Memory isolation method, isolation check circuit and CPU chip

Abstract

The invention relates to a memory isolation method which comprises the following steps: receiving a memory access request which comprises an access address of a memory page requested to be accessed; searching a table entry corresponding to the access address in a memory paging protection information table, wherein the index value of the table entry corresponding to the access address is determinedaccording to the access address; and performing isolation check on the memory access request based on the access address and the table entry, and when the isolation check succeeds, allowing the memory page to be accessed by the access request. The memory isolation method at least has one of the following technical effects: the address space is divided into the memory pages equal in size in a paging mode, the number of the memory pages can meet the requirement for the number of security virtual machines or security applications of the virtual machines, the index value of the lookup table itemis determined according to the access address in the access request, and the lookup rate of the table item can be remarkably increased.

Description

technical field [0001] The present disclosure relates to the technical field of virtual machine security, and in particular, to a memory isolation method, an isolation check circuit and a CPU chip. Background technique [0002] Virtual machine technology refers to the technology of simulating a complete computer system with complete hardware system functions and running in a completely isolated environment in a set of computer equipment. When creating a virtual machine in a computer, part of the memory capacity of the physical machine needs to be used as the memory capacity of the virtual machine, and the security of the virtual machine's memory operation directly determines the security of the virtual machine's operation. Existing virtualization technologies can implement encryption of the physical memory of a virtual machine manager (Hypervisor) and the physical memory of each virtual machine (Virtual Machine) using different keys. The key can only be managed by a special...

AI Technical Summary

Problems solved by technology

However, the above method has the following disadvantages: memory encryption and decryption will reduce the performance of the system accessing memory; it cannot completely prevent the virtual machine manager from accessing the encrypted memory of the virtual machine; memory access cannot be isolated between different applications of the same virtual machine

Images