WO2009113571A1

WO2009113571A1 - Information processing device and method capable of operating a plurality of basic software programs

Info

Publication number: WO2009113571A1
Application number: PCT/JP2009/054643
Authority: WO
Inventors: 淳嗣酒井; 正人枝廣; 浩明井上
Original assignee: 日本電気株式会社
Priority date: 2008-03-11
Filing date: 2009-03-11
Publication date: 2009-09-17
Also published as: JPWO2009113571A1

Abstract

Provided are a device and a method capable of inexpensively realizing a highly reliable information processor in an information processing device having a plurality of execution environments. The device comprises a plurality of arithmetic circuits (10P1-1, 10P1-m), a plurality of basic software programs (70P1 to 70Pk) executed in the plurality of arithmetic circuits and having the same reliability, a mutual coupling network (1000) having a filter means (1010) for limiting accesses from the plurality of arithmetic circuits, an arithmetic device (11) independent from the arithmetic circuits which respectively execute the plurality of softwareprograms, and an execution environment division control means (200) executed by the arithmetic circuit (11). The execution environment division control means is shared among the plurality of basic software programs, is more reliable than the programs, and changes the setting for limiting the accesses of the filter means of the mutual coupling network in cooperation with the software programs.

Description

Information processing apparatus and method capable of operating a plurality of platform software

(Description of related applications)
This application claims the priority of the previous Japanese Patent Application No. 2008-061588 (filed on Mar. 11, 2008), and the entire description of the previous application is incorporated herein by reference. Is considered to be.
The present invention relates to a semiconductor integrated circuit having a plurality of CPUs connected by an interconnection network, and more particularly, to an information processing apparatus and method capable of safely operating infrastructure software in consideration of reliability and versatility.

In the information processing equipment such as a data center, it is expected that multiple infrastructure software will be operated in the future. However, the reliability of the system operation depends on the reliability of the base software.

FIG. 15 is a diagram schematically illustrating an example of a typical configuration of an information processing apparatus in which the base software is executed. In FIG. 15, the base software 70P1 manages the arithmetic circuits 10P1-1 to 10P1-m, and executes application groups 50P1-1 to 50P1-j and OSs 60P1-1 to 60P1-j on the base software 70P1. As a result, a plurality of pieces of base software can be operated independently in the plurality of arithmetic circuits 10P1-1 to 10P1-m.

The information processing apparatus shown in FIG. 15 can easily destroy other execution environments when there is a bug in the base software, or when the base software itself is attacked and taken by malicious software. There was a problem such as.

As a technique for dealing with the problem of the information processing apparatus in FIG. FIG. 16 is a diagram schematically illustrating an example of the configuration of an information communication terminal device that executes a downloaded additional process (see Patent Document 2).

In FIG. 16, in each execution environment 10000P1 to Pk, a plurality of CPUs 10010AP1 and 10010BP1 are divided into a plurality of domains 10020AP1 and 10020BP1 according to the reliability of the program (process) to be executed. When the CPU 10010BP1 that includes a plurality of CPUs and belongs to a domain that executes low-security processing such as additional processing accesses the memory 31 and the input / output device (I / O) 41 of the domain that executes high-security processing The access request is configured such that access permission / non-permission is determined by the access control unit 10030P1, and only permitted access is performed. With this configuration, it is possible to construct a highly reliable security system based on hardware control.

JP-T-2004-5000666 International Publication Number WO2006 / 022161 A1

The following is an analysis of related technology according to the present invention.

In the method shown in FIG. 16, it is necessary to specify a domain for performing basic processing in each execution environment.

However, in an application area such as a data center where there are multiple users and the purpose is not to execute a specific function, it is not known what software is executed in each execution environment. . For this reason, it is difficult to specify such basic processing in advance.

Furthermore, in the case of the configuration shown in FIG. 16, the area used by the OS can be fixed in advance.

In an information processing apparatus that assumes various execution environments such as a data center, a resource area to be used cannot be determined in advance. Therefore, the configuration of FIG. 16 has room for improvement in terms of versatility when applied to a data center or the like.

With respect to a semiconductor integrated circuit having a plurality of CPUs connected by an interconnection network, in order to guarantee the reliability of the entire information processing apparatus, it is necessary to coordinate a plurality of untrusted infrastructure software with each other with high reliability. is there. However, it is difficult to achieve this with the related art described above.

Therefore, an object of the present invention is to prevent an information processing apparatus having a plurality of execution environments from propagating the influence due to the operation to other effective environments even if there is a malfunction in the operation of certain basic software. An object of the present invention is to provide an apparatus and a method that enable a highly reliable information processing apparatus to be realized.

Another object of the present invention is to provide an apparatus and method that can realize a highly reliable information processing apparatus at low cost.

Still another object of the present invention is to provide an apparatus and method that enable dynamic resource allocation with high reliability between unreliable infrastructure software.

The present invention that achieves the above-described object will be summarized as follows.

