System and method for implementing operation system separation

Abstract

The invention relates to a system for separating the operation system and a relative method, wherein it comprises: a mother operation system module, at least one sub operation system module for containing the modify information of user on the mother operation system module, a system separating module and an external memory access control module for recording the disc spaces of mother / sub operation system module; said system separating module via the user command instructs and / or build sub operation system module, to instruct and / or modify the disc space and disc blank space of mother / sub operation system module, and detect the read / write access of mother / sub operation system modules on the disc. The invention can build different operation systems without occupying more space of disc, to separate the operation system and reduce the system abundance, increase the safety and reliability, to protect the user information at different sub operation system modules.

Description

technical field

[0001] The invention relates to a system and a method for realizing isolation of an operating system, in particular to a system and a method for realizing a completely isolated operating environment of a storage space in an operating system, and belongs to the field of computer operating systems and computer security. Background technique

[0002] The computer operating system is the most important system in the computer, which is used to manage computer hardware devices and provide a running environment for various application software. Therefore, the reliability and security of the operating system are very important.

[0003] Today, more and more applications are deployed in a single operating system environment, resulting in a very complex user computing environment, which is more difficult to manage and maintain. What's more important is: in today's flood of viruses and spyware, such a complex computing environment undoubtedly makes various computer sec...

Examples

Embodiment 1

[0032] Referring to FIG. 1 , it includes a parent operating system module 1 , a sub-operating system module 21 , a sub-operating system module 22 , a system isolation module 3 and an external storage access control module 4 .

[0033] The mother operating system module 1 may only include an operating system kernel for completing the most basic functions. The so-called operating system kernel refers to a software program used to provide the basic functions necessary for the operating system; the operating system kernel for completing the most basic functions may be Linux Or the kernel of Unix or Windows, Windows is taken as an example in this embodiment.

[0034] The mother operating system module 1 may also include the kernel and software programs other than the kernel, that is, include the kernel and application programs other than the kernel of the operating system, for providing the basic functions required by the operating system and other user-selected functions. For exam...

Embodiment 2

[0055]Referring to FIG. 5 , it is a schematic diagram of Embodiment 2 of the present invention, which implements operating system isolation under the virtual machine architecture. Under the computer architecture that supports virtual machine technology, the virtual memory management module (VirtualMemory Manager, referred to as VMM) is the core part of virtual machine technology, running under all other operating systems, and assigning and Coordinate system resources. For example, the VMWare software of VMWare Company, the Virtual PC software of Microsoft Corporation, and the Xen software of XenSource Company all support the virtual machine technology. Under the function of VMM, two or more operating systems can run simultaneously in the same computer system. In this embodiment, only one mother operating system module 1 is taken as an example, wherein the mother operating system module 1 is isolated by the system Module 3 guides and establishes two sub-operating system module...

Embodiment 3

[0059] Referring to FIG. 6 , it is a schematic diagram of another embodiment for implementing operating system isolation under the virtual machine architecture. The virtual machine system is provided with a management operating system module or a service operating system module 5 (called the secondary operating system module), which runs simultaneously with the parent operating system module 1 (also called the main operating system module) or precedes the parent operating system module 1 Run, monitor the state of the parent operating system module 1, and provide a disk access interface for the parent / child operating system module.

[0060] The system isolation module 3 is set in or outside the kernel of the secondary operating system module, and the startup sequence is: computer hardware startup; VMM startup; secondary operating system module and system isolation module startup; parent operating system module startup; sub-operating system module 21 and 22 activate one or more ...

technical field

[0001] The invention relates to a system and a method for realizing isolation of an operating system, in particular to a system and a method for realizing a completely isolated operating environment of a storage space in an operating system, and belongs to the field of computer operating systems and computer security. Background technique

[0002] The computer operating system is the most important system in the computer, which is used to manage computer hardware devices and provide a running environment for various application software. Therefore, the reliability and security of the operating system are very important.

[0003] Today, more and more applications are deployed in a single operating system environment, resulting in a very complex user computing environment, which is more difficult to manage and maintain. What's more important is: in today's flood of viruses and spyware, such a complex computing environment undoubtedly makes various computer sec...

Examples

Embodiment 1

[0032] Referring to FIG. 1 , it includes a parent operating system module 1 , a sub-operating system module 21 , a sub-operating system module 22 , a system isolation module 3 and an external storage access control module 4 .

[0033] The mother operating system module 1 may only include an operating system kernel for completing the most basic functions. The so-called operating system kernel refers to a software program used to provide the basic functions necessary for the operating system; the operating system kernel for completing the most basic functions may be Linux Or the kernel of Unix or Windows, Windows is taken as an example in this embodiment.

[0034] The mother operating system module 1 may also include the kernel and software programs other than the kernel, that is, include the kernel and application programs other than the kernel of the operating system, for providing the basic functions required by the operating system and other user-selected functions. For exam...

Embodiment 2

[0055]Referring to FIG. 5 , it is a schematic diagram of Embodiment 2 of the present invention, which implements operating system isolation under the virtual machine architecture. Under the computer architecture that supports virtual machine technology, the virtual memory management module (VirtualMemory Manager, referred to as VMM) is the core part of virtual machine technology, running under all other operating systems, and assigning and Coordinate system resources. For example, the VMWare software of VMWare Company, the Virtual PC software of Microsoft Corporation, and the Xen software of XenSource Company all support the virtual machine technology. Under the function of VMM, two or more operating systems can run simultaneously in the same computer system. In this embodiment, only one mother operating system module 1 is taken as an example, wherein the mother operating system module 1 is isolated by the system Module 3 guides and establishes two sub-operating system module...

Embodiment 3

[0059] Referring to FIG. 6 , it is a schematic diagram of another embodiment for implementing operating system isolation under the virtual machine architecture. The virtual machine system is provided with a management operating system module or a service operating system module 5 (called the secondary operating system module), which runs simultaneously with the parent operating system module 1 (also called the main operating system module) or precedes the parent operating system module 1 Run, monitor the state of the parent operating system module 1, and provide a disk access interface for the parent / child operating system module.

[0060] The system isolation module 3 is set in or outside the kernel of the secondary operating system module, and the startup sequence is: computer hardware startup; VMM startup; secondary operating system module and system isolation module startup; parent operating system module startup; sub-operating system module 21 and 22 activate one or more ...

Images