A runtime access control device and method

Abstract

The invention discloses a device and method for access control during operation, which relate to information technology, especially information security technology. The device includes a safety device and a guarantee device, and the safety device performs access control on a memory area based on hardware; The security device is based on hardware to ensure that the control state data that makes the security device valid and the specific instruction that makes the security device valid can be set only in a specific state; the security device provides a legal way to cross memory area boundaries, including executing special When a cross-area transfer instruction or an interrupt / exception occurs, it must first be transferred to the transfer area, and then the code in this area performs a boundary switch and transfers to the final target address; especially, if the two are transferred to the common code in the same transfer area Location, the hardware provides identification information to distinguish whether the transfer is caused by the execution of a cross-region transfer instruction or the generation of an interrupt / exception; interrupt return will also cause a cross-region transfer.

Description

technical field [0001] The present application relates to the field of information technology, in particular to a runtime isolation method, a runtime access control method and a computing device. Background technique [0002] In the prior art, especially in the existing operating system and processor architecture technology, the design of memory and its use is more concerned with compactness, convenience, and high efficiency. Such a design makes the codes of each function intricately Interconnected, the data has hardly any encapsulation, or only limited encapsulation during the syntax compilation phase of the high-level language, while at runtime it can be accessed virtually at will without any checks. [0003] Specifically, checking the grammar can only ensure that the source code does not contain illegal access that is not allowed by the grammar, but at runtime, the attacker may use some means to change the execution sequence of the program or the data access object, thus ...

AI Technical Summary

Problems solved by technology

[0012] In order to solve the problem that the original intention of the design of the existing system architecture does not consider security systematically, the present invention discloses a security device. On the basis of design, the security problem is solved systematically. At the same time, preferably, a security device is disclosed. To ensure that even in the attack state, the security device can remain effective