Implementation method of cross-domain network terminal virtual machine based on separation of three powers

Abstract

The invention belongs to the technical field of operating systems, and particularly relates to an implementation method of a cross-domain network terminal virtual machine based on separation of threepowers. Compared with the prior art, when an operating system structure is designed, a three-power separation principle in a political system is used for reference, namely, strategy making, strategy implementation and user program execution are separated and run on three different virtual machines respectively. The independence among the parts is ensured by utilizing the strong isolation characteristic among the virtual machines, and the cooperation and restriction among the parts are realized by utilizing a specially designed communication mechanism among the virtual machines. Management, I / Oexecution and user operation of an operating system are distributed to different virtual machines for operation on the basis of a security base with three independent rights, the problem that a traditional operating system is too high in rights and is a manager of computer resources and a user of the computer resources at present is solved, and the congenital security problem of a computer is solved from the aspect of a computer system structure.

Description

technical field [0001] The invention belongs to the technical field of operating systems, and in particular relates to a method for realizing a cross-domain network terminal virtual machine based on the separation of three rights. Background technique [0002] In the traditional operating system structure, policy formulation, policy implementation, system management, device management, user program execution, etc. are all mixed together, all of which are in charge of the functional components of the operating system. Since these components cannot be completely isolated, the problem of one component will quickly spread to other components, so the security and reliability of traditional operating systems are not high. In addition, in a traditional computer system, the operating system is the first layer of software running on the hardware. It has the highest privilege and is responsible for fully managing all resources of the computer system, including the processor, memory, e...

AI Technical Summary

Problems solved by technology

[0007] (2) The members interact with each other, and the isolation is not complete

Obviously, in the existing operating system structure, it is difficult to establish independent operating entities

[0009] (3) Third-party code needs to be introduced, and the kernel is poorly closed

[0011] (4) Application programs need to be installed, and the environment is poorly sealed

Executing untrustworthy programs can easily destroy the integrity of the system, introduce viruses, Trojan horses and other malicious programs into the system, causing system failure, information leakage and other hazards

Therefore, the non-closed nature of the environment is another major cause of poor system security and reliability.

Images