Patent ID: 8560863

Claim:
An apparatus comprising: a system-on-a-chip device comprising: a shared embedded on-chip bus; one or more functional units connected to said shared embedded on-chip bus; and a security controller to configure authorized ones of the one or more functional units to define one or more secure datapaths on the on-chip bus extending among the authorized ones of the one or more of the functional units, and to communicate among the authorized ones of said one or more functional units through the one or more secure datapaths by: encrypting clear data to create encrypted data at one of the authorized functional units, sending the encrypted data out from the one of the authorized functional units through a secure datapath of the one or more secure datapaths defined on the on-chip bus, receiving the encrypted data in from a secure datapath of the one or more secure datapaths defined on the on-chip bus at another of the authorized functional units, and decrypting the encrypted data at the other of the authorized functional units to recover the clear data.