing embodiment, the memory in the step 402 is used to check the mode identifier of the service communication mode and the packet identifier of the service communication mode, which may include:

The memory verifies the mode identifier of the service communication mode according to the preset mode identifier.

If the preset mode identifier is the same as the mode identifier of the service communication mode, the memory determines that the mode identifier of the service communication mode is valid.

If the mode identifier of the service communication mode is valid, the memory checks the packet identifier of the service communication mode according to the preset packet identifier.

If the preset packet identifier is the same as the packet identifier of the service communication mode, the memory is indeed The packet identifier of the service communication mode is valid.

Specifically, the memory sequentially checks the mode identifier and the packet identifier of the service communication mode, and may be a mode identifier that first checks the service communication mode, where the mode identifier of the service communication mode is valid. Then, the packet identifier of the service communication mode is verified. At this time, if the packet identifier of the service communication mode is valid, the memory can determine that the mode identifier and the packet identifier of the service communication mode are valid.

Optionally, before the verifying, in step 402, the mode identifier of the service communication mode and the packet identifier of the service communication mode, the method further includes:

The memory receives a fifth access instruction issued by a processor corresponding to the communication management mode; the fifth access instruction includes: an access address of the memory.

Specifically, the memory includes at least one memory group, each memory group includes at least one memory address segment, and each memory address segment corresponds to an implementation function of a service communication mode. In fact, each memory group also exists in the form of an address segment, except that the address range of the address segment included in the memory group is smaller than the address range of the address segment of the memory, that is, the address of the address segment of the memory group. The range is within the address range of the address segment of the memory.

The memory allocates the preset mode identifier to the memory address segment in the memory according to the fifth access instruction sent by the processor corresponding to the received communication management mode, and the preset packet identifier is actually a different memory address. The segment is associated with the service communication mode and the implementation function of the service communication mode, so that the access of the memory address segment of the memory can implement the corresponding implementation function of the service communication mode.

Alternatively, in step 402 of the foregoing solution, the memory sequentially verifies the mode identifier of the service communication mode and the packet identifier of the service communication mode, and may include:

The memory determines, according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group, where the preset mode identifier group includes at least one mode identifier.

If the mode identifier of the service communication mode is an identifier in the preset mode identification group, the memory determines that the mode identifier of the service communication mode is valid.

If the mode identifier of the service communication mode is valid, the memory identifies the group according to the preset group. Determining whether the packet identifier of the service communication mode is an identifier in the preset packet identification group; wherein the preset packet identification group includes at least one packet identifier.

Specifically, the memory is configured to verify, according to the preset mode identifier group and the preset group identifier group, the mode identifier of the service communication mode included in the fifth access instruction and the packet identifier of the service communication mode. In the foregoing embodiment, the peripheral device is similar to the mode identifier of the service communication mode in the first access instruction, and the difference is only in the solution of the service communication mode in the solution in this embodiment. In the case where the character is valid, the packet identifier of the service communication mode needs to be verified, and a similar part thereof will not be described herein.

Further, before the memory in step 402 of the foregoing solution sequentially verifies the mode identifier of the service communication mode and the packet identifier of the service communication mode, the method may further include:

The memory receives a sixth access instruction issued by a processor corresponding to the communication management mode; the sixth access instruction includes: an access address of the memory.

The access isolation method provided by the embodiment of the present invention can sequentially perform the mode identifier and the packet identifier of the service communication mode included in the access instruction issued by the channel group corresponding to the service communication mode in the received peripheral device through the memory. In the case that the mode identifier and the packet identifier are both valid, the access of the peripheral to the memory is accepted, and on the basis of ensuring isolation of the service communication mode of the peripheral access to the memory, The implementation of the business communication mode performs more granular isolation and avoids the phenomenon of abnormal operation between concurrent software. At the same time, the solution of the embodiment further provides a plurality of implementation manners of the access isolation method by providing a plurality of methods for verifying the mode identifier and the packet identifier of the service communication mode, so as to better implement the memory. The effective physical isolation of the access commands corresponding to different functions of the service communication mode ensures the normal operation of the concurrent software.

