A multi-domain isolation operating system communication state dynamic storage method

Abstract

The application relates to a multi-domain isolation operating system communication state dynamic storage method, which divides a partition in a multi-domain isolation operating system into a control partition and multiple normal partitions, and the control partition information connects all the normal partitions; each normal partition comprises a communication state strategy database and multiple communication channels, a communication channel state data block is allocated to each communication channel according to the state of each communication channel; the communication state strategy database stores the communication channel state data block of each communication channel in the normal partition; the control partition comprises a communication security strategy module and a multi-domain communication strategy database, the communication security strategy module is responsible for the realization of the communication security strategy among the normal partitions; the multi-domain communication strategy database realizes data synchronization work with all the communication state strategy databases through multi-domain communication data blocks. The method ensures the global communication channel state data synchronization, thereby providing basic security data support for the subsequent developers.

Description

TECHNICAL FIELD

[0001] The application relates to the technical field of communication state, and particularly relates to a dynamic storage method for communication state of a multi-domain isolated operating system. BACKGROUND

[0002] Data transmission using a communication channel is one of main means for communication between partitions of a multi-domain isolated operating system. At present, there are a series of specific implementations of the communication channel between partitions of the multi-domain isolated operating system, but there is no specific state data storage mechanism for the current communication channel between partitions.

[0003] Since the communication state between partitions is one of important indexes for measuring the safety standard of the multi-domain isolated operating system, it is necessary to collect, store and analyze the state data of the communication channel between partitions, so that the safety adjustment scheme required by the multi-domain isolated operating system in operation can be displayed to a certain extent. SUMMARY

[0004] The application needs to solve the technical problem of providing a dynamic storage method for communication state of a multi-domain isolated operating system, which is used for collecting the state data of the communication channel of the current partition.

[0005] In order to solve the above problems, the technical scheme adopted by the application is as follows:

[0006] The dynamic storage method for communication state of the multi-domain isolated operating system comprises the following steps: according to the architecture of the multi-domain isolated operating system, the partitions in the multi-domain isolated operating system are divided into a control partition and a plurality of normal partitions, the control partition information is connected to all the normal partitions;

[0007] Each normal partition comprises a communication state strategy database and a plurality of communication channels, and each communication channel is allocated a communication channel state data block according to the state of each communication channel; the communication state strategy database stores the communication channel state data block of each communication channel in the normal partition, so as to collect all the data of all the communication channels in the normal partition;

[0008] The control partition comprises a communication security strategy module and a multi-domain communication strategy database, the communication security strategy module is responsible for the implementation of the communication security strategy between the normal partitions, and the multi-domain communication strategy database is provided with a multi-domain communication data block, and the multi-domain communication strategy database realizes data synchronization work with all the communication state strategy databases through the multi-domain communication data block.

[0009] Further, the communication channel state comprises a loading state, a running state, a termination state, a reloading state and a fault state.

[0010] Further, the running state comprises an initial communication channel running state and a reloading communication channel running state, and the termination state comprises a normal termination state and an abnormal termination state.

[0011] Further, the communication channel status data block comprises:

[0012] a source partition identifier, i.e. the identification of the normal partition initiating the communication;

[0013] a target partition identifier, i.e. the identification of the normal partition receiving the communication;

[0014] a communication channel identifier, i.e. the identification of the communication channel;

[0015] a communication channel status symbol, comprising a status identifier and a fault identifier, as shown in Table 1, for recording the current status of the communication channel;

[0016]

[0017] Table 1: Communication channel status symbol.

[0018] Further, the multi-domain communication data block comprises a total partition identifier and a communication channel status record data block, and the multi-domain communication data block is used to connect the total partition identifier and the communication channel status data block in the corresponding normal partition, wherein:

[0019] the total partition identifier is used to record and correspond to the information of the source partition identifier and the target partition identifier in each normal partition;

[0020] the communication channel status record data block is used to record the information in the corresponding communication channel status data block.

[0021] By adopting the above technical scheme, the present application has the following beneficial effects:

[0022] The present application designs a communication channel status data storage format for collecting the status data of the communication channel in the current partition under the multi-domain isolation operating system architecture, as shown in Table 2, which represents the storage form, and is equivalent to designing a storage requirement for the subsequent research and use of the stored data. Figure 2

[0023] The present application also designs a partition communication status dynamic synchronization mechanism under the multi-domain isolation operating system architecture. By defining the communication channel status, each channel can be allocated a communication channel status data block, and a communication status strategy database is established in each partition to store all the communication channel status data blocks in the current partition, so as to collect all the data of the communication channel in the current partition. According to the multi-domain isolation operating system architecture, a multi-domain communication strategy database is set in the control partition, and a data synchronization mechanism between the communication status strategy database and the multi-domain communication strategy database is designed.