According to one aspect of the present invention, a plurality of arithmetic circuits, a plurality of base software executed by the plurality of arithmetic circuits, and access from the arithmetic circuits are restricted, and separation control between the arithmetic circuits is performed. An interconnection network having filter means for performing, an arithmetic circuit different from the arithmetic circuit for executing each of the plurality of infrastructure software, and an execution environment division control means executed by the different arithmetic circuit, One environment division control means is provided for a plurality of the base software, and a semiconductor integrated circuit or an information processing apparatus is provided for changing the access restriction setting of the filter means of the interconnection network. In the present invention, the plurality of base software have the same or equivalent reliability.

According to another aspect of the present invention, a plurality of arithmetic circuits, a plurality of basic software programs respectively executed by the plurality of arithmetic circuits, and access from the arithmetic circuits are restricted, and separation control between the arithmetic circuits is performed. An information processing apparatus control method comprising an interconnection network having filter means for performing execution environment division control means in an arithmetic circuit different from the arithmetic circuit for executing each of the plurality of infrastructure software, One execution environment division control unit is provided for a plurality of the base software, and a method for changing the access restriction setting of the filter unit of the interconnection network is provided.

According to the present invention, in an information processing apparatus having a plurality of execution environments, even if there is a malfunction in the operation of a certain basic software, it is possible to avoid propagation of the influences to other effective environments. A reliable information processing apparatus can be realized.

Further, according to the present invention, it is possible to realize the highly reliable information processing apparatus at a much lower cost than the conventional method.

Furthermore, according to the present invention, it is possible to provide a more flexible system configuration to the user by enabling dynamic resource allocation with high reliability between unreliable infrastructure software. .

It is a figure which shows the whole structure of the information processing apparatus of one Example of this invention. 1 is a diagram showing an overall configuration of a semiconductor integrated circuit according to an embodiment of the present invention. It is a figure which shows the division | segmentation information set to the filter apparatus of one Example of this invention. It is a figure for demonstrating an example of operation | movement of the semiconductor integrated circuit of one Example of this invention. It is a figure for demonstrating an example of operation | movement of the semiconductor integrated circuit of one Example of this invention. It is a figure for demonstrating an example of operation | movement of the semiconductor integrated circuit of one Example of this invention. It is a figure for demonstrating an example of operation | movement of the semiconductor integrated circuit of one Example of this invention. It is a figure for demonstrating an example of operation | movement of the semiconductor integrated circuit of one Example of this invention. It is a figure for demonstrating an example of operation | movement of the semiconductor integrated circuit of one Example of this invention. It is a figure for demonstrating an example of operation | movement of the semiconductor integrated circuit of one Example of this invention. It is a figure which shows the whole structure of the information processing apparatus of another Example of this invention. It is a figure for demonstrating an example of operation | movement of the information processing apparatus of another Example of this invention. It is a figure which shows the whole structure of the information processing apparatus of another Example of this invention. It is a figure for demonstrating an example of operation | movement of the information processing apparatus of another Example of this invention. It is a figure which shows a related technique. It is a figure which shows another related technique.

Explanation of symbols

10, 10P1, 10P2, 10Pn, 10P1-1, 10P1-m
10Pk-1, 10Pk-n arithmetic circuit 11 arithmetic environment group 30 for execution environment division control means memory control circuit 31, 31C1, 31Ct memory 40 I / O control circuit 41, 41C1, 41Ct I / O
50, 50P1-1, 50P1-j Application group 60, 60P1-1, 60P1-j OS
70, 70P1, 70Pk Base software 90, 90P1, 90Pk Execution environment 100, 100C1, 100Ct Semiconductor integrated circuit 200, 200C1, 200Ct Execution environment division control means 201 Division information 1000, 1000C1, 1000Ct Interconnection network 1010, 1010C1, 1010Ct Filter device 10000P1 ... Pk execution environment 10010AP1, 10010BP1 CPU
10020AP1, 10020BP1 Execution environment 10021AP1, 10021BP1 OS
10022P1 Basic processing 10023P1 Additional processing 10030P1 Access control means

Embodiments of the present invention will be described. According to a preferred embodiment of the present invention, referring to FIG. 1, in a semiconductor integrated circuit 100, an arithmetic circuit 10P1-Pn such as a CPU, a memory control circuit 30 connected to an external memory 31, an external circuit The I / O control circuit 40 connected to the I / O 41 and the arithmetic circuits 10P1-Pn, the memory control circuit 30, and the I / O control circuit 40 are interconnected, and the arithmetic circuits 10P1-Pn are connected to each other while maintaining consistency. And an interconnection network 1000 including a filter device 1010 capable of performing the separation control. In the following, description will be made in accordance with examples.

