Secure and Dynamic Hardware Partitioning Management on Heterogeneous SoC
summary
Hardware-assisted dynamic partitioning framework that modifies Linux, trusted firmware and TEE kernels to reconfigure peripheral and memory assignments at runtime using sphere partitioning module, multiple RDC/xRDC domains (typically 8–16 domain IDs), and backend drivers for xrdc/trdc/MPU. Device-tree overlays trigger RPCs and shared-memory updates to move a crypto accelerator or DMA into a different domain; secure debug uses a dedicated debug domain. Prototype on iMX-like SoC works with low overhead; OpenOCD and cross-domain sync remain pain points.
AI-written summary · about
chapters (12)
- 0:00Intro
- 0:22Heterogeneous SoC architectures
- 2:08Azure Sphere-enabled heterogeneous SoCs
- 3:51Problem overview
- 5:53Progress in hardware partitioning features
- 7:36RDC overview
- 12:04TEE/enclave overview
- 15:14Sphere HW-partitioning framework
- 17:26Linux side
- 21:42TEE side
- 23:14Error handling and secure debugging
- 27:25Summary and future work
related talks
21mScaling Data Analytics Via Confidential Computing on RISC-V
36mStatic Partitioning with Xen, LinuxRT, & Zephyr: A Concrete End-to-end Example
31mIntel Trust Domain Extensions
19mSupporting Trusted Virtual Machines with Hardware-based Secure Remote Memory
23mMind the gaps why we need new, truly open, multi domain heterogeneous solutions
42mDisplay Sharing in Heterogeneous Systems Using Linux as High...
39mTrusted Firmware M, Secure Partitioning – Compartmentalization in IoT- 42mDisplay Sharing in Heterogeneous Systems Using Linux as High...