METHOD AND SYSTEM FOR TRUSTED/UNTRUSTED DIGITAL SIGNAL PROCESSOR DEBUGGING OPERATIONS

FIELD

[0001] The disclosed subject matter relates to data processing systems and processes such as may find use in data communications and similar applications. More particularly, this disclosure relates to a novel and improved method and system for permitting and controlling trusted and untrusted digital signal processor debugging operations.

DESCRIPTION OF THE RELATED ART

[0002] Increasingly, telecommunications and other types of electronic equipment and supporting video, complex audio, videoconferencing and other rich software applications involve signal processing. Signal processing requires fast mathematical calculations and data generation in complex, but repetitive algorithms. Many applications require computations in real-time, i.e., the signal is a continuous function of time, which must be sampled and converted to digital signals for numerical processing. The processor must execute algorithms performing discrete computations on the samples as they arrive.

[0003] The architecture of a digital signal processor (DSP) is optimized to handle such algorithms. The characteristics of a good signal processing engine include fast, flexible arithmetic computation units, unconstrained data flow to and from the computation units, extended precision and dynamic range in the computation units, dual address generators, efficient program sequencing, and ease of programming. [0004 ] One promising application of DSP technology includes communications systems such as a code division multiple access (CDMA) system that supports voice and data communications, as well as text messaging and other applications, between users over a satellite or terrestrial link. The use of CDMA techniques in a multiple access communication system is disclosed in U.S. Pat. No. 4,901,307, entitled "SPREAD SPECTRUM MULTIPLE ACCESS COMMUNICATION SYSTEM USING SATELLITE OR TERRESTRIAL REPEATERS," and U.S. Pat. No. 5,103,459 entitled "SYSTEM AND METHOD FOR GENERATING WAVEFORMS IN A

CDMA CELLULAR TELEHANDSET SYSTEM," both assigned to the assignee of the claimed subject matter.

[0005] A CDMA system is typically designed to conform to one or more standards. One such first generation standard is the "TIA/EIA/IS-95 Terminal-Base Station Compatibility Standard for Dual-Mode Wideband Spread Spectrum Cellular System," hereinafter referred to as the IS-95 standard. The IS-95 CDMA systems are able to transmit voice data and packet data. A newer generation standard that may more efficiently transmit packet data is offered by a consortium named the "3 ^rd Generation Partnership Project" (3 GPP) and embodied in a set of documents including Document Nos. 3G TS 25.211, 3G TS 25.212, 3G TS 25.213, and 3G TS 25.214, which are readily available to the public. The 3GPP standard is hereinafter referred to as the W-CDMA Standard.

[0006] Complex DSP operational software employing the W-DCMA Standard, for example, requires robust development tools. Such development tools may include those for code generation, integration, testing, debugging, and evaluating application performance. In developing and operating software or complex DSP applications, such as advanced telecommunications applications, there is the need for sophisticated, yet non-intrusive debugging software. That is, debugging software applications must be not only sufficiently robust to monitor, test, and support the correction of software defects and operational problems, but also they may operate so as not to interfere with the core processor software during debugging operations. Otherwise, any problems in the core processing software may not be detected or detected properly during the use of such debugging software.

[0007 ] Such non-intrusive debugging operations may include performing trusted and untrusted debugging operations and the ability to perform instruction stuffing operations. Trusted users include software developers at the kernel and application level, while untrusted users may include OEMs, third party developers, end users, and others who may intentionally or unintentionally (yet inappropriately) affect essential operations of the DSP operating system and other essential programs. In a programmable core, the operating system is the manager of security concerns and understands which resources, registers, memory locations, devices, and services are allowed for various users. Accordingly, a process for determining a user to be either a

trusted or untrusted user may coordinate tightly with the determination that the operating system may make in addressing different security needs. [0008] There is a need, therefore, for a debugging process and system for operation with a DSP, which debugging process and system provides the ability to determine a user to be a trusted or an untrusted user.

[0009] A need exists for a non-intrusive software debugging process capable of selectably operating in either a trusted or an untrusted mode for permitting various types of configuration and breakpoint determinations and permissions. [0010] Yet a further need exists for a debugging system capable of operating with trusted and untrusted users, which system makes use of the security management functions of a DSP core processor operating system.