FIG. 1 is a diagram showing an overall configuration of an information processing apparatus according to an embodiment of the present invention. Referring to FIG. 1, in a semiconductor integrated circuit 100, in addition to an arithmetic circuit 10P1-Pn such as a CPU, a memory control circuit 30 connected to an external memory 31, and an I / O control circuit 40 connected to an external I / O 41. Furthermore, an interconnection network 1000 including a filter device 1010 capable of interconnecting them and performing control of separation between arithmetic circuits while maintaining consistency is provided.

In this embodiment, the arithmetic circuit 10, the memory control circuit 30, the memory 31, the I / O control circuit 40, the I / O 41, and the interconnection network 1000 each have not only a separate package configuration but also a SoC (System-on-Chip). ) An internal circuit configuration, a SiP (System-in-Package) configuration with another chip, a three-dimensional LSI configuration, or a combination thereof may be used.

According to the present embodiment, the arithmetic circuits 10P1-Pn may be any arithmetic device capable of performing a program operation, such as a signal processing processor, a VLIW (Very Long Instruction Word) processor, or a configurable processor.

In this configuration, the filter device 1010 is a filter device disclosed in Patent Document 2 (International Publication No. WO2006 / 022161, A1) and the like that can perform separation control between arithmetic circuits while maintaining consistency. Anything is fine.

FIG. 2 is a diagram showing an overall configuration of the semiconductor integrated circuit 100 according to an embodiment of the present invention. Referring to FIG. 2, the plurality of arithmetic circuit groups 11, the execution environment division control means 200 executed on the plurality of arithmetic circuit groups 11, and the base software 70P1 are executed on the arithmetic circuits 10P1-1 to 10P1-m. In addition, a plurality of execution environments 90P1 to 90Pk are provided on which the application groups 50P1-1 to 50P1-j and the OS 60P1-60P1-j are respectively executed. In addition, an interconnection network 1000 including a filter device 1010 capable of interconnecting arithmetic circuits and performing separation control between arithmetic circuits while maintaining consistency is provided. The base software 70P1 to 70Pk in the plurality of execution environments 90P1 to 90Pk have the same or equivalent reliability. In the following, a plurality of execution environments 90P1 to 90Pk may be represented by the execution environment 90.

The basic software means basic software that supports execution of the OS, such as virtualization software and firmware. Of course, if the OS is allowed to be modified, the OS itself may include the base software.

In such a configuration, the setting of the filter device 1010 can be changed only by the execution environment division control unit 200. All requests from the execution environment division control unit 200 and the arithmetic circuit group 11 may be permitted, or the filter device 1010 may set its own access range.

The execution environment 90 is a hardware / software environment for executing an application assigned to each user of the data center. That is, one execution environment includes a plurality of domains shown in FIG.

In the present embodiment, the execution environment division control means 200 is executed by the arithmetic circuit group 11 independent of the arithmetic circuits that execute the execution environments 90P1 to 90Pk.

That is, the minimum arithmetic circuit group 11 (one CPU or a plurality of CPUs) is newly added to the information processing apparatus, and the functions of the division of the execution environment and the resource arbitration between the execution environments are shared from the execution environment. It can be said that it is cut out as a term and separately cut out as execution environment division control means 200 that can be shared between execution environments. This is because it is difficult to cut out the basic process in the execution environment, and by setting the reliability of the basic process low, the entire execution environment can be regarded as a process with low reliability. As a result, instead of performing filter control within each execution environment, it is possible to extract the execution environment dividing means 200 that performs filter control shared by the entire apparatus. Thereby, extremely low-cost filter control is possible.

An information processing apparatus provider such as a data center cannot know in advance (before the apparatus is shipped) what kind of software the user can operate in the execution environment. Since the provider cannot guarantee that the entire execution environment is 100% bug-free and completely prevents malicious viruses, the reliability of the entire execution environment is determined for the information processing apparatus. Can be considered low.

On the other hand, the information processing apparatus provider can guarantee the operations of the arithmetic circuit group 11 and the execution environment division control means 200 in advance (before the apparatus is shipped). In this respect, it can be said that the execution environment division control unit 200 is more reliable for the information processing apparatus than the entire execution environment.

Unlike the related technology, the arithmetic circuit group 11 does not execute the basic functions of the information processing apparatus. Basic functions indispensable for each user are included in each execution environment.

In the present embodiment, the highly reliable execution environment division control means 200 and the calculation are executed in a situation where an execution environment that is not reliable for each user is operating on the semiconductor integrated circuit 100 shared by a plurality of users. By newly adding the circuit group 11 and sharing it between the execution environments, the mutual interference between the unreliable execution environments is performed at low cost via the filter device 1010 in terms of hardware. The configuration is one of the features.

Furthermore, in this embodiment, the execution environment division control means 200 can cooperate with the basic software group 70 to perform resource arbitration between execution environments safely and at low cost. The reason why this is possible is that, in the present embodiment, although the basic software group is not reliable, it is through a forced setting change of the filter device 1010 or a circuit-based forced control such as a reset. This is because the execution environment belonging to the user can avoid monopolizing the CPU resources and the like in terms of hardware.

