Invention Grant
- Patent Title: Providing a secure communication channel between kernel and user mode components
-
Application No.: US17718449Application Date: 2022-04-12
-
Publication No.: US11977494B2Publication Date: 2024-05-07
- Inventor: Udi Yavo , Roy Katmor , Ido Kelson
- Applicant: Fortinet, Inc.
- Applicant Address: US CA Sunnyvale
- Assignee: Fortinet, Inc.
- Current Assignee: Fortinet, Inc.
- Current Assignee Address: US CA Sunnyvale
- Agency: Jaffery Watson Mendonsa & Hamilton LLP
- Main IPC: G06F12/14
- IPC: G06F12/14 ; G06F9/54 ; G06F12/10

Abstract:
Systems and methods for implementing a secure communication channel between kernel and user mode components are provided. According to an embodiment, a shared memory is provided through which a kernel mode process and a user mode process communicate. The kernel mode process is assigned read-write access to the shared memory. The user mode process is assigned read-only access to the shared memory. An offset-based linked list is implemented within the shared memory. Kernel-to-user messages are communicated from the kernel mode process to the user mode process by adding corresponding nodes to the offset-based linked list. One or more kernel-to-user messages are read by the user mode process following the offset-based linked list in order. The kernel mode process is signaled by the user mode process that a kernel-to-user message has been consumed by the user mode process through an input output control (ioctl) system call or an event object.
Public/Granted literature
- US20220237129A1 PROVIDING A SECURE COMMUNICATION CHANNEL BETWEEN KERNEL AND USER MODE COMPONENTS Public/Granted day:2022-07-28
Information query