会员体验
专利管家(专利管理)
工作空间(专利管理)
风险监控(情报监控)
数据分析(专利分析)
侵权分析(诉讼无效)
联系我们
交流群
官方交流:
QQ群: 891211   
微信请扫码    >>>
现在联系顾问~
热词
    • 3. 发明授权
    • Virtualizing processor memory protection with “L1 iterate and L2 drop/repopulate”
    • 虚拟化处理器内存保护与“L1迭代和L2丢弃/重新填充”
    • US08832351B2
    • 2014-09-09
    • US12966766
    • 2010-12-13
    • Harvey TuchPrashanth P. BungaleScott W. DevineLawrence S. Rogel
    • Harvey TuchPrashanth P. BungaleScott W. DevineLawrence S. Rogel
    • G06F12/10G06F12/14
    • G06F12/1483G06F12/1009G06F12/145G06F2212/151
    • In a computing system including a processor and virtualization software including a guest operating system (OS) that utilizes a guest domain access control register (DACR) containing domain access information and guest page tables including first level page tables (L1 page tables) and second level page tables (L2 page tables), which guest page tables contain: (a) domain identifiers used to obtain domain access information from the guest DACR and (b) access permission information, wherein the domain access information and the access permission information are combined to provide an effective guest access permission, in accordance with one embodiment, a method for providing shadow page tables and processor DACR settings that virtualize processor memory protection includes: the virtualization software providing a shadow page table wherein: (a) domain identifiers in the shadow page table are used to identify domain access information in the processor DACR that are mapped from the domain access information in the guest DACR; and (b) access permissions in the shadow page table that are mapped from the effective access permission information in the guest page tables and guest DACR; wherein a memory management unit (MMU) in the processor traverses the shadow page table, accesses the processor DACR, and combines the mapped domain access information in the processor with the mapped access permission in the shadow page table to reflect the guest intended effective access permissions while isolating the guest from the virtualization software.
    • 在包括处理器和虚拟化软件的计算系统中,包括使用包含域访问信息的访客域访问控制寄存器(DACR)的访客操作系统(OS)和包括第一级页表(L1页表)和第二级的访客页表 访客页表包含的页表(L2页表):(a)用于从访客DACR获取域访问信息的域标识符和(b)访问许可信息,其中将域访问信息和访问许可信息组合到 提供有效的访客权限,根据一个实施例,提供虚拟化处理器存储器保护的影子页表和处理器DACR设置的方法包括:虚拟化软件提供影子页表,其中:(a)影子页面中的域标识符 表用于识别从域ac映射的处理器DACR中的域访问信息 在客人DACR中查询信息; 和(b)从访客页表和访客DACR中的有效访问权限信息映射的影子页表中的访问权限; 其中,所述处理器中的存储器管理单元(MMU)遍历所述影子页表,访问所述处理器DACR,并且将所述处理器中的所映射的域访问信息与所述映射页表中的映射访问许可组合以反映所述客户预期的有效访问权限 同时将guest虚拟机与虚拟化软件隔离。