FIG. 3 is a diagram showing the division information 201 set in the filter device 1010 according to an embodiment of the present invention. In FIG. 3, the arithmetic circuit # 1-10 is permitted to read (R) the area from 0x00000000 to 0x10000000 and read / write (R, W) to the area from 0x1000000 to 0x20000000. Are all rejected.

The arithmetic circuit # 11-50 is permitted to read (R) the area from 0x20000000 to 0x30000000 and read / write (R, W) from the area from 0x3000000 to 0x40000000, and to read / write to the other areas (R, W) Are all rejected.

Thus, access control to the memory or I / O area can be performed for each arithmetic circuit managed by each base software, so that the reliability between the base software can be improved.

FIG. 4 is a diagram for explaining an example of the operation of the semiconductor integrated circuit 100 of FIG. In FIG. 4, the sign consisting of S and a number beside the arrow represents a step number. In this example, a method for determining the memory / I / O area that can be executed by each of the arithmetic circuits 10P1-1 to 10P1-m to 10Pk-1 to 10Pk-n will be described.

Step 1 (S1): The execution environment division control means 200 sets the filter device 1010 based on the predetermined division information 201.

FIG. 5 is a diagram for explaining an example of the operation of the semiconductor integrated circuit 100 of FIG. In FIG. 5, the sign consisting of S and a number beside the arrow represents a step number. In this example, a method of starting the base software 70P1 to 70Pk for the arithmetic circuits 10P1-1 to 10P1-m to 10Pk-1 to 10Pk-n will be described.

Step 1 (S1): The execution environment division control means 200 starts up the arithmetic circuits 10P1-1 to 10P1-m to 10Pk-1 to 10Pk-n.

Step 2 (S2): The arithmetic circuits 10P1-1 to 10P1-m start the base software 70P1, and the arithmetic circuits 10Pk-1 to 10Pk-n start the base software 70Pk.

Step 3 (S3): The execution environment division control unit 200 provides information about the allocated area to the base software 70P1 to 70Pk.

Here, even if there is a problem in the base software, since the filter device 1010 is set, it is not possible to interfere with the area other than the area assigned to the base software. ing.

FIG. 6 is a diagram for explaining an example of the operation of the semiconductor integrated circuit 100 of FIG. In FIG. 6, a sign consisting of S and a number beside the arrow represents a step number. In this example, a description will be given of a method in which the base software 70P1 to 70Pk starts the OSs of the respective execution environments 90P1 to 90Pk.

Step 1 (S1): The base software 70P1 to 70Pk virtualizes resources for the OS to be executed based on the information given in FIG. 5, and starts the OS.

Here, resource virtualization includes, for example, memory virtualization such as where to set an address assigned to address 0, and virtualization for I / O and interrupt processing.

FIG. 7 is a diagram for explaining an example of the operation of the semiconductor integrated circuit 100 of FIG. In FIG. 7, the sign consisting of S and a number beside the arrow represents a step number. In this example, a case where an access permitted by the filter device 1010 is issued from the execution environment 90P1 will be described.

Step 1 (S1): Access is issued from the virtualization environment 90P1 to the filter device 1010.

Step 2 (S2): The filter device 1010 determines that the access is permitted, and as a result, issues the access via the interconnection network 1000.

FIG. 8 is a diagram for explaining an example of the operation of the semiconductor integrated circuit 100 of FIG. In FIG. 8, the sign consisting of S and a number beside the arrow represents a step number. In this example, a case where an access that is not permitted by the filter device 1010 is issued from the execution environment 90P1 will be described.

Step 2 (S2): The filter device 1010 determines that the access is not permitted and, as a result, notifies the access error to the issuing arithmetic circuit via the interconnection network 1000.

FIG. 9 is a diagram for explaining an example of the operation of the semiconductor integrated circuit 100 of FIG. In FIG. 9, the sign consisting of S and a number beside the arrow represents a step number. In this example, a method will be described in which the execution environment division control unit 200 dynamically adjusts resources in a specific execution environment based on information given from the system. Here, the information given from the system means that, for example, an arithmetic circuit or a memory is newly added to the system, or the use of the arithmetic circuit or memory in a specific virtual environment is stopped for maintenance. Means that.

Step 1 (S1): The execution environment division control means 200 notifies the base software 70P1 of the execution environment (virtualization environment) 90P1 based on information given from the system.

Step 2 (S2): The base software 70P1 of the execution environment 90P1 updates its information based on the notification and returns the result to the execution environment division control means 200.

After the response, the base software 70P1 waits for a response from the execution environment division control means 200. Of course, when waiting for a response, the base software 70P1 may proceed with processing not related to the given information.

Step 3 (S3): The execution environment division control means 200 sets the filter device 1010 based on the information given this time.

Step 4 (S4): The execution environment division control means 200 notifies the base software 70P1 of the execution environment 90P1 that the filter setting has been completed.