SUMMARY

[0011] Techniques for providing non-intrusive, thread-selective, debugging method and system for a digital signal processor, including a multi-threaded digital signal processor, are disclosed, which techniques permit selectably operating in trusted or untrusted debugging modes. The method and system here disclosed improve both the operation of a digital signal processor and the efficient use of digital signal processor instructions for increasingly powerful software applications, including applications operating in personal computers, personal digital assistants, wireless handsets, and similar electronic devices, as well as increasing the associated digital processor speed and service quality.

[ 0012 ] According to one aspect of the disclosed subject matter, a method and system for controlling between trusted and untrusted debugging operational modes includes the processes, circuitry, and instructions for operating a core processor process within a core processor associated with the digital signal processor. The method and system further operate a debugging process within a debugging mechanism of the digital signal processor, which debugging mechanism associates with the core processor. The core processor process determines the origin of debugging control as trusted debugging control or untrusted debugging control. In the event that debugging control is trusted debugging control, the core processor process provides to the trusted debugging control a first set of features and privileges. Alternatively, in the event that

debugging control is untrusted debugging control, the core processor process provides the untrusted debugging control a second restricted set of features and privileges. As such, the disclosed software debugging method and system maintain security in the operation of the core processor process according to the determination of the debugging control as untrusted debugging control or untrusted debugging control. [0013] These and other advantages of the disclosed subject matter, as well as additional novel features, will be apparent from the description provided herein. The intent of this summary is not to be a comprehensive description of the claimed subject matter, but rather to provide a short overview of some of the subject matter's functionality. Other systems, methods, features and advantages here provided will become apparent to one with skill in the art upon examination of the following FIGURES and detailed description. It is intended that all such additional systems, methods, features and advantages be included within this description, be within the scope of the accompanying claims. BRIEF DESCRIPTIONS OF THE DRAWINGS

[ 0014 ] The features, nature, and advantages of the disclosed subject matter may become more apparent from the detailed description set forth below when taken in conjunction with the drawings in which like reference characters identify correspondingly throughout and wherein:

[0015] FIGURE 1 is a simplified block diagram of a communications system that may implement one of the various embodiments here disclosed; [0016] FIGURE 2 illustrates a DSP architecture for carrying forth the teachings of the present disclosure;

[0017 ] FIGURE 3 provides an architecture block diagram of one embodiment of a multi-threaded digital signal processor incorporating the technical advantages of the presently disclosed subject matter;

[0018] FIGURE 4 discloses certain aspects of a digital signal processor core applying the ISDB/JTAG interface features of the present disclosure; [0019] FIGURE 5 presents a process flow diagram applicable to the operating modes of the digital signal processor, including the debugging mode of operation to which the present disclosure pertains;

[ 0020 ] FIGURE 6 depicts a breakpoint processing scheme applicable to one embodiment of the present disclosure;

[0021] FIGURE 7 shows an aspect of an ISDB JTAGSync circuit for performing the trusted/untrusted debugging procedures here disclosed; and [0022] FIGURE 8 illustrates one way of forming a digital signal processor system configuration register for providing the trusted/untrusted debugging operations herein described; and

[0023] FIGURE 9 is a table of ISDB control registers for the various ISDB functions herein described together with trusted/untrusted and core access supervisor access modes.

DETAILED DESCRIPTION OF THE SPECIFIC EMBODIMENTS [0024 ] The disclosed subj ect matter for a non-intrusive, thread-selective, debugging method and system for a multi-threaded digital signal processor has application for multi-threaded processing of any type for which the benefits here presented may be advantageous. One such application appears in telecommunications and, in particular, in wireless handsets that employ one or more digital signal processing circuits. For explaining how such a wireless handset may be used, FIGURE 1 provides a simplified block diagram of a communications system 10 that may implement the presented embodiments of the disclosed interrupt processing method and system. At a transmitter unit 12, data is sent, typically in blocks, from a data source 14 to a transmit (TX) data processor 16 that formats, codes, and processes the data to generate one or more analog signals. The analog signals are then provided to a transmitter (TMTR) 18 that modulates, filters, amplifies, and up converts the baseband signals to generate a modulated signal. The modulated signal is then transmitted via an antenna 20 to one or more receiver units.

