Isolated Memory Space Storage Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer processes running on computing devices pose security risks due to potential unauthorized changes and data access, and existing security mechanisms like sandboxing and virtual machines do not efficiently manage the storage of frequently and infrequently changed objects, impacting performance and memory usage.
Innovation Solution
A system that determines the frequency of changes to objects stored in an isolated environment and maps them to either primary or secondary memory based on access frequency, optimizing storage by prioritizing frequently changed objects in primary memory for faster access and conserving space for infrequently changed objects.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If all object versions are stored in primary memory, then access speed is improved, but memory space is insufficient
Solution Approach 1:
The patent divides memory storage into two segments: primary memory for frequently accessed object versions and secondary memory for infrequently accessed versions. This segmentation allows the system to prioritize fast access for critical objects while utilizing larger capacity secondary memory for less critical storage needs, resolving the contradiction between speed and space.
Solution Approach 2:
The patent applies local quality by assigning different storage locations based on the specific access characteristics of each object. Frequently changed objects are placed in primary memory with fast access properties, while infrequently changed objects are placed in secondary memory, optimizing the local storage quality for each object's access pattern.
2Quantity of substance
If object versions are stored in secondary memory, then memory space is sufficient, but access time increases
Solution Approach 1:
The system performs preliminary action by proactively identifying which objects will be frequently accessed and pre-positioning them in primary memory before they are needed. This prediction-based pre-positioning reduces access time for future operations while maintaining sufficient storage capacity in secondary memory.
Solution Approach 2:
The patent implements feedback mechanisms that monitor object access patterns and dynamically adjust storage locations. When objects are accessed, this information feeds back into the storage management system, which then relocates frequently accessed objects to primary memory, optimizing the balance between access time and storage space over time.
3Reliability
If sandboxing is used to isolate processes, then security is improved, but performance is degraded
Solution Approach 1:
The patent applies dynamics by making the isolated environment adaptive rather than static. The system dynamically adjusts the isolated environment based on process behavior, allowing frequently accessed objects to be loaded into faster memory regions while maintaining security boundaries. This dynamic adjustment optimizes performance within the secure sandboxed environment.
Solution Approach 2:
The patent introduces an intermediary storage management system that mediates between the secure isolated environment and the broader system memory. This intermediary manages object version storage and retrieval, allowing the isolated process to maintain security while the intermediary optimizes access patterns by storing frequently used objects in faster memory, thus improving performance without compromising security.
Data Source
AI summary
Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for determining where to store a version of an object in an isolated environment. In one aspect, a method include actions of obtaining, from a process running in an isolated environment, a request to access an object and determining a frequency that changes to a version of the object stored in the isolated environment will be mapped back to a version of the object stored in the non-isolated environment. Additional actions include determining, based on the frequency that changes to a version of the object stored in the isolated environment are mapped back to a version of the object stored in the non-isolated environment, whether to store the version of the object in primary memory associated with the isolated environment or secondary memory associated with the isolated environment.