Thereby, the base software 70P1 of the execution environment 90P1 starts operation based on the new information.

Here, if there is no response from the base software, it may be notified to the system side or reset. Alternatively, the setting may be forcibly changed. This makes it possible to control the base software with high reliability.

FIG. 10 is a diagram for explaining an example of the operation of the semiconductor integrated circuit 100 of FIG. In FIG. 10, the sign consisting of S and a number beside the arrow represents a step number. In this example, a description will be given of a method in which the execution environment division control unit 200 dynamically adjusts resources between execution environments based on information given from a system or infrastructure software. The information given from the system means, for example, distribution according to the load state of the arithmetic circuit or the memory.

Step 1 (S1): The execution environment division control means 200 receives information from the base software 70P1 of the system or the execution environment 90P1.

Step 2 (S2): The execution environment division control means 200 requests the base software of the execution environment 90Pk to adjust the resource based on the information.

Step 3 (S3): The base software 70Pk of the execution environment 90Pk adjusts its own resources based on the notification, and returns the result to the execution environment division control means 200.

Step 4 (S4): The execution environment division control unit 200 sets the filter device 1010 based on the current information.

Step 5 (S5): The execution environment division control means 200 notifies the base software 70P1 of the execution environment 90P1 that the filter setting has been completed.

Thereby, the base software 70P1 of the execution environment 90P1 may start the operation based on the new information, and may notify the system side when there is no response from the base software, or reset the system. May be. The setting may be forcibly changed. This makes it possible to control the base software with high reliability.

FIG. 11 is a diagram showing an overall configuration of an information processing apparatus according to another embodiment of the present invention. Referring to FIG. 11, there is shown a configuration in which a memory 31 and an I / O 41 are shared among a plurality of semiconductor integrated circuits 100C1 to Ct.

Here, even if the memory and I / O are physically distributed, they need only be logically shared.

The semiconductor integrated circuit 100C1 includes an execution environment division control unit 200C1 and an interconnection network 1000C1 including a filter device 1010C1.

Also, it is assumed that the semiconductor integrated circuit 100Ct includes an execution environment division control unit 200Ct and an interconnection network 1000Ct including a filter device 1010Ct. That is, an information processing apparatus including a plurality of semiconductor integrated circuits provided with a shared memory / I / O is assumed.

FIG. 12 is a diagram for explaining an example of the operation of the information processing apparatus of FIG. In FIG. 12, the sign consisting of S and a number beside the arrow represents a step number. In this example, a description will be given of a method in which a plurality of execution environment division control means dynamically adjust resources between execution environments based on information given from a system or infrastructure software.

Step 1 (S1): The execution environment division control means 200C1 receives information from the system or the base software.

Step 2 (S2): The execution environment division control unit 200C1 requests the execution environment division control unit 200Ct included in the semiconductor integrated circuit 100Ct to adjust the resource based on the information.

Step 3 (S3): The execution environment division control means 200Ct requests resource adjustment to the execution environment in its integrated circuit based on the notification.

Step 4 (S4): The execution environment division control means 200Ct receives a response from the execution environment that requested the resource adjustment.

Step 5 (S5): The execution environment division control unit 200Ct changes the setting of the filter device 1010Ct based on the information.

Step 6 (S6): The execution environment division control unit 200Ct returns a response to the execution environment division control unit 200C1 regarding the completion of the resource adjustment.

Step 7 (S7): Upon receiving a response from the execution environment division control unit 200Ct, the execution environment division control unit 200C1 sets the filter device 1010C1 based on the current information.

Step 8 (S8): The execution environment division control means 200C1 notifies the system or the base software that the resource adjustment is completed. Here, when there is no response from the base software, the system side may be notified, or the entire semiconductor integrated circuit may be reset. The setting may be forcibly changed. This makes it possible to control the base software with high reliability.

FIG. 13 is a diagram showing an overall configuration of an information processing apparatus according to still another embodiment of the present invention. Referring to FIG. 13, a configuration of distributed memories 31C1 to Ct and I / O 41C1 to Ct in a plurality of semiconductor integrated circuits 100C1 to Ct is shown. The semiconductor integrated circuit 100C1 includes an execution environment division control unit 200C1 and an interconnection network 1000C1 including a filter device 1010C1. Further, the semiconductor integrated circuit 100Ct includes an execution environment division control unit 200Ct and an interconnection network 1000Ct including a filter device 1010Ct. That is, an information processing apparatus including a plurality of semiconductor integrated circuits provided with a distributed memory / I / O is assumed.

FIG. 14 is a diagram for explaining an example of the operation of the information processing apparatus of FIG. In FIG. 14, a symbol consisting of S and a number beside the arrow represents a step number. In this example, a description will be given of a method in which a plurality of execution environment division control means dynamically exchanges an OS between execution environments based on information given from a system or base software.