[0025] At a receiver unit 22, the transmitted signal is received by an antenna 24 and provided to a receiver (RCVR) 26. Within receiver 26, the received signal is amplified, filtered, down converted, demodulated, and digitized to generate in phase (I) and (Q) samples. The samples are then decoded and processed by a receive (RX) data processor 28 to recover the transmitted data. The decoding and processing at receiver unit 22 are performed in a manner complementary to the coding and processing performed at transmitter unit 12. The recovered data is then provided to a data sink 30.

[0026] The signal processing described above supports transmissions of voice, video, packet data, messaging, and other types of communication in one direction. A bidirectional communications system supports two-way data transmission. However, the signal processing for the other direction is not shown in FIGURE 1 for simplicity. Communications system 10 may be a code division multiple access (CDMA) system, a time division multiple access (TDMA) communications system (e.g., a GSM system), a frequency division multiple access (FDMA) communications system, or other multiple access communications system that supports voice and data communication between users over a terrestrial link. In a specific embodiment, communications system 10 is a CDMA system that conforms to the W-CDMA Standard.

[0027 ] FIGURE 2 illustrates DSP 40 architecture that may serve as the transmit data processor 16 and receive data processor 28 of FIGURE 1. We emphasize that DSP 40 only represents one embodiment among a great many of possible digital signal processor embodiments that may effectively use the teachings and concepts here presented. In DSP 40, therefore, threads T0:T5 (reference numerals 42 through 52), contain sets of instructions from different threads. Circuit 54 represents the instruction access mechanism and is used for fetching instructions for threads T0:T5. Instructions for circuit 54 are queued into instruction queue 56. Instructions in instruction queue 56 are ready to be issued into processor pipeline 66 (see below). From instruction queue 56, a single thread, e.g., thread TO, may be selected by issue logic circuit 58. Register file 60 of a selected thread is read and read data is sent to execution data paths 62 for SLOTO :SLOT3. SLOTO :SLOT3, in this example, provide for the packet grouping combination employed in the present embodiment.

[ 0028 ] Output from execution data paths 62 goes to register file write circuit 64, also configured to accommodate individual threads T0:T5, for returning the results from the operations of DSP 40. Thus, the data path from circuit 54 and before to register file write circuit 64 forms a processing pipeline 66. The present embodiment may employ a hybrid of a heterogeneous element processor (HEP) system using a single processor with up to six threads, T0:T5. Processor pipeline 66 has six stages, which matches the minimum number of processor cycles necessary to fetch a data item from circuit 54 to registers 60 and 64. DSP 40 concurrently executes instructions of different threads T0:T5 within a processor pipeline 66. That is, DSP 40 provides six independent

program counters, an internal tagging mechanism to distinguish instructions of threads T0:T5 within processor pipeline 66, and a mechanism that triggers a thread switch. Thread-switch overhead varies from zero to only a few cycles.

[0029] DSP 40, therefore, provides a general-purpose digital signal processor designed for high-performance and low-power across a wide variety of signal, image, and video processing applications. FIGURE 3 provides a brief overview of the DSP 40 architecture, including some aspects of the associated instruction set architecture for one manifestation of the disclosed subject matter. Implementations of the DSP 40 architecture support interleaved multithreading (IMT). In this execution model, the hardware supports concurrent execution of multiple hardware threads T0:T5 by interleaving instructions from different threads in the pipeline. This feature allows DSP 40 to include an aggressive clock frequency while still maintaining high core and memory utilization. IMT provides high throughput without the need for expensive compensation mechanisms such as out-of-order execution, extensive forwarding networks, and so on. Moreover, the DSP 40 may include variations of IMT, such as those variations and novel approaches disclosed in the commonly-assigned U.S. Patent Applications by M. Ahmed, et al, and entitled "Variable Interleaved Multithreaded Processor Method and System " and "Method and System for Variable Thread Allocation and Switchins in a Multithreaded Processor. "

[ 0030 ] FIGURE 3, in particular, provides a core processing architecture 70 block diagram for DSP 40 as applied to a single thread that may employ the teachings of the disclosed subject matter. Block diagram 70 depicts shared instruction cache 72 which receives instructions via Bus interface (I/F) 73 from AXI Bus 74, which instructions include mixed 16-bit and 32-bit instructions. These instructions reach to sequencer 76, user control register 78, and supervisor control register 80 of threads T0:T5. The core-level system architecture of the disclosed subject matter also includes in-silicon debugging system(ISDB) 82, which interfaces core processor 70 via JTAG interface 84, both of which are described in more detail below.

