Memory Image Capture via Intermediate Write to Buffer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for capturing memory images are disruptive to system processes and require significant resource interruption, making them inefficient for diagnosing and repairing error conditions in computing devices.
Innovation Solution
Implementing techniques that allow for memory image capture via an intermediate write to a buffer or direct write to storage, minimizing system resource interruption and enabling efficient access to memory images for diagnostic purposes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If memory image capture is performed using existing methods (pausing scan loops, rebooting system), then complete memory dump data can be obtained, but system processes are disrupted and resource interruption occurs
Solution Approach 1:
The patent applies preliminary action by pre-allocating a reserved region in non-volatile memory before the memory image capture is needed. This reserved region is prepared in advance to receive memory pages during system operation, allowing the capture process to proceed without disrupting ongoing system processes. The memory management unit can redirect memory pages to this pre-prepared region seamlessly.
Solution Approach 2:
The patent introduces an intermediary mechanism through the memory management unit that acts as a mediator between the volatile memory and non-volatile storage. This intermediary redirects memory pages to a reserved region in non-volatile memory during normal system operation, enabling memory image capture without requiring system pause or reboot. The intermediary handles the redirection transparently to maintaining system continuity.
2Loss of information
If memory image capture is performed by pausing scan loops and transferring data to buffer, then dump data can be collected, but system resources are interrupted during the process
Solution Approach 1:
The patent implements continuity of useful action by enabling memory image capture to occur during normal system operation without pausing scan loops or interrupting system processes. The memory management unit continuously redirects memory pages to the reserved region in non-volatile memory while the system runs, eliminating the need to pause or halt system resources during the capture process.
3Quantity of substance
If a specified portion of volatile memory is used as dump device, then memory image can be captured, but if the dump device is too small, excess pages cannot be stored
Solution Approach 1:
The patent applies dimensionality change by transitioning from using only volatile memory (temporary, limited capacity) to using non-volatile memory (persistent, larger capacity) for storing the memory image. This dimensional shift in storage medium allows significantly larger memory images to be captured without the capacity constraints of volatile memory, while the memory management unit handles the complexity of managing pages across both volatile and non-volatile memory.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Techniques for memory image capture via memory write from a running system are described. In at least some embodiments, a request is received for an image of a portion of memory. Images of memory can be used for a variety of purposes, such as diagnosing and repairing error conditions for hardware and/or software, detecting unwanted and/or malicious processes (e.g., malware), general systems maintenance, and so forth. According to one or more embodiments, various techniques can be implemented to capture an image of a portion of memory. For example, an intermediate write to memory can be employed to write the image of the portion of memory to a memory buffer. Alternatively or additionally, an image of a portion of memory can be captured directly to storage.