Secure Memory Access Interface for Private Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional electronic devices lack effective protection for private data in physical memory, as it is managed by the same memory management unit as common data, making it vulnerable to unauthorized access by malicious programs or viruses.
Innovation Solution
A secure memory access interface is added to the virtual machine monitor of an electronic device, allowing access to private data in a specific physical address interval without establishing a mapping relationship in the memory management unit, thereby preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If private data is managed by the same memory management unit as common data, then memory management is simplified and easier to operate, but security of private data deteriorates and becomes vulnerable to unauthorized access
Solution Approach 1:
The patent divides the physical memory into two distinct segments: a first physical address interval for common data and a second physical address interval for private data. The memory management unit establishes mapping relationships only for the first interval, while the second interval remains unmapped and inaccessible through conventional memory access methods. This segmentation allows simplified management of common data while providing enhanced security for private data through isolation.
2Adaptability or versatility
If an operating system can access private data through address mapping under any circumstances, then data accessibility is improved, but security against malicious programs deteriorates
Solution Approach 1:
The patent applies different access control qualities to different regions of physical memory. The first physical address interval (common data) maintains full accessibility through the operating system and address mapping mechanisms. The second physical address interval (private data) is configured with restricted access quality, where no mapping relationship is established in the memory management unit, making it inaccessible to the operating system and malicious programs while remaining accessible to designated secure applications.
3Reliability
If a secure memory access interface is added to the virtual machine monitor, then private data security is improved, but device complexity increases
Solution Approach 1:
The patent introduces a secure memory access interface as an intermediary layer between applications and the private data in the second physical address interval. This interface is added to the virtual machine monitor and provides controlled access mechanisms. The intermediary enables secure access for authorized applications while blocking unauthorized access from the operating system and malicious programs, achieving enhanced security without requiring fundamental changes to the existing memory management architecture.
Data Source
AI summary
Embodiments of the disclosure provide a method and an apparatus for accessing private data in a physical memory of an electronic device, wherein the method includes: receiving a request for accessing private data in the physical memory from a process running in the electronic device; and accessing private data in a particular physical address interval of the physical memory through a secure memory access interface added to a virtual machine monitor of the electronic device, wherein a mapping relationship for the particular physical address interval is not established in a memory management unit of the electronic device, and the secure memory access interface is pre-designed to realize access to the private data in the particular physical address interval of the physical memory. The method and the apparatus of the present application can enhance security of private data in a physical memory.