[0031] Sequencer 76 provides hybrid two-way superscalar instructions and four- way VLIW instructions to S-Pipe unit 86, M-Pipe unit 88, LD[Load]-Pipe 90, and LD/ST[Store]-Pipe unit 92, all of which communicate with general registers 94. AXI Bus 74 also communicates via Bus I/F 73 with shared data cache 96 LD/ST instructions

to threads T0:T5. Optional L2 Cache/TCM 98 signals include LD/ST instructions with shared data TCM 100, which LD/ST instructions further flow to threads General Registers 94. From AHB peripheral bus 102 MSM specific controller 104 communicates interrupts with T0:T5, including interrupt controller instructions, debugging instructions, and timing instructions. Global control registers 106 communicates control register instructions with threads T0:T5.

[0032] DSP 40, therefore, includes six virtual DSP cores, each containing global control registers 106 and private supervisor control registers 80. Global control registers 106 are shared between all threads. Each thread shares a common data cache and a common instruction cache. Load, store, and fetch operations are serviced by a common bus interface. High performance AXI bus 74 and a lower performance AHB bus 102 are used to connect the data and instruction traffic to off-core memory and peripherals. An integrated level two memory (cache and/or TCM) input 98 is optional. Peripheral access may be through memory-mapped loads and stores. The physical address partition between AHB and AXI may be configured at the MSM level.

[0033] Clearly, the presented architecture for DSP 40 may evolve and change over time. For example, the number of instruction caches that DSP 40 may use could change from six to one, or other numbers of caches. Superscalar dispatch, Ll data at TCM 100, and other architectural aspects may change. However, the present subject matter may have continued relevance in a wide variety of configurations and for a large family of modifications of DSP 40.

[ 0034 ] ISDB 82, through JTAG interface 84, provides a hardware debugger for

DSP 40. ISDB 82 provides software debug features through JTAG interface 84 by sharing system or supervisor-only registers, that are divided into supervisor control registers 80 on a per thread basis, as well as global control registers 106 between all threads. The system control registers are used for per thread interrupt and exception control and per thread memory management activities. Global registers allow interacting with the ISDB 82 for debugging operations.

[0035] ISDB 82 enables software developers to debug their software while DSP

40 operates. ISDB 82 hardware, in combination with a software debugger program operating in ISDB 82, may be used to debug the DSP 40 operating system software. ISDB 82 supports debugging hardware threads individually. Users may suspend thread

execution, view and alter thread registers, view and alter instruction and data memory, single step threads, stuff instructions to threads, and resume thread execution. Trusted users have access to all of ISDB 82 features, while untrusted users have access to a subset of features.

[0036] ISDB 82 may interface with a debugger interface card to communicate with ISDB 82 debugging software residing on a program counter, yet all through JTAG interface 84. Host debugger software may interact with the ISDB 82 by reading and writing ISDB control registers. Communication, for example, may be through a 40-bit packet which identifies the ISDB register to which read/write is to occur, as well as a 32-bit data payload. A packet format supporting this operation may be up to 64 control registers which may be 32 bits wide each.

[ 0037 ] ISDB 82 includes a trusted register for controlling security during a debugging operation. If the ISDB 82 trusted is set, then all ISDB 82 registers are visible to the debugger software, and all ISDB commands are available for use. In the case that ISDB trusted is cleared, then ISDB 82 only permits a restricted set of operations. These aspects of the present disclosure appear in more detail below.

