Secure paging with page change detection

A secure, non-secure technology used in the computer field to prevent direct access

Pending Publication Date: 2021-10-22
IBM CORP
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

Additionally, customers may expect security from the provider's administrators as well as protection from potential security breaches from other code running on the machine

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Secure paging with page change detection
  • Secure paging with page change detection
  • Secure paging with page change detection

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0037]One or more embodiments of the invention perform encryption of memory pages using counters that modify the encryption process based on whether changes to the underlying data are detected. Secure storage can be managed to ensure that data pages within the secure domain are inaccessible to non-secure entities. When data in a secure domain is transferred to a non-secure domain (eg, for storage to disk), the data may be encrypted before being transferred to the non-secure domain. To enhance security, when encrypting a data page, multiple items can be combined into the initialization vector, such as a counter value that is incremented when a data change is detected. Therefore, if the data page remains unchanged, said encryption will match other previous copies of the encrypted data, thus preserving the existing paging algorithm. However, if the underlying data has changed, the per-encryption value of the per-encryption counter can be modified and used as part of the encrypti...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

According to one or more embodiments of the present invention, a computer implemented method includes computing a hash value of a page of memory of a computer system and comparing the hash value with a previously computed hash value of the page. A per-encryption value per page can be used in encrypting the page based on determining that the hash value matches the previously computed hash value. A modified value of the per-encryption value per page can be used in encrypting the page based on determining that the hash value mismatches the previously computed hash value.

Description

Background technique [0001] The present invention relates generally to computer technology, and more particularly to secure paging with page change detection. [0002] Cloud computing and cloud storage provide users with the ability to store and process their data in third-party data centers. Cloud computing facilitates the ability to quickly and easily provision VMs to clients without requiring clients to purchase hardware or provide floor space for physical servers. The guest can easily scale up or down the VM according to the changing preferences or requirements of the guest. Typically, cloud computing providers offer VMs that physically reside on servers at the provider's data centers. Clients are often concerned about the security of data in VMs, especially since computing providers often store data for more than one client on the same server. Clients may expect security between their own code / data and the cloud provider's code / data, and between their own code / data and...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
IPC IPC(8): G06F12/00
CPCH04L9/0894H04L9/3239G06F9/45558G06F2009/45587G06F21/78G06F12/1408G06F2212/1052G06F12/145G06F12/1425G06F2212/151H04L9/0643H04L9/3236
InventorJ·布拉德伯里C·博恩特雷格H·卡斯滕斯M·施维德夫斯基R·宾德根
OwnerIBM CORP