Non-Hierarchical Memory Access Control via Page Table Permissions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional memory access control systems rely on a hierarchical domain structure, which limits flexibility and control granularity, and may not effectively manage memory access permissions between different execution domains.
Innovation Solution
Implementing a non-hierarchical memory access control system where physical memory regions are explicitly configured with different permissions for various execution domains, using page table entries to specify permissions for read, write, and execution operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a hierarchical domain structure is used for memory access control, then the system structure is simplified and easier to implement, but the flexibility and control granularity are limited
Solution Approach 1:
The patent segments the traditional hierarchical domain structure into a non-hierarchical flat domain model. Instead of organizing domains in a hierarchy with parent-child relationships, the system divides memory access control into independent domain-level permissions. Each domain can be independently configured with its own permission set, allowing fine-grained control over memory access without being constrained by hierarchical relationships. This segmentation enables flexible permission management while simplifying the overall system structure.
2Device complexity
If traditional hierarchical memory access control is used, then the system is easier to manage, but security against unauthorized access is reduced
Solution Approach 1:
The patent applies local quality by assigning specific permission attributes to each domain independently. Instead of relying on hierarchical privileges where higher domains automatically have access to lower domains, the system assigns explicit read, write, and execute permissions to each domain for each memory region. This localized permission assignment ensures that security is maintained through explicit authorization rather than implicit hierarchical trust, making the system both manageable and secure.
3Device complexity
If hierarchical domain structure is implemented, then the control mechanism is simpler, but the ability to manage independent domain permissions is limited
Solution Approach 1:
The patent introduces dynamics by making domain permissions configurable and changeable rather than fixed by hierarchy. The flat domain model allows dynamic assignment of permissions to any domain at any time, independent of other domains. This dynamic permission management enables flexible adaptation to different security and access control requirements while maintaining a simple control mechanism through the flat structure.
Data Source
AI summary
Systems, apparatuses, and methods related to a computer system having a page table entry containing permission bits for predefined types of memory accesses made by executions of routines in predefined domains are described. The page table entry can be used to map a virtual memory address to a physical memory address. In response to a routine accessing the virtual memory address, a permission bit corresponding to the execution domain of the routine and a type of the memory access can be extracted from the page table entry to determine whether the memory access is to be rejected.