[ 0038 ] Certain ISDB 82 registers may be made visible to core software. These are accessible via SUPERVISOR mode control register transfer instructions. The core instructions include a breakpoint instruction. When ISDB trusted is set, this instruction causes the executing thread to enter a debugging operational mode. This transition shifts thread control to ISDB 82. In addition to the thread that executed a breakpoint, other threads may optionally enter DEBUG mode 150 according to ISDB 82 programming. If ISDB 82 is not trusted or not enabled, this instruction is treated as a NOP. Preferably, the breakpoint instruction is the only instruction in a packet. [0039] FIGURE 4 shows important aspects of ISDB/JT AG interface 110 between the debugging mechanism and the core processor of the disclosed subject matter. In association with DSP 40 core architecture 70, ISDB 82 communicates with JTAG 84 via path JTAG interface path 112, from ISDB JTAG circuit 114. ISDB JTAG circuit 114 processes data flows between JTAG 84 and ISDB 82. ISDB JTAG circuit 114 further interfaces ISDB JTAGSync circuit 116. ISDB JTAGSync circuit 116 communicates further with ISDB controller 118, instruction unit (IU) 150 and control unit (CU) 122. Particularly, ISDB JTAGSync circuit 116 interfaces IU ISDB logic

circuit of IU 150 and CU ISDB Controller 126 of CU 122. CU ISDB controller 126 communicates with CU ISDB logic circuit 128, as well as ISDB controller 118. Control outputs from ISDB controller 118 include ISDB data output 130, ISDB reset signal 132, and ISDB interrupt 134. Further interfaces to ISDB controller 118 include MCD interface 136 and ETM break trigger 138.

[0040] Having listed the various components of ISDB 82 what follow are a brief operational description and introduction to the constituent parts of the control or logic circuitry for performing non-intrusive trusted and untrusted debugging operations of DSP 40. ISDB controller 118 handles a variety of tasks, including (a) implementing various ISDB registers; (b) synchronizing the MCD external break and resume triggers and the ETM break trigger to DSP 40 before they are forwarded to CU 122 for further processing; (c) generating MCD break and resume triggers based on debug mode status of core; and (d) adding a pipeline stage for signals sent out to DSP 40 sub-system, such as ISDB interrupt, break event etc.

[0041] CU 122 includes circuitry and instructions capable of handling the tasks such as (a) processing breakpoints and generating break triggers to each thread; (b) generating micro-break and micro-resume commands; (c) maintaining ISDB 82 status and mailbox registers; and (d) implementing the certain ISDB 82 registers. CU 122 includes a breakpoint processing logic (BPL) block as appears in FIGURE 6 for processing all the breakpoints and generating a macro break request to a micro- command generator of CU ISDB controller 126. The micro-command generator processes the macro break request along with instruction stuff commands, instruction step and resume commands and issues micro-break and resume commands to CU 122 for pipeline control.

[0042] CU ISDB controller 128 maintains the state of ISDB 82 based on the break and resume acknowledge signals received back. The mailbox functions of CU ISDB controller 126 maintain mailbox registers used for communication between the host debug software and the DSP 40 core processor. These mailbox functions also contain ISDB 82 status registers.

[0043] FIGURE 5 presents a processing mode diagram 140 for the various mode control aspects of DSP 40, including operations of ISDB 82 during debugging processes. In FIGURE 5, DSP 40 supports processing modes that are both global to all

threads and local to individual threads. Each DSP 40 hardware thread individually supports two execution modes, USER mode 142 and SUPERVISOR mode 144, and three non-processing modes of WAIT mode 146, OFF mode 148, and DEBUG mode 150, all as may appear in FIGURE 5. The mode of a thread is independent of other threads, for example one thread may be in WAIT mode 146 while another is in USER mode 142, and so on.

[0044 ] The per-thread mode state diagram of FIGURE 5 is supported by various instructions or events. These include "Except" or internal exception event, an "Int" or external interrupt event, an "RTE" or software return instruction from exception mode, and "SSR" or update to SSR register instruction, a "Stop" or software stop instruction that may be entered from any mode, a "Start" or software Start Instruction that also may be entered from any mode, a "trap" or software Trap Instruction, a "Wait" or software wait Instruction, a "Resume" or software Resume Instruction, a "DE" or Debug Event, and a "DR" or Debug Instruction. While the functions in different implementations of the claimed subject matter may vary slightly from those here presented, the meanings of "Start," "Wait," "Resume," "DE," and/or "DR" may be given their broadest interpretations consistent with the scope of the claimed subject matter.