Embodiment 4

Embodiment 4 of the present invention provides an access isolation device, which may be located in a peripheral device. FIG. 5 is a schematic structural diagram of an access isolation device according to Embodiment 4 of the present invention.

As shown in FIG. 5, the access isolation device 500 includes a receiving port 501 and a verification module 502. The receiving port 501 is connected to the check module 502.

Specifically, the receiving port 501 can be a slave interface of the peripheral.

The receiving port 501 is configured to receive a first access instruction corresponding to the channel group configuration space in the peripheral device, and send the first access instruction to the verification module 502. The first access instruction includes: an access address of the channel group configuration space and a mode identifier of the service communication mode.

The verification module 502 is configured to check the mode identifier of the service communication mode, and if the mode identifier of the service communication mode is valid, accept the access to the channel group configuration space.

Optionally, the verification module 502 is further configured to: before the verification of the mode identifier of the service communication mode, verify the mode identifier of the service communication mode according to the preset mode identifier, if the If the mode identifier is the same as the mode identifier of the service communication mode, it is determined that the mode identifier of the service communication mode is valid.

Optionally, the receiving port 501 is further configured to: before the verification module 502 checks the mode identifier of the service communication mode according to the preset mode identifier, receive the external sent by the processor corresponding to the management channel mode. And a second access instruction corresponding to the management configuration space; the second access instruction includes: an access address of the channel group configuration space.

The verification module 502 is further configured to determine the channel group configuration space according to the access address of the channel group configuration space, associate the channel group configuration space with at least one channel, and configure the preset mode identifier for the channel group configuration space. symbol.

Alternatively, the verification module 502 is further configured to determine, according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier corresponding to the preset mode identifier group, if the mode identifier of the service communication mode is The preset mode identifies the identifier in the group, and then determines that the mode identifier of the service communication mode is valid; wherein the preset mode identification group includes at least one mode identifier.

Optionally, the receiving port 501 is further configured to: before the verification module 502 determines, according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group, receiving the outer And a third access instruction corresponding to the management management space; the third access instruction is an instruction issued by a processor corresponding to the communication management mode, and the third access instruction includes: an access address of the channel group configuration space.

The verification module 502 is further configured to determine the channel group configuration space according to the access address of the channel group configuration space, associate the channel group configuration space with at least one channel, and configure the preset mode identifier for the channel group configuration space. Group; the preset mode identification group includes at least one mode identifier.

Further, the first access instruction in the foregoing solution includes: the service communication mode corresponding to An instruction issued by the processor; or,

The first access instruction includes: an instruction issued by another peripheral.

The access isolation device provided in this embodiment may perform the access isolation method according to the first embodiment or the second embodiment, and the specific implementation process and the beneficial effects are similar to the first embodiment or the second embodiment, and details are not described herein again. .

Embodiment 5

Embodiment 5 of the present invention further provides an access isolation device. FIG. 6 is a schematic structural diagram of an access isolation device according to Embodiment 5 of the present invention. As shown in FIG. 6, the access isolation device 600 is located in the memory. The access isolation device 600 includes a receiving port 601 and a verification module 602. The receiving port 601 is connected to the verification module 602.

The receiving port 601 is configured to receive a fourth access instruction sent by the peripheral device, where the fourth access instruction includes: an access address of the memory, a mode identifier of the service communication mode, and a packet identifier of the service communication mode.

a verification module 602, configured to sequentially verify a mode identifier of the service communication mode and a packet identifier of the communication mode, if the mode identifier of the service communication mode and the packet identifier of the service communication mode are valid, Accept the access of the peripheral to the memory.

