Secure Interface Control for Multi-Domain Memory Sharing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Cloud computing environments face challenges in securely sharing memory across multiple security domains due to the complexities introduced by virtualization, where hypervisors manage memory and provide services that may compromise data isolation and security between virtual machines and the underlying hardware.

Innovation Solution

A secure interface control mechanism is implemented to manage memory access, disabling virtual address checks and verifying domain identifiers to authorize access, ensuring that only authorized domains can access shared memory pages, and preventing unauthorized modifications to dynamic-address-translation tables.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If virtualization is used to manage memory in cloud computing environments, then resource utilization and flexibility are improved, but security isolation and data protection between different virtual machines and domains are compromised

Engineering Contradiction:
Improvememory sharing capabilityVSAvoidsecurity isolation
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent segments memory access control by introducing secure interface control that separates secure and non-secure access paths. The system divides memory management into distinct security domains with independent control mechanisms, allowing secure memory regions to be isolated from untrusted hypervisors while maintaining sharing capabilities within authorized domains.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a secure interface control as an intermediary layer between the hypervisor and memory. This mediator enforces security policies by verifying domain identifiers and controlling access to shared memory pages, preventing direct access by untrusted components while enabling controlled sharing between authorized domains.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If virtual address translation is implemented for memory management, then address mapping flexibility is improved, but the complexity of ensuring secure access and preventing unauthorized modifications increases

Engineering Contradiction:
Improveaddress mapping flexibilityVSAvoidsecurity control complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent segments the address translation process into secure and non-secure paths. Secure interface control implements separate translation logic that operates independently from the main hypervisor DAT mechanism, reducing the security burden on the complex host DAT system while maintaining mapping flexibility where needed.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent extracts security-critical functions from the complex hypervisor DAT system and places them in the secure interface control. By removing address comparison and security verification from the main DAT path, the system reduces complexity in the critical security path while preserving mapping flexibility in the extracted secure component.

Inventive Principle:
Principle #2Taking out (Extraction)

3Productivity

If multiple virtual addresses are mapped to the same absolute address to enable memory sharing, then memory sharing efficiency is improved, but the risk of unauthorized access and security breaches increases

Engineering Contradiction:
Improvememory sharing efficiencyVSAvoidunauthorized access risk
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent uses secure interface control as an intermediary that manages multiple virtual-to-absolute address mappings. The mediator maintains a mapping table that associates multiple virtual addresses with the same absolute address while enforcing domain identifier verification, enabling efficient memory sharing without exposing the system to unauthorized access risks.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements preliminary security checks by verifying domain identifiers before allowing access to shared memory pages. By performing anti-action (preventing unauthorized access) before the actual memory access occurs, the system enables efficient sharing while neutralizing security risks in advance.

Inventive Principle:
Principle #9Preliminary anti-action

Data Source

PatentEP3935496B1Sharing secure memory across multiple security domains
Publication Date: 2024.02.14 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • EP3935496B1 patent drawingFigure 1
  • EP3935496B1 patent drawingFigure 2
  • EP3935496B1 patent drawingFigure 3

AI summary

According to one or more embodiments of the present invention, a computer implemented method includes receiving a secure access request for a secure page of memory at a secure interface control of a computer system. The secure interface control can check a disable virtual address compare state associated with the secure page. The secure interface control can disable a virtual address check in accessing the secure page to support mapping of a plurality of virtual addresses to a same absolute address to thesecure page based on the disable virtual address compare state being set and/or to support secure pages that are accessed using an absolute address and do not have an associated virtual address.