Semiconductor device including a content firewall unit that has a secure function

1. A semiconductor device, comprising:

a first processing unit configured to perform a calculation by using data stored in a memory; and

a memory path controller configured to communicate with the first processing unit and control the memory for the first processing unit to perform the calculation,

wherein the memory path controller includes:

an address region control unit configured to divide an address space of the memory to include a secure address and a non-secure address and permit the first processing unit to access the secure address or the non-secure address, and

a first content firewall unit connected with the address region control unit and configured to prevent the first processing unit from writing secure contents in the non-secure address when a command to write the secure contents to the non-secure address is received from the first processing unit, and prevent the first processing unit from reading secure contents written in the non-secure address,

wherein the first content firewall unit transmits an error message to the first processing unit in response to receiving the command to write the secure contents to the non-secure address from the first processing unit,

wherein the error message indicates that the non-secure address is not present,

wherein the semiconductor device further includes an encryption unit configured to write the secure contents stored in the secure address in the non-secure address, and the memory path controller further includes:

a second content firewall unit connected with the encryption unit and configured to permit the encrypted secure contents to be written in the non-secure address; and

an intermediate connection unit configured to connect the first and second content firewall units and the address region control unit to each other, arrange outputs of the first and second content firewall units and provide the outputs to the address region control unit.

2. The semiconductor device of claim 1 , wherein the first content firewall unit receives information from the address region control unit, the information indicating whether an address of the memory in which the first processing unit intends to write the secure contents is the secure address or the non-secure address.

3. The semiconductor device of claim 1 , further comprising:

a memory management unit configured to convert a virtual address used by the first processing unit into a physical address.

4. The semiconductor device of claim 3 , wherein the memory management unit is connected between the first processing unit and the first content firewall unit, and converts a command based on the virtual address received from the first processing unit into a command based on the physical address and provides the converted command to the first content firewall unit.

5. The semiconductor device of claim 1 , wherein the encryption unit provides a write command to the second content firewall unit by encrypting the secure contents when the encryption unit intends to write the secure contents stored in the secure address in the non-secure address.

6. The semiconductor device of claim 1 , wherein the address region control unit, the first and second content firewall units, and the encryption unit use a physical address.

7. The semiconductor device of claim 1 , wherein the address region control unit permits the encryption unit to access the secure address or the non-secure address.

8. The semiconductor device of claim 1 , further comprising:

a second processing unit; and

a third content firewall unit connected with the address region control unit and configured to prevent the second processing unit from writing the secure contents in the non-secure address of the memory.

9. The semiconductor device of claim 8 , wherein the first processing unit includes a graphic processing unit (GPU) and the second processing unit includes a central processing unit (CPU).

10. The semiconductor device of claim 8 , wherein the first processing unit includes a video codec.

11. A semiconductor device, comprising:

a processing unit configured to perform a calculation by using data stored in a memory;

an encryption unit configured to encrypt data stored in the memory; and

a memory path controller configured to communicate with the processing unit and the encryption unit and control the memory for the processing unit and the encryption unit to perform the calculation,

wherein the memory path controller includes:

an address region control unit configured to divide an address space of the memory to include a secure address and a non-secure address and permit the processing unit and the encryption unit to access the secure address or the non-secure address, and

a first content firewall unit connected with the address region control unit, and configured to prevent the processing unit from writing secure contents in the non-secure address when a first command to write the secure contents to the non-secure address is received from the processing unit, and prevent the processing unit from reading secure contents written in the non-secure address, and permit the encryption unit to write encrypted secure contents in the non-secure address,

wherein the first content firewall unit transmits an error message to the processing unit in response to receiving the first command to write the secure contents in the non-secure address from the processing unit,

wherein the error message indicates that the non-secure address is not present,

wherein the memory path controller further includes:

an intermediate connection unit connected between the first content firewall unit and the address region control unit, and configured to arrange outputs of the first content firewall unit and provide the outputs to the address region control unit.

12. The semiconductor device of claim 11 , wherein in response to receiving a second command to write the encrypted secure contents in the non-secure address from the encryption unit, the content firewall unit provides the second command to the address region control unit.

13. The semiconductor device of claim 11 , further comprising:

a memory management unit configured to convert a virtual address used by the processing unit into a physical address.

14. A semiconductor device, comprising:

a processing unit configured to perform an operation on a memory;

an address region control unit configured to assign addresses of the memory as a secure address or a non-secure address; and

a first content firewall unit configured to prevent the processing unit from writing secure contents in the non-secure address of the memory when a command to write the secure contents to the non-secure address is received from the processing unit, and prevent the processing unit from reading secure contents written in the non-secure address,

wherein the first content firewall unit transmits an error message to the first processing unit in response to receiving the command to write the secure contents to the non-secure address from the processing unit,

wherein the error message indicates that the non-secure address is not present,

wherein the semiconductor device further includes:

an encryption unit configured to write the secure contents stored in the secure address in the non-secure address;

a second content firewall unit connected with the encryption unit and configured to permit the encrypted secure contents to be written in the non-secure address; and

an intermediate connection unit configured to connect the first and second content firewall units and the address region control unit to each other, arrange outputs of the first and second content firewall units and provide the outputs to the address region control unit.

15. The semiconductor device of claim 14 , wherein the secure contents include video data.