Para-virtualized Library Synchronization for Asymmetric Multi-processing Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Porting existing application programs to asymmetric multi-processing (AMP) systems with multiple independent levels of security requires significant redesign and reimplementation to utilize multiple processing cores while maintaining security levels, as existing solutions do not effectively synchronize parallel applications across domains with different security levels.
Innovation Solution
The implementation of a para-virtualized user library with a standard synchronization application programming interface provides synchronized access to shared data memory regions within a domain, while preventing access from domains with other security levels, using synchronization structures and memory management units to enforce security isolation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If existing application programs are ported to asymmetric multi-processing systems with multiple independent levels of security, then security isolation between domains is improved, but application complexity and redesign requirements increase significantly
Solution Approach 1:
A para-virtualized user library acts as an intermediary between applications and the underlying asymmetric multi-processing system. This library provides standardized synchronization API calls that automatically handle cross-domain security requirements, eliminating the need for applications to directly manage complex security isolation mechanisms while maintaining reliable security boundaries between domains.
Solution Approach 2:
The para-virtualized user library implements a universal synchronization interface that works across multiple security domains. Instead of requiring separate synchronization mechanisms for each domain combination, the library provides a single standardized API that handles all cross-domain synchronization scenarios, reducing application complexity while maintaining security isolation.
2Productivity
If parallel applications are synchronized across multiple processing cores in AMP systems, then application functionality and performance are improved, but access control and security management become more difficult
Solution Approach 1:
The synchronization structure in shared data memory serves as an intermediary that mediates all cross-domain access requests. Applications communicate through standardized synchronization APIs that automatically enforce access control policies, making security management transparent to applications while enabling full parallel functionality across multiple processing cores.
Solution Approach 2:
The synchronization mechanism implements feedback through standardized API calls that automatically respond to access requests with appropriate authorization decisions. The para-virtualized user library monitors and controls access to shared data memory regions, providing immediate feedback on whether cross-domain access is permitted based on security policies, thereby simplifying access control management.
3Adaptability or versatility
If synchronized access is provided to shared data memory regions through para-virtualized user libraries, then application portability with minimal modification is improved, but system overhead and library complexity increase
Solution Approach 1:
The patent creates copies of the para-virtualized user library for each application, with each copy containing the necessary synchronization API implementations. This allows applications to be ported with minimal modification since they link against a standardized library interface, while the library itself handles the complexity of cross-domain synchronization. The copying approach enables applications to remain unaware of the underlying library complexity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method for synchronizing parallel applications in a partitioned asymmetric multi-processing system having multiple independent levels of security is provided. Synchronized access to a shared data memory region is provided for a first application through a first instance of a para-virtualized user library linked against a first application in a first domain having a first security level. Synchronized access is provided to the shared data memory region for a second application in parallel with the first application through a second instance of the para-virtualized user library linked against the second application in the first domain. The second instance of the para-virtualized user library also accesses the synchronization structure. Access is prevented to the shared data memory region and the synchronization structure by other applications in one or more other domains having other levels of security per domain.