Step 2 (S2): The execution environment division control unit 200C1 notifies the execution environment division control unit 200Ct included in the semiconductor integrated circuit 100Ct of information necessary for executing the OS based on the information.

Step 3 (S3): Based on the notification, the execution environment division control unit 200Ct changes the setting of the filter device 1010Ct so that the free space in the memory 31Ct can be written from the execution environment division control unit 200C1. To do. The execution environment division control unit 200C1 is not permitted to write to other areas.

Step 4 (S4): The execution environment division control unit 200Ct returns a response to the execution environment division control unit 200C1 regarding the free area of the memory 31Ct.

Step 5 (S5): The execution environment division control unit 200C1 obtains information necessary for OS execution.
Copy from the memory 31C1 to the designated area of the memory 31Ct.

Step 6 (S6): The execution environment division control unit 200C1 notifies the execution environment division control unit 200Ct included in the semiconductor integrated circuit 100Ct that transfer of information necessary for execution of the OS is completed.

Step 7 (S7): The execution environment division control means 200Ct requests the execution environment to execute the OS.

Step 8 (S8): The execution environment division control means 200Ct obtains an OS execution response from the execution environment.

Step 9 (S9): The execution environment division control unit 200Ct changes the setting of the filter device 1010Ct based on the information.

Step 10 (S10): The execution environment division control unit 200Ct returns a response to the execution environment division control unit 200C1 regarding the completion of OS execution.

Step 11 (S11): The execution environment division control unit 200C1 sets the filter device 1010C1 based on the current information.

Step 12 (S12): The execution environment division control unit 200C1 notifies the system or the base software that the exchange of the OS is completed. Here, regarding the copy of the memory, it is possible to make it appear that the movement is completed instantaneously from the application by repeating the incremental copy.

In each of the above-described embodiments, the information processing apparatus and method capable of operating a plurality of pieces of base software have been described as examples. However, the present embodiment is not limited to such an information processing apparatus and method, and any information Applicable to processing apparatus and method.

Although the present invention has been described with reference to the above embodiments, the present invention is not limited to the configurations and operations of the above embodiments, and can be made by those skilled in the art within the scope of the present invention. Of course, it includes various possible variations and modifications.
The disclosures of

Patent Documents

1 and 2 are incorporated herein by reference. Within the scope of the entire disclosure (including claims) of the present invention, the embodiments and examples can be changed and adjusted based on the basic technical concept. Various combinations and selections of various disclosed elements are possible within the scope of the claims of the present invention. That is, the present invention of course includes various variations and modifications that could be made by those skilled in the art according to the entire disclosure including the claims and the technical idea.

