Memory Protector Fragment Page Allocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing semiconductor devices face challenges in providing a secure execution environment for mobile applications without additional secure hardware, particularly in efficiently managing and protecting security data within memory resources.
Innovation Solution
A semiconductor device is designed with a processor and memory protector that divides memory into secure and non-secure window areas, using a page table to control access and allocate a secure buffer area for security data, preventing unauthorized access and optimizing memory usage by dynamically allocating fragment pages of varying sizes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If memory is divided into window areas with fragment pages of different sizes, then memory allocation flexibility is improved, but memory management complexity increases
Solution Approach 1:
The memory is divided into multiple window areas (first window area, second window area, etc.), each containing fragment pages of different sizes. This segmentation allows flexible allocation of memory blocks to secure buffer areas based on specific size requirements, improving adaptability while managing complexity through structured organization.
Solution Approach 2:
The memory protector dynamically searches for and allocates appropriate fragment pages from different window areas based on the size requirements of security data. This dynamic allocation process allows the system to adapt to varying memory needs while maintaining efficient memory utilization through automated selection and protection mechanisms.
2Reliability
If access to fragment pages is restricted based on security attributes, then security is improved, but access speed decreases
Solution Approach 1:
Security attributes and protection flags are pre-configured for each fragment page during memory initialization and allocation. The memory protector is pre-configured with security policies and access control rules. This preliminary setup enables rapid security verification during access operations, reducing the performance overhead of security checks while maintaining strong security protection.
Data Source
AI summary
Provided are semiconductor devices. A semiconductor device includes processors performing an operation using data stored in a memory; and a memory protector dividing the memory into a first window area and a second window area. The first window area including a first fragment page, which is of a first size. The second window area including a second fragment page, which is of a second size, wherein the second size is smaller than the first size. The memory protector configured to protect the first fragment page and the second fragment page from being accessed by the processors.