Configurable Memory Swapping for Faster Secure Server Reuse
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud computing systems face significant downtime and overhead in recycling memory resources due to the time-consuming process of data erasure and reconfiguration, which affects the availability of resources for subsequent users.
Innovation Solution
A memory restoration system utilizing a root of trust processor (ROT) to concurrently prepare inactive memory parts for reuse by isolating the process from active users, enabling swift data erasure and reconfiguration through a switch mechanism, allowing seamless swapping of memory parts.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data erasure and reconfiguration is performed sequentially on memory, then data security is ensured, but memory recycling time increases significantly
Solution Approach 1:
The system performs data erasure and reconfiguration in advance while the memory is inactive, so that when the memory becomes active for user access, the preparation is already complete. This eliminates the need to perform erasure during the memory's active period, thus maintaining security while reducing recycling time.
Solution Approach 2:
The system continuously prepares memory for reuse during its inactive period without interruption, ensuring that the memory is ready for immediate activation. This continuous preparation process maximizes resource utilization and minimizes downtime between users.
2Reliability
If memory is wiped completely to ensure data removal, then data integrity is protected, but the time required for reconfiguration increases
Solution Approach 1:
Complete data wiping and reconfiguration are performed as preliminary actions during the memory's inactive state, ensuring data integrity is maintained while the reconfiguration time does not impact user availability. The memory is fully prepared before being handed over to the next user.
3Device complexity
If a single processor handles both service operations and memory preparation, then device complexity is reduced, but processing speed decreases
Solution Approach 1:
The system segments the processor into two distinct units: a service processor that handles user-facing operations and a root of trust processor that handles security-critical memory preparation. This segmentation enables parallel processing, where both service operations and memory preparation occur simultaneously, thereby increasing overall processing speed without significantly increasing complexity.
Solution Approach 2:
The root of trust processor acts as an intermediary that specifically handles memory preparation tasks, allowing the service processor to focus on user services. This division of labor enables concurrent execution of service operations and memory recycling, improving system throughput and recycling speed.
4Productivity
If memory recycling is performed during active user access, then resource availability is maintained, but data security risks increase
Solution Approach 1:
All data erasure and reconfiguration operations are completed as preliminary actions during the memory's inactive period before user access begins. This ensures that when users access the memory, it is already secure and prepared, eliminating security risks associated with in-place recycling while maintaining resource availability.
Data Source
Figure 1a
Figure 1b
Figure 2
AI summary
The present memory restoration system enables a collection of computing systems to prepare inactive rewritable memory for reserve and future replacement of other memory while the other memory is active and available for access by a user of the computing system. The preparation of the reserved memory part is performed off-line in a manner that is isolated from the current user of the active memory part. Preparation of memory includes erasure of data, reconfiguration, etc. The memory restoration system allows for simple exchange of the reserved memory part, once the active memory part is returned. The previously active memory may be concurrently recycled for future reuse in this same manner to become a reserved memory. This enables the computing collection infrastructure to "swap" to what was previously the inactive memory part when a user vacates a server, speeding up the server wipe process.