Computing-Unit Page Tables for Shared Memory Permission Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In computing device clusters, the shared memory is vulnerable to malicious operations due to uncontrolled access permissions, which can lead to memory damage.
Innovation Solution
Implement a memory access control method using page tables that store computing unit access permissions, allowing for precise control of access rights, and a page table route to manage these permissions without altering existing hardware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple computing devices perform mutual access on shared memory without access permission control, then data exchange efficiency is improved, but memory security deteriorates due to malicious operations
Solution Approach 1:
The patent segments the unified address space into multiple isolated address spaces, each corresponding to a specific computing device. This segmentation allows computing devices to access shared memory while maintaining individual access control, thus resolving the contradiction between data exchange efficiency and memory security.
Solution Approach 2:
The patent implements local quality by assigning different access permissions to different computing devices for the same shared memory region. Each computing device has its own access permission settings, enabling selective control over which devices can read or write to specific memory areas, thereby ensuring security while maintaining efficiency.
2Reliability
If access permission control is implemented for each computing unit on shared memory, then memory security is improved, but system complexity increases due to permission management
Solution Approach 1:
The patent creates a universal address space structure that can be applied to all computing devices in the cluster. The address space isolation mechanism and permission control system serve multiple functions simultaneously: memory protection, access control, and device identification, thereby reducing overall system complexity despite implementing fine-grained permission management.
Solution Approach 2:
The patent introduces an intermediary address space layer between the computing devices and the physical shared memory. This intermediary structure manages access permissions centrally through address translation and isolation mechanisms, simplifying permission management compared to direct control approaches while maintaining high security standards.
3Reliability
If address space isolation is implemented to control computing unit access, then memory security is improved, but access speed decreases due to additional address translation overhead
Solution Approach 1:
The patent performs preliminary action by pre-establishing the address space isolation structure and mapping relationships before computing tasks execute. The address translation tables and permission configurations are prepared in advance, allowing computing devices to access shared memory with minimal overhead during actual computation, thus balancing security with access speed.
Data Source
AI summary
This application discloses a memory access control method and apparatus, a computing device, and a computing device cluster, and relates to the field of computer technologies. For each computing unit that accesses a shared memory space, the computing device may use, as an access permission of the computing unit, a computing unit access permission stored in a target page table corresponding to the computing unit, and process a memory access request of each computing unit based on the access permission of the computing unit. The computing device sets a correspondence between a computing unit and a page table, to control an access permission of each computing unit on the shared memory space.