Virtual Machine Resource Access Control via Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Asymmetric multiprocessor systems with shared memory and I/O devices face challenges in system redesign due to strong dependencies between operating systems and hardware configurations, leading to reduced reliability and security, especially when changing specifications or encountering unintended actions from operating systems or programs.
Innovation Solution
A data processor with a resource access management module that allows multiple virtual machines to run under different operating systems, using mode registers and a virtual machine manager to control access to shared hardware resources, reducing contention and enhancing security by isolating actions between virtual machines.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Area of stationary object
If memory and I/O devices are shared among multiple CPUs to reduce terminal restrictions, then area efficiency is improved, but system reliability deteriorates due to potential collisions and unintended actions
Solution Approach 1:
The patent segments the shared memory and I/O device access space into multiple virtual address spaces, one for each virtual machine. The address translation mechanism divides the unified physical address space into isolated virtual address spaces, preventing collisions between different VMs while maintaining shared hardware resources.
Solution Approach 2:
The patent introduces an address translation mechanism as an intermediary between virtual machines and shared hardware resources. This intermediary translates virtual addresses to physical addresses and enforces access control, preventing unintended actions from affecting other VMs while allowing controlled sharing of memory and I/O devices.
2Ease of manufacture
If operating systems are designed with strong dependence on hardware configuration to simplify system design, then ease of manufacture is improved, but adaptability deteriorates when changing specifications
Solution Approach 1:
The patent implements dynamic address space configuration through virtual machines. The address translation mechanism can be reconfigured at runtime to create different virtual address spaces for different VMs, allowing the system to adapt to changing specifications without redesigning the operating system or hardware configuration.
Solution Approach 2:
The patent adds a virtual address space dimension between the operating system and hardware resources. This additional dimension allows the same hardware configuration to support multiple different OS environments and specification requirements without affecting the underlying hardware design.
3Productivity
If multiple virtual machines share hardware resources to improve resource utilization, then productivity is improved, but security deteriorates due to potential interference between VMs
Solution Approach 1:
The patent segments the address space into isolated virtual address spaces for each VM, allowing multiple VMs to share hardware resources while maintaining security boundaries. The address translation mechanism ensures that each VM can only access its allocated resources, preventing interference and security violations.
Solution Approach 2:
The address translation mechanism serves as a security intermediary that mediates all access to shared hardware resources. It verifies access permissions and translates virtual addresses to physical addresses, ensuring that VMs can share resources productively while maintaining security isolation.
Data Source
AI summary
A data processor includes: a central processing unit (CPU), in which a plurality of virtual machines (101), each running an application program under controls of different operating systems, and a virtual machine manager (190) for controlling the plurality of virtual machines are selectively arranged according to information set in mode registers (140, 150, 151); and a resource access management module (110) for managing access to hardware resource available for the plurality of virtual machines. The resource access management module accepts, as inputs, the information set in the mode registers and access control information of the central processing unit to the hardware resource, compares the information thus input with information set in a control register, and controls whether or not to permit access to the hardware resource in response to the access control information. As a result, redesign involved in changes in system specifications can be reduced, and a malfunction owing to resource contention can be prevented. The invention contributes to increase of security.