Non-Hierarchical Memory Access Control via Page Table Permissions

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional memory access control systems rely on a hierarchical domain structure, which limits flexibility and control granularity, and may not effectively manage memory access permissions between different execution domains.

Innovation Solution

Implementing a non-hierarchical memory access control system where physical memory regions are explicitly configured with different permissions for various execution domains, using page table entries to specify permissions for read, write, and execution operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a hierarchical domain structure is used for memory access control, then the system structure is simplified and easier to implement, but the flexibility and control granularity are limited

Engineering Contradiction:
Improveease of implementationVSAvoidflexibility and control granularity
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The patent segments the traditional hierarchical domain structure into a non-hierarchical flat domain model. Instead of organizing domains in a hierarchy with parent-child relationships, the system divides memory access control into independent domain-level permissions. Each domain can be independently configured with its own permission set, allowing fine-grained control over memory access without being constrained by hierarchical relationships. This segmentation enables flexible permission management while simplifying the overall system structure.

Inventive Principle:
Principle #1Segmentation

2Device complexity

If traditional hierarchical memory access control is used, then the system is easier to manage, but security against unauthorized access is reduced

Engineering Contradiction:
Improvesystem management simplicityVSAvoidsecurity
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent applies local quality by assigning specific permission attributes to each domain independently. Instead of relying on hierarchical privileges where higher domains automatically have access to lower domains, the system assigns explicit read, write, and execute permissions to each domain for each memory region. This localized permission assignment ensures that security is maintained through explicit authorization rather than implicit hierarchical trust, making the system both manageable and secure.

Inventive Principle:
Principle #3Local quality

3Device complexity

If hierarchical domain structure is implemented, then the control mechanism is simpler, but the ability to manage independent domain permissions is limited

Engineering Contradiction:
Improvecontrol mechanism simplicityVSAvoidindependent permission management
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The patent introduces dynamics by making domain permissions configurable and changeable rather than fixed by hierarchy. The flat domain model allows dynamic assignment of permissions to any domain at any time, independent of other domains. This dynamic permission management enables flexible adaptation to different security and access control requirements while maintaining a simple control mechanism through the flat structure.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS20250139016A1Memory Access Control through Permissions Specified in Page Table Entries for Execution Domains
Publication Date: 2025.05.01 MICRON TECHNOLOGY INC
  • US20250139016A1 patent drawing
  • US20250139016A1 patent drawing
  • US20250139016A1 patent drawing

AI summary

Systems, apparatuses, and methods related to a computer system having a page table entry containing permission bits for predefined types of memory accesses made by executions of routines in predefined domains are described. The page table entry can be used to map a virtual memory address to a physical memory address. In response to a routine accessing the virtual memory address, a permission bit corresponding to the execution domain of the routine and a type of the memory access can be extracted from the page table entry to determine whether the memory access is to be rejected.