-
公开(公告)号:EP3825851A1
公开(公告)日:2021-05-26
申请号:EP20217437.1
申请日:2016-05-13
申请人: INTEL Corporation
发明人: BANGINWAR, Rajesh P. , NAROPANTH, Sumanth , NOTALAPATI PRABHAKARA, Sunil K. , SINGH, Surendra K. , MOHAN, Arvind , SAHITA, Ravi L. , MALHOTRA, Rahil , BAKSHI, Aman , KAMMA, Vasudevarao , NAYAK, Jyothi , THAKKAR, Vivek , PINTO, Royston A.
摘要: A data processing system (DPS) uses platform protection technology (PPT) to protect some or all of the code and data belonging to certain software modules. The PPT may include a virtual machine monitor (VMM) to enable an untrusted application and a trusted application to run on top of a single operating system (OS), while preventing the untrusted application from accessing memory used by the trusted application. The VMM may use a first extended page table (EPT) to translate a guest physical address (GPA) into a first host physical address (HPA) for the untrusted application. The VMM may use a second EPT to translate the GPA into a second HPA for the trusted application. The first and second EPTs may map the same GPA to different HPAs. Other embodiments are described and claimed.
-
公开(公告)号:EP4339818A3
公开(公告)日:2024-06-19
申请号:EP24150417.4
申请日:2016-05-13
申请人: Intel Corporation
发明人: BANGINWAR, Rajesh P. , NAROPANTH, Sumanth , NOTALAPATI PRABHAKARA, Sunil K. , SINGH, Surendra K. , MOHAN, Arvind , SAHITA, Ravi L. , MALHOTRA, Rahil , BAKSHI, Aman , KAMMA, Vasudevarao , NAYAK, Jyothi , THAKKAR, Vivek , PINTO, Royston A.
CPC分类号: G06F9/45545 , G06F9/45558 , G06F2009/4558320130101 , G06F2009/4558720130101 , G06F21/57 , G06F12/023 , G06F12/109 , G06F2212/15120130101 , G06F2212/65120130101 , G06F12/1491 , G06F12/145 , G06F21/53 , G06F2212/105220130101 , G06F2221/214920130101
摘要: A data processing system (DPS) uses platform protection technology (PPT) to protect some or all of the code and data belonging to certain software modules. The PPT may include a virtual machine monitor (VMM) to enable an untrusted application and a trusted application to run on top of a single operating system (OS), while preventing the untrusted application from accessing memory used by the trusted application. The VMM may use a first extended page table (EPT) to translate a guest physical address (GPA) into a first host physical address (HPA) for the untrusted application. The VMM may use a second EPT to translate the GPA into a second HPA for the trusted application. The first and second EPTs may map the same GPA to different HPAs. Other embodiments are described and claimed.
-
公开(公告)号:EP4339818A2
公开(公告)日:2024-03-20
申请号:EP24150417.4
申请日:2016-05-13
申请人: Intel Corporation
发明人: BANGINWAR, Rajesh P. , NAROPANTH, Sumanth , NOTALAPATI PRABHAKARA, Sunil K. , SINGH, Surendra K. , MOHAN, Arvind , SAHITA, Ravi L. , MALHOTRA, Rahil , BAKSHI, Aman , KAMMA, Vasudevarao , NAYAK, Jyothi , THAKKAR, Vivek , PINTO, Royston A.
IPC分类号: G06F21/57
摘要: A data processing system (DPS) uses platform protection technology (PPT) to protect some or all of the code and data belonging to certain software modules. The PPT may include a virtual machine monitor (VMM) to enable an untrusted application and a trusted application to run on top of a single operating system (OS), while preventing the untrusted application from accessing memory used by the trusted application. The VMM may use a first extended page table (EPT) to translate a guest physical address (GPA) into a first host physical address (HPA) for the untrusted application. The VMM may use a second EPT to translate the GPA into a second HPA for the trusted application. The first and second EPTs may map the same GPA to different HPAs. Other embodiments are described and claimed.
-
公开(公告)号:EP3308317A1
公开(公告)日:2018-04-18
申请号:EP16812103.6
申请日:2016-05-13
申请人: Intel Corporation
发明人: BANGINWAR, Rajesh P. , NAROPANTH, Sumanth , NOTALAPATI PRABHAKARA, Sunil K. , SINGH, Surendra K. , MOHAN, Arvind , SAHITA, Ravi L. , MALHOTRA, Rahil , BAKSHI, Aman , KAMMA, Vasudevarao , NAYAK, Jyothi , THAKKAR, Vivek , PINTO, Royston A.
IPC分类号: G06F21/60 , G06F21/51 , G06F9/455 , G06F12/1009
CPC分类号: G06F12/145 , G06F9/45545 , G06F9/45558 , G06F9/485 , G06F12/023 , G06F12/109 , G06F21/53 , G06F21/57 , G06F2009/45583 , G06F2009/45587 , G06F2212/1052 , G06F2212/151 , G06F2212/651 , G06F2221/2149
摘要: A data processing system (DPS) uses platform protection technology (PPT) to protect some or all of the code and data belonging to certain software modules. The PPT may include a virtual machine monitor (VMM) to enable an untrusted application and a trusted application to run on top of a single operating system (OS), while preventing the untrusted application from accessing memory used by the trusted application. The VMM may use a first extended page table (EPT) to translate a guest physical address (GPA) into a first host physical address (HPA) for the untrusted application. The VMM may use a second EPT to translate the GPA into a second HPA for the trusted application. The first and second EPTs may map the same GPA to different HPAs. Other embodiments are described and claimed.
-
-
-