Hardware Register Access Control for Virtual Machine Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current virtualization technologies face inefficiencies in register access due to software-based scheduling, resulting in high time consumption and low work efficiency when managing access conflicts between different virtual machines.
Innovation Solution
Implementing a data register access method that uses a dedicated target data register group for each virtual machine, with access permissions controlled by a target protection register, allowing virtual machines to access only their corresponding register groups, thereby isolating register groups on hardware without complex software control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software-based scheduling is used to manage register access conflicts between virtual machines, then access protection is implemented, but time consumption increases and work efficiency decreases
Solution Approach 1:
The patent replaces software-based scheduling with hardware-based register access control. A register access control circuit is implemented in the hardware to automatically manage access permissions between virtual machines, eliminating the need for software intervention and flag bit checking, thus improving access efficiency while maintaining protection
Solution Approach 2:
The patent introduces a register access control circuit as an intermediary hardware component between virtual machines and registers. This control circuit manages access permissions and resolves conflicts automatically at the hardware level, preventing direct software from needing to handle access protection
2Reliability
If software flag bits are used to control register access permissions, then access protection is achieved, but access speed becomes slow
Solution Approach 1:
The patent replaces software flag bit checking with hardware-based permission bits stored in protection registers. The register access control circuit directly reads permission bits from protection registers to determine access validity, eliminating software intervention and significantly improving access speed
3Productivity
If hardware-based register access control is implemented, then access efficiency is improved, but system complexity increases
Solution Approach 1:
The patent segments registers into multiple virtual machine-specific register groups, with each group having its own protection register. This segmentation allows independent control of access permissions for each virtual machine, simplifying the overall control structure while improving efficiency
Solution Approach 2:
The patent implements local permission control by assigning specific permission bits in protection registers to control access to specific register groups for specific virtual machines. This localized control approach simplifies the hardware structure compared to global control mechanisms
Data Source
AI summary
Disclosed are a data register access method, a computer readable storage medium and electronic device. The method includes: determining a first virtual machine identifier and first address of a to-be-accessed data register from a register access request generated by a target virtual machine; determining, based on the first virtual machine identifier, a target data register group and target protection register from at least two data register groups and a protection register group; determining an access permission of the target virtual machine to the target data register group using the target protection register; and determining, based on the first address, the to-be-accessed data register from the target data register group in response to that the access permission is access allowed, and accessing the to-be-accessed data register using the target virtual machine, whereby isolation between register groups is implemented on hardware, improving efficiency of accessing the register by the virtual machine.