DMA access method and device, electronic equipment, storage medium and program product

By setting a security filter register in the DMA request, the scope of memory access for untrusted requests is restricted based on device identity information, thus solving the security problem of malware accessing memory via DMA and achieving higher memory access security.

CN121996591APending Publication Date: 2026-05-08LOONGSON TECH CORP
0 Cites 0 Cited by

Patent Information

Application Number
CN202511989801.X
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-12-25
Publication Date
2026-05-08

AI Technical Summary

Technical Problem

Malware can indirectly gain access to arbitrary memory by configuring the target address of DMA, leading to security issues.

Method used

Set a security filter register, match the target security filter register with the identity information of the device that issued the DMA request, and restrict untrusted DMA requests to access non-secure memory ranges to prevent them from accessing memory that needs protection.

Benefits of technology

It improves the security of memory access, prevents untrusted DMA requests from accessing the safe memory range, and avoids potential security risks.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention provides a DMA access method and device, electronic equipment, a storage medium and a program product, and relates to the technical field of computers. The method comprises the following steps: receiving a DMA request; under the condition that the DMA request is an untrusted DMA request, matching a target security filtering register according to the identity information; if the security attribute of the preset memory is non-secure, only allowing the access of the untrusted DMA request of which the target address is within the preset memory range to the preset memory, and remapping the untrusted DMA request to the non-secure memory range for the untrusted DMA request of which the target address is not within the preset memory range; the security attribute of the preset memory is secure, only the access of the untrusted DMA request of which the target address is not in the preset memory range is allowed, and the DMA request is remapped to the non-secure memory range for the untrusted DMA request of which the target address is in the preset memory range. According to the invention, the security of memory access is improved.
Need to check novelty before this filing date? Find Prior Art