Further, the verification module 602 is further configured to check, according to the preset mode identifier, the mode identifier of the service communication mode, if the preset mode identifier is the same as the mode identifier of the service communication mode, Determining that the mode identifier of the service communication mode is valid, and if the mode identifier of the service communication mode is valid, verifying the packet identifier of the service communication mode according to the preset packet identifier; if the preset packet identifier The same as the packet identifier of the service communication mode, it is determined that the packet identifier of the service communication mode is valid.

Optionally, the receiving port 601 is further configured to: after the verification module 602 sequentially checks the mode identifier of the service communication mode and the packet identifier of the service communication mode, receive, by the processor corresponding to the management communication mode, a fifth access instruction, determining, according to the access address of the memory in the fifth access instruction, a memory address segment to which the memory access belongs, and configuring the preset mode identifier and the preset group identifier for the memory address segment symbol.

Alternatively, the verification module 602 is further configured to determine, according to the preset mode identification group, whether the mode identifier of the service communication mode is an identifier in the preset mode identification group, if the mode identifier of the service communication mode Determining the identifier in the group for the preset mode, determining the service communication mode The mode identifier is valid. If the mode identifier of the service communication mode is valid, determining, according to the preset group identification group, whether the packet identifier of the service communication mode is an identifier in the preset group identification group, if the service communication mode The packet identifier is an identifier in the preset packet identification group, and it is determined that the packet identifier of the service communication mode is valid. The preset mode identifier group includes at least one mode identifier; the preset packet identifier group includes at least one packet identifier.

Optionally, the receiving port 601 is further configured to: after the verification module 602 sequentially checks the mode identifier of the service communication mode and the packet identifier of the service communication mode, the processor corresponding to the communication management mode is sent. a sixth access instruction, and determining, according to the memory access address in the sixth access instruction, a memory address segment to which the memory access address belongs according to the memory access address, and configuring the preset mode identifier group for the memory address segment and the Preset group identification group.

The access isolation device provided in this embodiment may perform the access isolation method in the foregoing embodiment 3. The specific implementation process and the beneficial effects are similar to those in the foregoing embodiment 3, and details are not described herein again.

Embodiment 6

The embodiment of the invention further provides an access isolation method. The embodiment of the first embodiment or the second embodiment is specifically described by using a specific example. FIG. 7 is a flowchart of an access isolation method according to Embodiment 6 of the present invention. As shown in FIG. 7, the method may include:

Step 701: The peripheral device receives a first access instruction corresponding to the channel group configuration space in the peripheral device. The first access instruction includes: an access address of the channel group configuration space and a mode identifier of the service communication mode.

The first access instruction may be an instruction issued by a processor corresponding to the service communication mode; or an instruction issued by a peripheral device.

Step 702: The peripheral device receives a second access instruction corresponding to a management configuration space in the peripheral device sent by the processor corresponding to the communication management mode. The second access instruction includes: an access address of the channel group configuration space.

Step 703: The peripheral device determines the channel group configuration space according to the access address of the channel group configuration space, associates the channel group configuration space with at least one channel, and configures the preset mode identifier for the channel group configuration space.

Step 704: The peripheral device checks the mode identifier of the service communication mode according to the preset mode identifier.

Step 705: If the preset mode identifier is the same as the mode identifier of the service communication mode, Then the peripheral determines that the mode identifier of the service communication mode is valid.

Step 706: If the mode identifier of the service communication mode is valid, the peripheral accepts access to the channel group configuration space.

The access isolation method provided by the foregoing Embodiment 1 or Embodiment 2 is described by using the specific example in this embodiment, and may be performed by the access isolation device provided in Embodiment 4, and the specific implementation process and beneficial effects thereof are the same as the foregoing embodiment. Similar, I will not repeat them here.

This embodiment also provides an access isolation method. The method for describing the access isolation method provided in the foregoing embodiment 3 is described by a specific example. FIG. 8 is a flowchart of another access isolation method according to Embodiment 6 of the present invention. As shown in FIG. 8, the method can include:

Step 801: The memory receives a fourth access instruction sent by the peripheral, where the fourth access instruction includes: an access address of the memory, a mode identifier of the service communication mode, and a packet identifier of the service communication mode.