[0045] Registers are available in DSP 40 in both USER mode 142 and

SUPERVISOR mode 144. The user-mode registers are divided into a set of general registers and a set of control registers. General registers are used for all general purpose computation including address generation, scalar and vector arithmetic. Control registers support special-purpose functionality such as hardware loops, predicates, etc. General purpose registers are 32 bits wide and may be accessed as single registers or as aligned pairs of two registers. The general register file provides all operands for instructions, including addresses for load/store, data operands for numeric instructions, and vector operands for vector instructions.

[0046] DEBUG mode 150 provides a special state where the thread is waiting for commands from ISDB 82. Whenever an ISDB Debug Event occurs, such as by the execution of a software breakpoint instruction, a break command from ISDB 82, or occurrence of a hardware breakpoint, indicated threads may enter DEBUG mode 150. While in DEBUG mode 150, the core is controlled by ISDB 82 via commands from

JTAG interface 84. When the ISDB 82 releases the thread due to execution of a resume command, the thread may resume operation according to their current mode settings. When a thread is in DEBUG mode 150, it is controlled by ISDB 82 and cannot be controlled by other threads. A Wait, Resume, Start, or Stop instruction from a running thread, targeting a thread in DEBUG mode 150, may be ignored. Similarly, a Non- Maskable Interrupt (NMI) may be ignored by threads in DEBUG mode 150. [0047 ] A HARDWARE RESET mode (not shown in FIGURE 5) and DEBUG mode 150 are global to all threads. Whenever the hardware reset pin is asserted, regardless of any thread's processing state, DSP 40 may enter HARDWARE RESET Mode. In HARDWARE RESET mode, all registers are set to their reset values. No processing may occur until the hardware reset pin is de-asserted. When the reset pin is asserted, the processor may transition into reset mode and all registers may be reset to their HARDWARE RESET values. After the reset pin is de-asserted, thread TO may be given a soft reset interrupt. This may cause thread TO to enter SUPERVISOR mode 144 and begin executing at the reset vector location. All other threads may remain off. At this point, the software is free to control mode transitions for each thread individually. [0048] In FIGURE 6, it is seen that BPL circuit 160 of CU ISDB controller 126

(FIGURE 4) includes break triggers from six different sources, including hardware breakpoints 0/1 (HWBKPTO 162 and HWBKPTl 164), software breakpoint (SWBKPT 166), JTAG 84 breakpoint (JTAGBKPT 168), ETM (embedded trace macro) breakpoint (ETMBKPT 170), and external breakpoint (EXTBKPT 172). Break trigger 162 through 172 and debug mode status input 174 go to encode break encoder 176 to cause DSP 40 to operate in DEBUG mode 150. Output from encoder 176 includes three (3) breakpoint information bits 178 and a breakpoint valid bit 180. Breakpoint information data 178 enters breakpoint information circuit 182 to cause a breakpoint information JTAG interface command 184. Breakpoint bit 180 also generates OR gate input 186 and reset circuit 188 input. Reset circuit 188 receives either a UCG resume thread number or a reset input 192 to generate reset control output 194 into OR gate 196. Either valid bit 186 or reset output 194 may cause OR gate 196 to generate BPL 160 breakpoint output 198.

[0049] The break triggers in BPL circuit 160 are processed along with the corresponding TNUM mask to generate macro break trigger to each of the threads. The

macro break trigger 198, bpl_breakTnum_ANY[O], is maintained until the corresponding thread is resumed. The number of pipeline stages that can be used in BPL 160 is driven by hardware breakpoints which are precise breakpoints, i.e., the instruction that triggers hardware breakpoint match must not be executed. The thread switches to debug mode after executing the program until that instruction. The disclosed embodiment provides a macro break trigger one cycle after the break triggers arrive. For that reason the breakValid input 176 is logically OR'ed with its latched version input 192 to generate bpl_breakTnum_ANY[O] output 198.

[0050] Through the use of breakpoints, the six threads of DSP 40 may individually enter and exit DEBUG mode 150. A breakpoint trigger may come from five sources which correspond to the five different types of breakpoints supported in ISDB 82. Upon hitting a breakpoint, a thread transitions from its current mode (e.g., WAIT/RUN) to DEBUG mode 150. In DEBUG mode 150, the thread waits for commands from ISDB 82. A thread in OFF mode 148 is powered down and may not accept any commands from ISDB 82. The latency of entering DEBUG mode 150 is implementation defined, such as in the present disclosure as relating to the event a power collapse. For example, an implementation may choose to complete a given operation, for example finish an outstanding load request, before entering DEBUG mode 150. In one embodiment, a thread identifier register contains an 8-bit read/write field and is used for holding a software thread identifier. This field is used by the hardware debugger to match breakpoints.

