Secure Interface Control for Multi-Domain Memory Sharing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud computing environments face challenges in securely sharing memory across multiple security domains due to the complexities introduced by virtualization, where hypervisors manage memory and provide services that may compromise data isolation and security between virtual machines and the underlying hardware.
Innovation Solution
A secure interface control mechanism is implemented to manage memory access, disabling virtual address checks and verifying domain identifiers to authorize access, ensuring that only authorized domains can access shared memory pages, and preventing unauthorized modifications to dynamic-address-translation tables.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If virtualization is used to manage memory in cloud computing environments, then resource utilization and flexibility are improved, but security isolation and data protection between different virtual machines and domains are compromised
Solution Approach 1:
The patent segments memory access control by introducing secure interface control that separates secure and non-secure access paths. The system divides memory management into distinct security domains with independent control mechanisms, allowing secure memory regions to be isolated from untrusted hypervisors while maintaining sharing capabilities within authorized domains.
Solution Approach 2:
The patent introduces a secure interface control as an intermediary layer between the hypervisor and memory. This mediator enforces security policies by verifying domain identifiers and controlling access to shared memory pages, preventing direct access by untrusted components while enabling controlled sharing between authorized domains.
2Adaptability or versatility
If virtual address translation is implemented for memory management, then address mapping flexibility is improved, but the complexity of ensuring secure access and preventing unauthorized modifications increases
Solution Approach 1:
The patent segments the address translation process into secure and non-secure paths. Secure interface control implements separate translation logic that operates independently from the main hypervisor DAT mechanism, reducing the security burden on the complex host DAT system while maintaining mapping flexibility where needed.
Solution Approach 2:
The patent extracts security-critical functions from the complex hypervisor DAT system and places them in the secure interface control. By removing address comparison and security verification from the main DAT path, the system reduces complexity in the critical security path while preserving mapping flexibility in the extracted secure component.
3Productivity
If multiple virtual addresses are mapped to the same absolute address to enable memory sharing, then memory sharing efficiency is improved, but the risk of unauthorized access and security breaches increases
Solution Approach 1:
The patent uses secure interface control as an intermediary that manages multiple virtual-to-absolute address mappings. The mediator maintains a mapping table that associates multiple virtual addresses with the same absolute address while enforcing domain identifier verification, enabling efficient memory sharing without exposing the system to unauthorized access risks.
Solution Approach 2:
The patent implements preliminary security checks by verifying domain identifiers before allowing access to shared memory pages. By performing anti-action (preventing unauthorized access) before the actual memory access occurs, the system enables efficient sharing while neutralizing security risks in advance.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
According to one or more embodiments of the present invention, a computer implemented method includes receiving a secure access request for a secure page of memory at a secure interface control of a computer system. The secure interface control can check a disable virtual address compare state associated with the secure page. The secure interface control can disable a virtual address check in accessing the secure page to support mapping of a plurality of virtual addresses to a same absolute address to thesecure page based on the disable virtual address compare state being set and/or to support secure pages that are accessed using an absolute address and do not have an associated virtual address.