Memory Controller Virtual Storage Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional computer systems face security risks due to shared physical mass storage media for virtualized operating systems, where malicious programs can exploit vulnerabilities for unwanted access, and existing solutions do not adequately prevent access between virtualized OS and external storage.
Innovation Solution
A specialized memory controller is implemented as a hardware component independent of the processor, allowing secure access to defined areas of a non-volatile mass storage medium, with a mapping table managing access for each virtualized operating system, ensuring isolated and controlled access to assigned storage devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple virtualized operating systems share the same physical storage medium, then storage resource utilization is improved, but security is worsened due to risk of unauthorized access
Solution Approach 1:
The physical storage medium is divided into multiple virtual storage devices, each assigned to a specific virtualized operating system. The storage controller implements this segmentation by maintaining a mapping table that associates each virtual storage device with specific areas of the physical storage medium, ensuring that each OS can only access its designated portion while maintaining secure isolation.
2Reliability
If a dedicated physical storage device is provided for each virtualized operating system, then security is improved, but device complexity and cost are worsened
Solution Approach 1:
The storage controller creates virtual copies of physical storage devices by presenting virtual storage devices to each virtualized operating system. These virtual devices are software-based abstractions that map to portions of the physical storage medium, eliminating the need for multiple physical devices while maintaining the security benefits of dedicated storage.
3Reliability
If a hardware-based storage controller is implemented, then security and access control are improved, but device complexity is worsened
Solution Approach 1:
A storage controller is introduced as an intermediary component between the virtualized operating systems and the physical storage medium. This controller manages all access requests, enforces security policies, and maintains the mapping between virtual and physical storage devices, providing centralized control while keeping the virtualized OSs unaware of the underlying complexity.
Data Source
Figure 1
Figure 2~3
AI summary
A computer system (100) comprises at least one processor (CPU), a first mass memory (MS1) and a second mass memory (MS2). The computer system (100) is set up to implement a master operating system core (MBS) as well as a first operating system core (BS1) and at least one second operating system core (BS2) on the processor (CPU) under the control of the master operating system core (MBS). The memory controller (CTL) is set up to provide the master operating system core (MBS) with defined areas of a mass storage medium (FLSH) as a first mass memory and at least one second mass memory which are each independent of one another and to control mapping of the first mass memory and of the at least one second mass memory to the defined areas of the mass storage medium (FLSH). The master operating system core (MBS) is set up to allow the first operating system core (BS1) and the at least one second operating system core (BS2) to have exclusive access to at least one of the mass memories provided in each case.