[0024] ​The application realizes a mechanism of dynamically storing communication channel data, ensures synchronization of global communication channel state data, and thus provides basic security data support for later developers. All data stored in the application is data generated in the operation of a multi-domain isolation operating system. Through subsequent data auditing and data analysis, relevant security policy design can be performed. For example, the communication running state of each partition (stored in the communication channel state data block) is calculated from each partition, and the verification of the control partition (using the multi-domain communication strategy database) can sort the communication running state of each partition in the current system, demonstrate the security of the system from the perspective of system internal communication, and design and adjust relevant security policies for the system. BRIEF DESCRIPTION OF DRAWINGS

[0025] Figure 1 Figure for the partition communication state synchronization mechanism of the multi-domain isolation operating system of the application;

[0026] Figure 2 Storage structure diagram of the partition communication synchronization mechanism of the application. DETAILED DESCRIPTION

[0027] The application will be further described in detail below in combination with embodiments.

[0028] The application discloses a multi-domain isolation operating system communication state dynamic storage method, which first introduces communication channel state definition.

[0029] The communication channel state in the multi-domain isolation operating system is defined, and the communication channel is divided into five states: loading state, running state, termination state, reloading state, and fault state.

[0030] 1) Loading state: the communication channel is being created, and is currently waiting for the separation kernel to perform resource regulation and detect whether the communication channel meets the communication security policy set by the current multi-domain isolation operating system.

[0031] 2) Running state: the communication channel has started the communication state, the sender and the receiver can perform data transmission, and the creation of the communication channel meets the communication security policy set by the current multi-domain isolation operating system. The running state includes an initial communication channel running state and a reloading communication channel running state.

[0032] 3) Termination state: the communication channel is closed, and this state is divided into two state branches, representing abnormal termination and normal termination of the communication channel.

[0033] 4) Reloading state: when the communication channel fails, if the channel needs to be restarted, the state enters this state, waits for the separation kernel to re-perform resource allocation, communication security policy detection, and a series of operations.

[0034] 5) Fault state: when the communication channel operation appears failure, the communication channel will enter the fault state, waiting for subsequent instructions for the communication channel, such as closing the communication channel, reloading the communication channel.

[0035] After introducing the communication channel state, the idea of the present application is shown as Figure 1 、 Figure 2 .

[0036] A multi-domain isolation operating system communication state dynamic storage method, according to the multi-domain isolation operating system architecture, the partitions in the multi-domain isolation operating system are divided into a control partition and a plurality of ordinary partitions, such as Figure 1 , the control partition information connects all ordinary partitions. Among them, the control partition is responsible for the implementation of the communication security policy between each ordinary partition and the implementation of the multi-domain communication strategy database. The control partition is the key partition for controlling the communication of other ordinary partitions, which contains a series of communication security policies and partition state data.

[0037] According to the definition of the communication channel state, a communication channel state data block can be allocated to each communication channel, and a communication state strategy database is established in each ordinary partition to store all communication channel data blocks of the current ordinary partition, and collect all data of the communication channel in the current ordinary partition. According to the multi-domain isolation operating system architecture, a multi-domain communication strategy database is set in the control partition, and a data synchronization mechanism between the communication state strategy database and the multi-domain communication strategy database is designed, as shown in Figure 2 . When the communication channel state in the ordinary partition changes, the communication channel will send the corresponding change state to the communication state strategy database. Then the communication state strategy database will send the updated communication channel state data block to the multi-domain communication strategy database, so as to collect all the current communication data of all ordinary partitions by storing the multi-domain communication data block in the control partition. How to specifically implement the partition communication synchronization mechanism is one of the key problems in the dynamic communication security mechanism research of the multi-domain isolation operating system architecture. Figure 2 The communication channel state data block in appears twice, which is actually the same thing, but is used to show the flow direction of the data, in order to transfer the content recorded by the communication channel state data block from the ordinary partition to the control partition.

[0038] Specifically in terms of structure or connection, each ordinary partition includes a communication state strategy database and a plurality of communication channels. According to the state of each communication channel, a communication channel state data block is allocated to each communication channel. The communication state strategy database stores the communication channel state data block of each communication channel in the ordinary partition, thereby collecting all data of all communication channels in the ordinary partition.

[0039] The control partition comprises a communication security policy module and a multi-domain communication policy database, the communication security policy module is responsible for implementation of communication security policies between each normal partition; the multi-domain communication policy database is provided with a multi-domain communication data block, and the multi-domain communication policy database implements data synchronization work with all communication state policy databases through the multi-domain communication data block.

[0040] In terms of multi-domain communication policy database and communication state policy database structure design, the specific partition communication synchronization mechanism needs to set up a communication state policy database in each normal partition and a multi-domain communication policy database in the control partition. The communication state policy database stores communication channel state data blocks of each communication channel in the partition, and the multi-domain communication policy database stores multi-domain communication data blocks.

[0041] Specifically, the communication channel state data block comprises:

[0042] A source partition identifier (spid), i.e. an identifier of a normal partition initiating communication;

[0043] A target partition identifier (tpid), i.e. an identifier of a normal partition receiving communication;

[0044] A communication channel identifier (tid), i.e. an identifier of the communication channel;

[0045] A communication channel status flag (tsf), comprising a state identifier and a fault identifier, as shown in Table 1, used to record the current state of the communication channel.

[0046]

[0047] Table 1 Communication channel status flag

[0048] The state identifier of the loading state is represented by "0", the state identifier of the fault state is represented by "2", and the state identifier of the reloading state is represented by "3".