Claims

A plurality of arithmetic circuits;
A plurality of platform software respectively executed by the plurality of arithmetic circuits;
An interconnection network having filter means for restricting access from the arithmetic circuit and performing separation control between the arithmetic circuits;
An arithmetic circuit different from the arithmetic circuit that respectively executes the plurality of base software;
Execution environment division control means executed by the another arithmetic circuit;
With
One execution environment division control means is provided for a plurality of the base software, and changes the access restriction setting of the filter means of the interconnection network.
The execution environment division control means has a higher reliability than the reliability of the base software, and changes the setting of access restriction of the filter means of the interconnection network in cooperation with the base software. The semiconductor integrated circuit according to claim 1.
3. The semiconductor integrated circuit according to claim 1, wherein the plurality of base software have the same or equivalent reliability.
4. The semiconductor integrated device according to claim 1, wherein the execution environment division control unit delivers information on a resource that can be used by the base software when the plurality of base software is started. 5. circuit.
5. The semiconductor integrated circuit according to claim 1, wherein the filter unit restricts access to an area other than an area allocated to the base software.
The execution environment division control means activates the plurality of arithmetic circuits,
Each of the plurality of arithmetic circuits starts corresponding base software,
The semiconductor integrated circuit according to claim 1, wherein the execution environment division control unit provides information about the allocated area to the base software.
7. The semiconductor integrated circuit according to claim 6, wherein the base software virtualizes resources for an OS (operating system) to be executed based on information from the execution environment division control unit and starts the OS. .
When access to the filter unit is issued from a virtual environment including the arithmetic circuit, the base software, the OS, and an application, the filter unit determines whether the access is permitted,
If the access is permitted, issue access via the interconnection network;
8. The semiconductor integrated circuit according to claim 7, wherein when the access is not permitted, an access error is notified to the issuing arithmetic circuit via the interconnection network.
The execution environment division control means notifies the base software based on predetermined information of the system,
The base software updates information held in the base software based on the notification, and returns an update result to the execution environment division control unit,
The execution environment division control unit sets the filter unit,
8. The semiconductor integrated circuit according to claim 7, wherein the execution environment division control unit notifies the base software that the setting of the filter unit is completed.
The execution environment division control means, when receiving predetermined information from one base software, requests other base software to adjust resources based on the information,
The other infrastructure software adjusts resources based on the request and returns the result to the execution environment partitioning control unit,
8. The execution environment division control unit sets the filter unit based on the received information, and notifies the one base software that the setting of the filter unit is completed. The semiconductor integrated circuit as described.
An information processing apparatus comprising the plurality of semiconductor integrated circuits according to any one of claims 1 to 10, wherein the plurality of semiconductor integrated circuits share a memory and an input / output device.
When the execution environment division control unit of one of the semiconductor integrated circuits receives information from a system or base software, the execution environment division control unit executes the execution environment division control of another semiconductor integrated circuit based on the information. Ask the means to adjust the resources,
The execution environment division control means of the other semiconductor integrated circuit requests resource adjustment to the execution environment in the semiconductor integrated circuit based on the request,
Upon receiving a response from the execution environment that requested the resource adjustment, the execution environment division control unit of the other semiconductor integrated circuit changes the setting of the filter unit based on the information, and the other of the semiconductor integrated circuits The execution environment division control means responds to the execution environment division control means of the one semiconductor integrated circuit with respect to completion of resource adjustment,
Upon receiving the response, the execution environment division control unit of the one semiconductor integrated circuit sets the filter unit of the one semiconductor integrated circuit based on the information, and the resource adjustment to the system or the base software is completed. The information processing apparatus according to claim 11, wherein the information processing apparatus is notified.
An information processing apparatus comprising the plurality of semiconductor integrated circuits according to claim 1, wherein each of the semiconductor integrated circuits includes a memory and an input / output device.
When the execution environment division control unit of one of the semiconductor integrated circuits receives information from the system or the base software, the execution environment division control unit of another semiconductor integrated circuit executes an OS (operating system) based on the information. To inform you of the necessary information,
Based on the notification, the execution environment division control unit of the other semiconductor integrated circuit can write from the execution environment division control unit of the one semiconductor integrated circuit with respect to an empty area of the memory of the other semiconductor integrated circuit. So that the setting of the filter means of the other semiconductor integrated circuit is changed,
The execution environment division control unit of the other semiconductor integrated circuit responds to the execution environment division control unit of the one semiconductor integrated circuit with respect to an empty area of the memory of the other semiconductor integrated circuit,
The execution environment division control unit of the one semiconductor integrated circuit copies information necessary for execution of the OS from the memory of the one semiconductor integrated circuit to a specified area of the memory of the other semiconductor integrated circuit. ,
The execution environment division control unit of the one semiconductor integrated circuit notifies the execution environment division control unit of the other semiconductor integrated circuit of completion of transfer of information necessary for execution of the OS, and the execution environment of the other semiconductor integrated circuit The division control means requests the execution environment to execute the OS,
When an OS execution response is obtained from the execution environment, the execution environment division control unit of the other semiconductor integrated circuit changes the setting of the filter device of the other semiconductor integrated circuit based on the information, and the other semiconductor integrated circuit Replying to the execution environment division control means of the one semiconductor integrated circuit about completion of execution of the OS of the integrated circuit;
The execution environment division control unit of the one semiconductor integrated circuit sets the filter unit of the one semiconductor integrated circuit, and notifies the system or the base software that the exchange of the OS is completed. Item 14. The information processing apparatus according to Item 13.
A plurality of arithmetic circuits;
A plurality of platform software respectively executed by the plurality of arithmetic circuits;
An interconnection network having filter means for restricting access from the arithmetic circuit and performing separation control between the arithmetic circuits;
A method for controlling an information processing apparatus comprising:
The execution environment division control means is executed by an arithmetic circuit different from the arithmetic circuit for executing the plurality of basic software,
The execution environment division control means includes:
One is arranged for a plurality of the above-mentioned base software,
A method for controlling an information processing apparatus, comprising: changing an access restriction setting of the filter unit of the interconnection network.