Step 802: The memory receives a fifth access instruction sent by a processor corresponding to the communication management mode; the fifth access instruction includes: an access address of the memory.

Step 803: The memory determines a memory address segment to which the access address of the memory belongs according to the access address of the memory, and configures the preset mode identifier and the preset packet identifier for the memory address segment.

Step 804: The memory verifies the mode identifier of the service communication mode according to the preset mode identifier.

Step 805: If the preset mode identifier is the same as the mode identifier of the service communication mode, the memory determines that the mode identifier of the service communication mode is valid.

Step 806: If the mode identifier of the service communication mode is valid, the memory checks the packet identifier of the service communication mode according to the preset packet identifier.

Step 807: If the preset packet identifier is the same as the packet identifier of the service communication mode, the memory determines that the packet identifier of the service communication mode is valid.

Step 808: If the mode identifier of the service communication mode and the packet identifier of the service communication mode are both valid, the memory accepts access of the peripheral to the memory.

The access isolation method provided by the foregoing embodiment 3 is described by using the specific example in the embodiment, and may be performed by the access isolation device provided in the foregoing fifth embodiment. The specific implementation process and beneficial effects are similar to the foregoing embodiment. Let me repeat.

One of ordinary skill in the art can understand that all or part of the steps of the above method embodiments are implemented. The foregoing program may be stored in a computer readable storage medium, and when executed, the program includes the steps of the foregoing method embodiment; and the foregoing storage medium includes: ROM, RAM A variety of media that can store program code, such as a disk or a disc.

Finally, it should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that The technical solutions described in the foregoing embodiments may be modified, or some or all of the technical features may be equivalently replaced; and the modifications or substitutions do not deviate from the technical solutions of the embodiments of the present invention. range.

Claims

An access isolation method, comprising:

Receiving, by the peripheral device, a first access instruction corresponding to the channel group configuration space in the peripheral device; the first access instruction includes: an access address of the channel group configuration space and a mode identifier of a service communication mode;

The peripheral device verifies a mode identifier of the service communication mode;

If the mode identifier of the service communication mode is valid, the peripheral accepts access to the channel group configuration space.
The method according to claim 1, wherein the peripheral device verifies the mode identifier of the service communication mode, including:

The peripheral device verifies the mode identifier of the service communication mode according to the preset mode identifier;

If the preset mode identifier is the same as the mode identifier of the service communication mode, the peripheral determines that the mode identifier of the service communication mode is valid.
The method according to claim 2, wherein the peripheral device further checks: before the mode identifier of the service communication mode is verified according to the preset mode identifier, the method further includes:

The peripheral device receives a second access instruction corresponding to the management configuration space in the peripheral device issued by the processor corresponding to the communication management mode; the second access instruction includes: an access address of the channel group configuration space;

Determining, by the peripheral device, the channel group configuration space according to the access address of the channel group configuration space, associating the channel group configuration space with at least one channel, and configuring the preset mode for the channel group configuration space Identifier.
The method according to claim 1, wherein the peripheral device verifies the mode identifier of the service communication mode, including:

The peripheral device determines, according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group, where the preset mode identifier group includes at least one mode identifier;

If the mode identifier of the service communication mode is an identifier in the preset mode identification group, the peripheral device determines that the mode identifier of the service communication mode is valid.
The method of claim 4 wherein said peripheral is in accordance with a preset mode And the identifier group, before determining whether the mode identifier of the service communication mode is the identifier in the preset mode identifier group, the method further includes:

The peripheral device receives a third access instruction corresponding to the management configuration space in the peripheral device; the third access instruction is an instruction issued by a processor corresponding to the communication management mode, and the third access instruction includes: the channel group The access address of the configuration space;

