Multi-Domain Address Translation with Isolated Physical Spaces
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing systems rely on page table structures defined by operating systems or hypervisors for address translation and access permission control, which can lead to security vulnerabilities if compromised.
Innovation Solution
The system employs a multi-domain architecture with a root domain managing switching between other domains, and separate physical address spaces for each domain, including a dedicated root physical address space, to enhance security and isolation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If page table structures defined by operating systems or hypervisors are used for address translation and access permission control, then address translation functionality is provided, but security vulnerabilities arise if the page table structures are compromised
Solution Approach 1:
The patent divides the address translation structure into multiple independent domain-specific structures (first domain page table, second domain page table, third domain page table) instead of using a single shared page table. Each domain-specific page table is dedicated to a specific domain and cannot be accessed by other domains, providing isolation and security. This segmentation eliminates the security vulnerability of shared page tables while maintaining address translation functionality through domain-specific structures.
2Reliability
If multiple domains share a common physical address space, then device complexity is reduced, but security isolation between domains is weakened
Solution Approach 1:
The patent introduces an additional dimension of domain-specific physical address spaces. Instead of using a single flat physical address space, the system creates multiple domain-specific physical address spaces (first domain physical address space, second domain physical address space, third domain physical address space) that are logically separated. Each domain operates in its own address space dimension, providing strong security isolation while the underlying hardware manages the complexity of maintaining these separate spaces.
3Reliability
If a single physical address space is used for all domains, then ease of operation is improved, but security guarantees are reduced
Solution Approach 1:
The patent introduces domain-specific address translation circuitry as an intermediary between the processor and the physical memory system. This intermediary translates virtual addresses to domain-specific physical addresses according to domain-specific page tables, providing security guarantees through isolated address spaces. The intermediary handles the complexity of managing multiple domain-specific physical address spaces, making the system secure while maintaining ease of operation through automated address translation.
Data Source
AI summary
Processing circuitry 10 performs processing in one of at least three domains 82, 84, 86, 88. Address translation circuitry 16 translates a virtual address of a memory access performed from a current domain to a physical address in one of a plurality of physical address spaces 61 selected based at least on the current domain. The domains include a root domain 82 for managing switching between other domains. The physical address spaces 61 include a root physical address space associated with the root domain 82, separate from physical address spaces associated with other domains.