[0049] The running state (initial communication channel) is the initial communication channel running state, and the running state (reloading communication channel) is the reloading communication channel running state, which are represented by "1" on the state identifier and distinguished by 0 or 1 on the fault identifier.

[0050] The termination state (normal termination) is the normal termination state, and the termination state (abnormal termination) is the abnormal termination state. The state identifier of the termination state is represented by "4", and the fault identifier is also distinguished by 0 or 1.

[0051] The multi-domain communication data block comprises a total partition identifier, a communication channel state record data block, and the multi-domain communication data block is used to connect the total partition identifier and the communication channel state data block in the corresponding normal partition, wherein:

[0052] The total partition identifier is used to record and correspond to the information of the source partition identifier and the target partition identifier in each normal partition.

[0053] The communication channel state record data block is used to record the information in the corresponding communication channel state data block.

[0054] The table 2 is arranged as shown in the following table:

[0055]

[0056] Table 2 structure

[0057] In actual operation, the content of the pid comprises the spid and the tpid, and data tracking is facilitated.

[0058] According to the multi-domain isolation operating system architecture, the multi-domain communication strategy database is set in the control partition, and a data synchronization mechanism between the communication state strategy database and the multi-domain communication strategy database is designed.

[0059] The application realizes a mechanism for dynamically storing communication channel data, ensures synchronization of global communication channel state data, and thus provides basic security data support for subsequent developers. All the data stored in the application is data generated during the operation of the multi-domain isolation operating system. Through subsequent data auditing and data analysis, relevant security policy design can be performed. For example, the communication running state of each partition (stored in the communication channel state data block) is calculated from each partition, and the verification of the control partition (using the multi-domain communication strategy database) can sort the communication running state of each partition in the current system, demonstrate the security of the system from the perspective of system communication, and design and adjust relevant security policies for the system.

[0060] When the user needs to manually adjust the security level according to the communication channel state, the common partition will count the number of communication channels in the current common partition according to the data in its communication state strategy database (such as the total number of communication channels, how many of which are in running state, how many are in normal termination state, how many are in fault state, and how many are in abnormal termination state, etc.), and then send the relevant data to the control partition. The control partition confirms the feedback result of the common partition according to the data in the multi-domain communication strategy database, and sends it to the user as a reference index for adjusting the security level of the common partition.

[0061] Key terms in the field are as follows:

[0062] Operating system: a kind of basic software, such as Windows, iOS, Android, etc.

[0063] Virtualization technology: a kind of computer technology that can virtualize multiple environments on one operating system, each environment has virtualized hardware and runs an independent operating system.

[0064] Multi-domain isolation: an operating system architecture that usually uses virtualization technology to simulate multiple domains, allocates computer resources to different domains according to custom rules, so that programs running in each domain cannot perceive the actual information of the computer system, thereby improving the security of the computer system to some extent.

Claims

1. A method for dynamically storing the communication state of a multi-domain isolated operating system, characterized in that, Based on the multi-domain isolated operating system architecture, the partitions in the multi-domain isolated operating system are divided into a control partition and multiple ordinary partitions, and the control partition information is connected to all ordinary partitions; Each ordinary partition includes a communication status policy database and multiple communication channels. Based on the status of each communication channel, a communication channel status data block is allocated to each communication channel. The communication status policy database stores the communication channel status data blocks of each communication channel within the ordinary partition, thereby collecting all data of all communication channels in the ordinary partition. The control partition includes a communication security policy module and a multi-domain communication policy database. The communication security policy module is used to implement communication security policies between each ordinary partition. The multi-domain communication policy database contains multi-domain communication data blocks, which enable data synchronization with all communication status policy databases. The communication channel status data block includes: Source partition identifier, which is the identifier of the ordinary partition that initiated the communication; The target partition identifier is the identifier of the ordinary partition receiving the communication. Communication channel identifier, the identifier of this communication channel; The communication channel status symbol, including status identifiers and fault identifiers, is used to record the current status of the communication channel. The multi-domain communication data block includes a master partition identifier and a communication channel status record data block. The multi-domain communication data block connects the master partition identifier with the corresponding communication channel status data block in the ordinary partition. The master partition identifier is used to record and correspond to the information of the source partition identifier and the target partition identifier in each ordinary partition. The communication channel status record data block is used to record the information in the corresponding communication channel status data block. The communication security policy module is used to calculate the partition communication operation status of each ordinary partition based on the communication channel status data block of each ordinary partition, sort the communication operation status of each ordinary partition in the current multi-domain isolated operating system according to the partition communication operation status of each ordinary partition, and design a security policy based on the sorting result.

2. The method for dynamically storing the communication state of a multi-domain isolated operating system according to claim 1, characterized in that, The communication channel states include loaded state, running state, terminated state, reloaded state, and fault state.

3. The method for dynamically storing the communication state of a multi-domain isolated operating system according to claim 2, characterized in that, The running state includes the initial communication channel running state and the heavy-load communication channel running state; the termination state includes the normal termination state and the abnormal termination state.

Images