[ 0051 ] There are a number of different ways to enter a breakpoint process. For example, for HWBKPTl 162 and HWBKPT2 164 breakpoints, if a register equals a predetermined value, then when the program counter (PC) matches the predetermined value, then the process goes into the DEBUG mode 150. ASIDs (Address Space Identifiers) are tags similar to process IDs in a process or a particular thread in a multithreaded process. So, physical address, virtual address, ASID, PC, or other qualifiers may be used to optionally obtain a fix of the location of the program in a space at which point a breakpoint may occur. The uses of breakpoints here referenced are more particularly disclosed in the commonly-assigned U.S. Patent Applications by L. Codrescu, et al, and entitled NON-INTRUSIVE, THREAD-SELECTIVE, DEBUGGING METHOD AND SYSTEM FOR A MULTI-THREADED DIGITAL

SIGNAL PROCESSOR. The disclosed subject matter provides a path for moving into a DEBUG mode 150 in the event of a breakpoint such as those of FIGURE 6. The disclosed subject matter controls which thread or sets of threads in the DSP 40 go into the DEBUG mode 150.

[ 0052 ] The presently disclosed method and system for performing trusted and untrusted debugging operations provide various levels of security that may be applied during both internally and externally controlled debugging operations. Because debugging operations potentially expose critical DSP 40 software to the source of the debugging actions, there is the need to know and control who may perform debugging operations. For trusted debugging operations, complete access to the software and its operation is possible. For necessary untrusted operations, e.g., from a not-fully-trusted third party, only limited access to the software and, perhaps, memory and registers is possible.

[0053] In general, ISDB 82 users may be classified as trusted and untrusted users. Trusted users may include known software developers, e.g., those creating kernel and application level programs, while untrusted users may include OEMs, third party developers, end users, etc. In DSP 40, the operating system for core processor 70 is the manager of security concerns and understands which resources, registers, memory locations, devices, and services are allowed for various users. The DSP 40 operating system allows untrusted users to debug their applications according to the value of a supervisor-only core control (ISDB TRUSTED) bit that only the operating system may set. If the ISDB use is trusted, all features and privileges are allowed. The ISDB can perform any instruction in supervisor mode.

[ 0054 ] To demonstrate illustrative circuitry for performing the presently disclosed trusted and untrusted debugging operations, FIGURE 7 includes ISDB JTAGSync circuit 200. ISDB JTAGSync circuit 200 includes an ISDB test data register 202 which DSP 40 may use to read and write the ISDB control registers. ISDB JTAGSync circuit 200 provides the synchronization logic between the ISDB test data register 202 operating on DB tck and the ISDB control registers 204 operating in the DSP 40 clock domain. By reading and writing the ISDB control registers, DSP 40 performs various debug tasks supported by the ISDB 82.

[0055] In the implementation of FIGURE 7, ISDB JTAGSync circuit 200 receives JTAG isdb chain in signal 206 into ISDB Test Data Register 204 to generate JTAG isdb chain out signal 208. ISDB Test Data Register 202 includes read/write (RAV) bits 210, Address bits [6:0] 212, and Data bits [31 :0] 214. Values in R/W bits 210 go to AND gate 216, as do Sync circuit 216 output and CU trustedDebug input 220. JTAG isdb chain update tkl signal 222 and ISDB CLK signal 224 control the operation of Sync circuit 218. Address information from Address bits 212 may be received by Address Decode circuit 220, which feeds ISDB Registers 204. ISDB Registers 204 transfers data with Data bits [31 :0] in response to a write enable signal 228 from AND gate 216.

[0056] FIGURE 8 illustrates one way of forming a digital signal processor system configuration register for providing the trusted/untrusted debugging operations herein described. Specifically, system configuration or SYSCFG register 230 includes reserved bits 232 in conjunction with ISDB core ready bit 234, interrupts bit 236, ISDB trusted bit 238, Dcache bit 240, Icache bit 242, and MMU bit 244. Although there may be numerous forms of a SYSCFG register 230, ISDB trusted bit 238 is relevant for the present disclosure. In operation, ISDB 82 communicates with the test environment, such as a debugger interface card communicating with debugging software through JTAG interface 84. The host debugger software interacts with ISDB 82 by reading and writing ISDB control registers 234 through 238.

