A safety isolation apparatus, comprising a request detection module and a selection module and a comparison module, wherein the request detection module is configured to receive an access request from an access device, wherein the access request carries operation information of the access device and safety level-related information of the access device, the safety level-related information of the access device indicates a safety level of the access device, and the operation information indicates an operation of the access device, and wherein the access request further comprises safety level-related information of to-be-accessed data, and the safety level-related information of the to-be-accessed data indicates a safety level of the to-be-accessed data; the safety isolation apparatus is configured to determine whether an operation of the access device is a write operation or a read for ownership, RFO, operation; the comparison module is configured to determine whether the safety level of the access device meets a safety isolation condition, wherein that the safety level of the access device meets the safety isolation condition comprises: the safety level of the access device is lower than the safety level of the to-be-accessed data; and the selection module is configured to isolate the access request if the operation of the access device is the write operation or the read for ownership RFO operation, and the safety level of the access device meets the safety isolation condition, isolate the access request, and wherein to isolate the access request means that the access device is not allowed to access to-be-accessed data associated with the access request. the request detection module is configured to receive an access request from an access device, wherein the access request carries operation information of the access device and safety level-related information of the access device, the safety level-related information of the access device indicates a safety level of the access device, and the operation information indicates an operation of the access device, and wherein the access request further comprises safety level-related information of to-be-accessed data, and the safety level-related information of the to-be-accessed data indicates a safety level of the to-be-accessed data; the safety isolation apparatus is configured to determine whether an operation of the access device is a write operation or a read for ownership, RFO, operation; the comparison module is configured to determine whether the safety level of the access device meets a safety isolation condition, wherein that the safety level of the access device meets the safety isolation condition comprises: the safety level of the access device is lower than the safety level of the to-be-accessed data; and the selection module is configured to isolate the access request if the operation of the access device is the write operation or the read for ownership RFO operation, and the safety level of the access device meets the safety isolation condition, isolate the access request, and wherein to isolate the access request means that the access device is not allowed to access to-be-accessed data associated with the access request.