The execution environment division control means has a higher reliability than the reliability of the base software, and changes the access restriction setting of the filter means of the interconnection network in cooperation with the base software. The method for controlling an information processing apparatus according to claim 15, wherein:
17. The information processing apparatus control method according to claim 15 or 16, wherein the plurality of infrastructure software have the same or equivalent reliability.
The information processing apparatus according to any one of claims 15 to 17, wherein the execution environment partitioning control unit passes information on resources that can be used by the base software when the plurality of base software is started. Control method of the device.
The information processing apparatus control method according to any one of claims 15 to 18, wherein the filter unit restricts access to an area other than an area allocated to the base software.
The execution environment division control means activates a plurality of arithmetic circuits,
Each of the plurality of arithmetic circuits starts corresponding base software,
The information processing apparatus control method according to any one of claims 15 to 19, wherein the execution environment division control unit provides information about the allocated area to the base software.
21. The information according to claim 20, wherein the base software virtualizes resources for an OS (operating system) to be executed based on information from the execution environment division control unit, and starts the OS. A method for controlling a processing apparatus.
When access is issued from the virtual environment including the arithmetic circuit, the base software, the OS, and the application to the filter unit, the filter unit determines whether the access is permitted,
If the access is permitted, issue access via the interconnection network;
The method according to claim 21, wherein when the access is not permitted, an access error is notified to the issuing arithmetic circuit via the interconnection network.
The execution environment division control unit notifies the base software based on predetermined information of the system, the base software updates information held in the base software based on the notification, Reply to the execution environment division control means,
The execution environment division control unit sets the filter unit,
The method according to claim 21, wherein the execution environment division control unit notifies the base software that the setting of the filter unit is completed.
The execution environment division control means, when receiving predetermined information from one base software, requests other base software to adjust resources based on the information,
The other infrastructure software adjusts resources based on the request, and returns the result to the execution environment partitioning control unit.
The execution environment division control unit sets the filter unit based on the received information, and notifies the one base software that the setting of the filter unit is completed. A control method of the information processing apparatus described.
When the execution environment division control unit of one of the semiconductor integrated circuits receives information from a system or base software, the execution environment division control unit executes the execution environment division control of another semiconductor integrated circuit based on the information. Ask the means to adjust the resources,
The execution environment division control unit of the other semiconductor integrated circuit requests resource adjustment to the execution environment in the semiconductor integrated circuit based on the request,
When the response is received from the execution environment that requested the resource adjustment, the execution environment division control unit of the other semiconductor integrated circuit changes the setting of the filter unit based on the information, and the other of the semiconductor integrated circuits The execution environment division control means responds to completion of resource adjustment to the execution environment division control means of the one semiconductor integrated circuit,
Upon receiving the response, the execution environment division control unit of the one semiconductor integrated circuit sets the filter unit of the one semiconductor integrated circuit based on the information, and the resource adjustment to the system or the base software is completed. The information processing apparatus control method according to any one of claims 15 to 24, wherein the information is notified.
When the execution environment division control unit of one of the semiconductor integrated circuits receives information from the system or the base software, the execution environment division control unit of another semiconductor integrated circuit executes an OS (operating system) based on the information. To inform you of the necessary information,
Based on the notification, the execution environment division control unit of the other semiconductor integrated circuit can write from the execution environment division control unit of the one semiconductor integrated circuit with respect to an empty area of the memory of the other semiconductor integrated circuit. So that the setting of the filter means of the other semiconductor integrated circuit is changed,
The execution environment division control unit of the other semiconductor integrated circuit responds to the execution environment division control unit of the one semiconductor integrated circuit with respect to an empty area of the memory of the other semiconductor integrated circuit,
The execution environment division control unit of the one semiconductor integrated circuit copies information necessary for execution of the OS from the memory of the one semiconductor integrated circuit to a specified area of the memory of the other semiconductor integrated circuit. ,
The execution environment division control unit of the one semiconductor integrated circuit notifies the execution environment division control unit of the other semiconductor integrated circuit of completion of transfer of information necessary for execution of the OS, and the execution environment of the other semiconductor integrated circuit The division control means requests the execution environment to execute the OS,
When an OS execution response is obtained from the execution environment, the execution environment division control unit of the other semiconductor integrated circuit changes the setting of the filter device of the other semiconductor integrated circuit based on the information, and the other semiconductor integrated circuit Replying to the execution environment division control means of the one semiconductor integrated circuit about completion of execution of the OS of the integrated circuit;
The execution environment division control unit of the one semiconductor integrated circuit sets the filter unit of the one semiconductor integrated circuit, and notifies the system or the base software that the exchange of the OS is completed. Item 25. The method for controlling the information processing apparatus according to any one of Items 15 to 24.
A plurality of arithmetic circuits;
A plurality of platform software executed by the plurality of arithmetic circuits and having the same reliability;
An interconnection network having filter means for restricting access from the arithmetic circuit and performing separation control between the arithmetic circuits;
In an information processing apparatus comprising:
A program for executing an execution environment division control process for changing an access restriction setting of the filter means of the interconnection network in an arithmetic circuit different from an arithmetic circuit that respectively executes the plurality of base software.
The execution environment division control process has a higher reliability than the reliability of the base software, and changes the setting of access restriction of the filter means of the interconnection network in cooperation with the base software. 28. A program according to claim 27, characterized in that:
Arithmetic device capable of program operation,
Infrastructure software that is executed on the computing device and manages the computing device;
Operating and applications executed on the platform software;
With multiple sets of execution environments with
An interconnection network interconnecting the computing devices of the plurality of execution environments;
A filter that performs separation control of the arithmetic devices of the plurality of execution environments is provided in the interconnection network in common with the plurality of execution environments,
A computing device provided separately from the computing devices of the plurality of execution environments, further comprising a computing device connected to the interconnection network,
The filter is an information processing apparatus in which an access environment setting can be freely changed by an execution environment division control unit that is executed by the other arithmetic device.