[0057 ] Communication through a SYSCFG register 230 as a 40-bit packet identifies the ISDB register to read/write and a 32-bit data payload. This packet format supports up to 64 control registers which can be 32 bits wide each. The valid bit of a particular register indicates the data portion to be valid or not. On a control register read or write, JTAG interface 84 returns an invalid value if the core is powered off, in the process of powering up/down, if access is not currently permitted to the specified register, or if the specified register is reserved.

[ 0058 ] SYSCFG register 230 is a supervisor only control register. Interacting with ISDB 82, ISDB core ready bits 234 indicate whether core processor 70 of DSP 40 is ready to interact with the host debugger. All JTAG register reads and writes may return an invalid status until the ISDB core ready bit 234 is set (i.e., has a value 1).

[0059] ISDB trusted bit 238 controls security such that if ISDB trusted bit 238 is set (i.e., has value 1), then all ISDB registers are visible to the debugger software, and all ISDB commands are available for use. In the case that ISDB TRUSTED is cleared (i.e., value 0), then ISDB only permits a restricted set of operations. Only the core processor 70 operation system may set ISDB trusted bit 238.

[0060] FIGURE 9 provides table 250, which lists the ISDB control registers that the present implementation may access by the debugger host software via JTAG interface 84. ISDB 82 operates such that debug commands are sent to a debug monitor program that works together with the core processor 70 operating system to debug applications while having full understanding of security issues. For example, in untrusted mode, ISDB 82 allows the debugger host software to (a) read the value of the ISDB mailbox status bits in ISDBST; (b) read/write mailbox (ISDBMBXIN and ISDBMBXOUT) registers; (c) write the ISDBCMD command register, but only the interrupt command; and (d) access the ISDB Enable and ISDB Version registers. All other ISDB 82 registers, bits, and commands are not accessible.

[0061] As an example of how the present implementation may might work, consider how a breakpoint could be set. The host debugger software puts a command in the mailbox "set breakpoint". The host debugger software would then raise the debugger interrupt. Then, the core processor 70 operating system may take the interrupt, sees the command, and acknowledges it with a response in the outgoing mailbox. The host debugger software then may proceed to give more information such as PC, and thread name. These bits of information are received and acknowledged via the mailbox/interrupt mechanism. The core processor 70 operating system, once it verifies that the user is allowed to set this breakpoint, may set a software TRAP at the desired point. Once the breakpoint is hit, it may trap to the core processor 70 operating system, whereby the core processor 70 operating system can send a mailbox message to ISDB that the breakpoint was hit.

In summary, the disclosed subject matter provides a method and system for controlling debugging operations for trusted and untrusted user and includes steps, circuitry, and instructions for operating a core processor process within core processor 70 and a debugging process 150 within a debugging mechanism of the digital signal processor, the debugging mechanism associated with the core processor. Core processor

70 determines the origin of debugging control as trusted debugging control or untrusted debugging control. In the event that debugging control is trusted debugging control, the trusted debugging control is provided a first set of features and privileges. Alternatively, in the event that debugging control is untrusted debugging control, the untrusted debugging control is provided a second restricted set of features and privileges. Accordingly, the present disclosure maintains security in the operating of the core processor process according to the determination of the debugging control as untrusted debugging control or untrusted debugging control.

[0062] The processing features and functions described herein for trusted and untrusted non-intrusive, thread-selective, debugging in a multi-threaded digital signal processor may be implemented in various manners. For example, not only may DSP 40 perform the above-described operations, but also the present embodiments may be implemented in an application specific integrated circuit (ASIC), a microcontroller, a digital signal processor, or other electronic circuits designed to perform the functions described herein. Moreover, the process and features here described may be stored in magnetic, optical, or other recording media for reading and execution by such various signal and instruction processing systems. The foregoing description of the preferred embodiments, therefore, is provided to enable any person skilled in the art to make or use the claimed subject matter. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without the use of the innovative faculty. Thus, the claimed subject matter is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.