Virtualized address space isolation system and method

Abstract

The invention discloses a virtualized address space isolation system. The system comprises a Dom0 virtual machine, a DomU virtual machine, a virtual machine monitor, an access authority management module and an address space; the Dom0 virtual machine is used for creating the DomU virtual machine and setting the physical address space which can be accessed by the DomU virtual machine through the virtual machine monitor; the virtual machine monitor is used for managing resources and trapping and simulating privilege sensitive designation; and the access permission management module performs permission check on the access request of the DomU virtual machine to complete isolation of physical address access between DomUs. The invention further provides a virtualization address space isolation method, hardware isolation of the physical addresses of the virtual machines can be achieved without using SMMU, the complexity of software design is reduced, meanwhile, the chip area is reduced, the memory access delay is prolonged, and the memory access performance of the system is improved.

Description

technical field [0001] Embodiments of the present invention relate to the technical field of computer operating systems and virtualization, and in particular to a system and method for realizing virtualization address space isolation. Background technique [0002] Vehicle-mounted systems usually include vehicle-mounted LCD instrumentation systems and entertainment navigation systems. With the improvement of integrated circuit technology, vehicle-mounted LCD instrumentation systems and entertainment navigation systems tend to be integrated. Multiple software systems with different functions will run on a single chip. To achieve a higher security level and reduce the interference between different systems, software systems need to run in different virtual machines. For virtual machines, there is an address space isolation requirement: OS address spaces running on virtual machines are isolated from each other and cannot be accessed by each other. [0003] In the prior art, in ...

AI Technical Summary

Problems solved by technology

[0005] The above-mentioned virtual address space isolation system, in order to complete the physical isolation, the hardware capable of DDR / register interrogation in each virtual machine (generally called DDR master) needs to be configured with secondary page table mapping (each master needs to be configured by HYPERVISOR Controlled secondary page table mapping), when performing DDR access, if the translation from virtual address to physical address is not cached (Page Table look-up miss), it will greatly increase the delay of accessing memory (two-level page table mapping requires More page table entry queries), and because the introduction of SMMU greatly increases the complexity from chip design to software design, increases the chip area, and also has a great impact on system memory access performance

Images