Determining, by the peripheral device, the channel group configuration space according to the access address of the channel group configuration space, associating the channel group configuration space with at least one channel, and configuring the preset mode for the channel group configuration space Identification group.
The method according to any one of claims 1 to 5, wherein the first access instruction comprises: an instruction issued by a processor corresponding to the service communication mode; or

The first access instruction includes an instruction issued by another peripheral.
An access isolation method, comprising:

a fourth access instruction issued by the memory receiving peripheral, the fourth access instruction comprising: an access address of the memory, a mode identifier of a service communication mode, and a packet identifier of the service communication mode;

The memory sequentially checks a mode identifier of the service communication mode and a packet identifier of the service communication mode;

If the mode identifier of the service communication mode and the packet identifier of the service communication mode are both valid, the memory accepts access by the peripheral to the memory.
The method according to claim 7, wherein the memory sequentially verifies the mode identifier of the service communication mode and the packet identifier of the service communication mode, including:

The memory verifies the mode identifier of the service communication mode according to the preset mode identifier;

If the preset mode identifier is the same as the mode identifier of the service communication mode, the memory determines that the mode identifier of the service communication mode is valid;

And if the mode identifier of the service communication mode is valid, the memory checks a packet identifier of the service communication mode according to a preset packet identifier;

If the preset packet identifier is the same as the packet identifier of the service communication mode, the memory determines that the packet identifier of the service communication mode is valid.
The method according to claim 8, wherein said memory sequentially checks a mode identifier of said service communication mode and a packet identifier of said service communication mode, and further include:

The memory receives a fifth access instruction issued by a processor corresponding to the communication management mode; the fifth access instruction includes: an access address of the memory;

The memory determines a memory address segment to which the access address of the memory belongs according to the access address of the memory, and configures the preset mode identifier and the preset packet identifier for the memory address segment.
The method according to claim 7, wherein the memory sequentially verifies the mode identifier of the service communication mode and the packet identifier of the service communication mode, including:

Determining, by the memory according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group; wherein the preset mode identifier group includes at least one mode identifier;

If the mode identifier of the service communication mode is an identifier in the preset mode identification group, the memory determines that a mode identifier of the service communication mode is valid;

If the mode identifier of the service communication mode is valid, the memory determines, according to the preset group identity group, whether the packet identifier of the service communication mode is an identifier in the preset group identity group; The preset group identification group includes at least one group identifier;

If the packet identifier of the service communication mode is an identifier in the preset packet identification group, the memory determines that the packet identifier of the service communication mode is valid.
The method according to claim 10, wherein before the memory sequentially checks the mode identifier of the service communication mode and the packet identifier of the service communication mode, the method further includes:

The memory receives a sixth access instruction issued by a processor corresponding to the communication management mode; the sixth access instruction includes: an access address of the memory;

The memory determines a memory address segment to which the access address of the memory belongs according to the access address of the memory, and configures the preset mode identifier group and the preset group identifier group for the memory address segment.
An access isolation device, wherein the access isolation device is located at a peripheral device, the access isolation device includes: a receiving port, and a verification module; wherein the receiving port is connected to the verification module;

The receiving port is configured to receive a first access corresponding to a channel group configuration space in the peripheral device And executing the first access instruction to the verification module; the first access instruction includes: an access address of the channel group configuration space and a mode identifier of a service communication mode;

The verification module is configured to check a mode identifier of the service communication mode, and if the mode identifier of the service communication mode is valid, accept access to the channel group configuration space.
The device according to claim 12, characterized in that

The verification module is further configured to: before the mode identifier of the service communication mode is verified, verify the mode identifier of the service communication mode according to the preset mode identifier, if the preset The mode identifier is the same as the mode identifier of the service communication mode, and then the mode identifier of the service communication mode is determined to be valid.
The device of claim 13 wherein:

