Domain Access Tables for Secure Processor Instruction Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer systems lack effective mechanisms to securely manage domain crossing for instructions across different, non-hierarchical domains, which can lead to unauthorized access and security breaches.
Innovation Solution
The implementation of domain access tables and a domain register in a computer processor to securely manage and control domain crossings. These tables specify allowed entry points for executing routines across different domains, and the domain register tracks the current domain of execution, ensuring that only authorized transitions occur.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If domain access tables and domain register are implemented to control domain crossings, then security is improved, but device complexity increases
Solution Approach 1:
The patent segments the domain access control mechanism into separate domain access tables (one per domain) and a domain register. Each domain access table independently stores entry points for that specific domain, allowing fine-grained control over domain crossings while distributing the complexity management across multiple structured components rather than a single complex system.
Solution Approach 2:
The domain access tables serve as intermediary structures between the domain register and the actual domain entry points. These tables mediate the domain crossing process by providing a structured interface that validates and routes domain transition requests, reducing the complexity of direct domain access control while enhancing security through intermediate validation.
2Reliability
If domain access tables are used to specify allowed entry points, then unauthorized access is prevented, but ease of operation decreases
Solution Approach 1:
The domain access control system operates autonomously through the domain register and domain access tables without requiring manual intervention. The hardware automatically uses these structures to validate domain crossings, making the security mechanism transparent to users while maintaining ease of operation. The system self-manages access control decisions based on pre-configured tables.
3Reliability
If a domain register tracks current domain, then unauthorized transitions are controlled, but device complexity increases
Solution Approach 1:
The domain register is merged with the existing processor register file, combining the domain tracking function with the existing register infrastructure. This integration approach enhances security through domain tracking while minimizing additional device complexity by reusing existing hardware resources rather than adding completely separate complex systems.
Data Source
AI summary
Systems, apparatuses, and methods related to securing domain crossing using domain access tables are described. For example, a computer processor can have registers configured to store locations of domain access tables respectively for predefined, non-hierarchical domains. Each respective domain access table can be pre-associated with a respective domain and can have entries configured to identify entry points of the respective domain. The processor is configured to enforce domain crossing in instruction execution using the domain access tables and to prevent arbitrary and/or unauthorized domain crossing.