Hardware accelerators are increasingly employed in conjunction with general-purpose processors to meet stringent performance constraints. In these heterogeneous systems, security has become a prime concern. In this article, we present a design approach to generate platform-independent secure multiprocessor systems-on-chip (MPSoC) from a high-level abstraction. The aim of this article is to simplify the implementation of MPSoC, while ensuring security. The proposed design flow starts with a set of abstract and concrete specifications of a system, provided by the user, and ends up generating a generic description of the appropriate hardware design by setting up the communication structure of different components. The resulting abstract architecture is further processed using the vendor tool-chain to generate the target platform’s configuration. To enforce security, we proposed a distributed isolation framework for multilevel security, resource assess control including access to and from hardware accelerators. From a user specification, the security layer is transparently generated and security rules and requirements transparently enforced at run-time. Experimentation results show that our proposed tool can generate MPSoC designs capable of providing secure hardware execution with negligible execution overhead.

中文翻译：

---

MeXT-SE：透明生成安全 MPSoC 的设计工具

硬件加速器越来越多地与通用处理器结合使用，以满足严格的性能限制。在这些异构系​​统中，安全性已成为首要问题。在本文中，我们提出了一种从高级抽象生成独立于平台的安全多处理器片上系统 (MPSoC) 的设计方法。本文旨在简化 MPSoC 的实现，同时确保安全性。建议的设计流程从用户提供的一组抽象和具体的系统规范开始，最后通过设置不同组件的通信结构生成适当硬件设计的通用描述。使用供应商工具链进一步处理生成的抽象架构，以生成目标平台的配置。为了加强安全，我们提出了一个分布式隔离框架，用于多级安全、资源评估控制，包括对硬件加速器的访问。根据用户规范，在运行时透明地生成安全层并透明地实施安全规则和要求。实验结果表明，我们提出的工具可以生成 MPSoC 设计，该设计能够以可忽略的执行开销提供安全的硬件执行。