Shared Memory Access Token Management for Multi-Region Control

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing information processing systems face significant overhead in resetting access tokens when accessing multiple memory regions with different memory tokens, leading to increased processing time and inefficiency.

Innovation Solution

The system includes a shared memory with multiple regions, a memory token storing unit, an access token storing unit, and a determination circuit that allows multiple access tokens to be added to requests and compared with memory tokens, eliminating the need for frequent token resets by permitting access based on matching tokens.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If access tokens are reset frequently when accessing multiple memory regions, then access control precision is improved, but processing time increases and system efficiency deteriorates

Engineering Contradiction:
Improveaccess control precisionVSAvoidprocessing time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The system pre-loads multiple access tokens into the access token storing unit before actual memory access operations. This preliminary action allows the access control determination circuit to quickly match requested memory regions with pre-stored tokens without performing frequent reset operations, thereby reducing processing time while maintaining precise access control.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The access token storing unit is designed to dynamically hold multiple access tokens simultaneously, allowing the system to adaptively switch between different memory regions without resetting. The determination circuit dynamically matches the requested memory region address with stored tokens, enabling flexible and efficient access control across multiple regions.

Inventive Principle:
Principle #15Dynamics

2Productivity

If multiple access tokens are pre-loaded and stored, then access efficiency is improved, but device complexity increases

Engineering Contradiction:
Improveaccess efficiencyVSAvoiddevice complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The access token storing unit serves multiple functions: it stores multiple access tokens, manages token validity, and works with the determination circuit to enforce access control policies. This multi-functionality allows the system to achieve high access efficiency without proportionally increasing device complexity, as a single component performs several critical tasks.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The access token storing unit acts as an intermediary between the CPU and the shared memory access control mechanism. It buffers multiple tokens and provides them to the determination circuit, which mediates between the stored tokens and the actual memory access requests. This intermediary structure simplifies the overall system architecture while enabling efficient multi-region access.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If access control is enforced for each memory region, then security is improved, but processing overhead increases

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing overhead
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Access control tokens are pre-loaded and validated before actual memory access operations. The determination circuit performs region matching against pre-stored tokens, establishing security permissions in advance. This preliminary validation ensures secure access control while reducing the processing overhead during actual memory operations, as the security checks are prepared beforehand.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10198365B2Information processing system, method and medium
Publication Date: 2019.02.05 FUJITSU LTD
  • US10198365B2 patent drawing
  • US10198365B2 patent drawing
  • US10198365B2 patent drawing

AI summary

An information processing system includes: a shared memory including a plurality of regions comprising first region and second region; a memory token storing unit configured to store memory tokens, each of the memory tokens controlling access to a region of the shared memory; an access token storing unit configured to store access tokens for accessing a specific region of the shared memory, the access tokens including first access token to access the first region and second access token to access the second region; a processor configured to add the access tokens to a request for accessing the first region and transmit the request including the added access tokens; and a determination circuit configured to receive the transmitted request including the added access tokens, compare the added access tokens with a memory token corresponding to the first region, and control access to the first region based on the comparison.