The receiving port is further configured to: before the verifying module checks the mode identifier of the service communication mode according to the preset mode identifier, receive the a second access instruction corresponding to the configuration space in the peripheral device; the second access instruction includes: an access address of the channel group configuration space;

The verification module is further configured to determine the channel group configuration space according to the access address of the channel group configuration space, associate the channel group configuration space with at least one channel, and configure a space configuration for the channel group. The preset mode identifier.
The device according to claim 12, characterized in that

The verification module is further configured to determine, according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group, if the mode identifier of the service communication mode is And determining, by the preset mode, the identifier in the group, determining that the mode identifier of the service communication mode is valid; wherein the preset mode identifier group includes at least one mode identifier.
The device of claim 15 wherein:

The receiving port is further configured to: before the determining module determines, according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group, receiving the a third access instruction corresponding to the configuration space is managed in the peripheral device; the third access instruction is an instruction issued by a processor corresponding to the communication management mode, and the third access instruction includes: an access address of the channel group configuration space;

The verification module is further configured to determine the channel group configuration space according to the access address of the channel group configuration space, associate the channel group configuration space with at least one channel, and The channel group configuration space configures the preset mode identifier group.
The apparatus according to any one of claims 12-16, wherein the first access instruction comprises: an instruction issued by a processor corresponding to the service communication mode; or

The first access instruction includes an instruction issued by another peripheral.
An access isolation device, wherein the access isolation device is located in a memory; the access isolation device includes: a receiving port, and a verification module; and the receiving port is connected to the verification module;

The receiving port is configured to receive a fourth access instruction sent by the peripheral device, where the fourth access instruction includes: an access address of the memory, a mode identifier of a service communication mode, and a packet identifier of the service communication mode;

The verification module is configured to sequentially check a mode identifier of the service communication mode and a packet identifier of the communication mode, if a mode identifier of the service communication mode and a grouping of the service communication mode When the identifiers are both valid, the peripherals are accepted for access to the memory.
The device of claim 18, wherein

The verification module is further configured to check, according to the preset mode identifier, a mode identifier of the service communication mode, if the preset mode identifier is the same as a mode identifier of the service communication mode, Determining that the mode identifier of the service communication mode is valid, and if the mode identifier of the service communication mode is valid, verifying a packet identifier of the service communication mode according to a preset packet identifier; If the packet identifier is the same as the packet identifier of the service communication mode, it is determined that the packet identifier of the service communication mode is valid.
The device according to claim 19, characterized in that

The receiving port is further configured to receive, by the processor corresponding to the management communication mode, before the verification module sequentially checks the mode identifier of the service communication mode and the packet identifier of the service communication mode. a fifth access instruction, determining, according to the access address of the memory in the fifth access instruction, a memory address segment to which the memory access belongs, and configuring the preset mode identifier and the location for the memory address segment Preset the packet identifier.
The device of claim 18, wherein

The verification module is further configured to determine, according to the preset mode identifier group, whether the mode identifier of the service communication mode is an identifier in the preset mode identifier group, if the mode identifier of the service communication mode is Determining, by the preset mode, an identifier in the group, determining a mode of the service communication mode The identifier is valid, if the mode identifier of the service communication mode is valid, determining, according to the preset group identifier group, whether the packet identifier of the service communication mode is an identifier in the preset group identifier group, if The packet identifier of the service communication mode is an identifier in the preset packet identification group, and then determining that the packet identifier of the service communication mode is valid; wherein the preset mode identification group includes at least one mode identifier; The preset group identification group includes at least one packet identifier.
The device according to claim 21, wherein

The receiving port is further configured to receive, by the processor corresponding to the management communication mode, before the verification module sequentially checks the mode identifier of the service communication mode and the packet identifier of the service communication mode. a sixth access instruction, and determining, according to the memory access address in the sixth access instruction, a memory address segment to which the memory access address belongs according to the memory access address, and configuring the preset mode for the memory address segment The identification group and the preset group identification group.