利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

25 条记录 (耗时 0.024 秒)

    Virtualizing processor memory protection with “L1 iterate and L2 drop/repopulate”
    2.
    发明授权
    Virtualizing processor memory protection with “L1 iterate and L2 drop/repopulate” 有权
    虚拟化处理器内存保护与“L1迭代和L2丢弃/重新填充”

    公开(公告)号：US08832351B2

    公开(公告)日：2014-09-09

    申请号：US12966766

    申请日：2010-12-13

    申请人： Harvey Tuch ,  Prashanth P. Bungale ,  Scott W. Devine ,  Lawrence S. Rogel

    发明人： Harvey Tuch ,  Prashanth P. Bungale ,  Scott W. Devine ,  Lawrence S. Rogel

    IPC分类号： G06F12/10 ,  G06F12/14

    CPC分类号： G06F12/1483 ,  G06F12/1009 ,  G06F12/145 ,  G06F2212/151

    摘要： In a computing system including a processor and virtualization software including a guest operating system (OS) that utilizes a guest domain access control register (DACR) containing domain access information and guest page tables including first level page tables (L1 page tables) and second level page tables (L2 page tables), which guest page tables contain: (a) domain identifiers used to obtain domain access information from the guest DACR and (b) access permission information, wherein the domain access information and the access permission information are combined to provide an effective guest access permission, in accordance with one embodiment, a method for providing shadow page tables and processor DACR settings that virtualize processor memory protection includes: the virtualization software providing a shadow page table wherein: (a) domain identifiers in the shadow page table are used to identify domain access information in the processor DACR that are mapped from the domain access information in the guest DACR; and (b) access permissions in the shadow page table that are mapped from the effective access permission information in the guest page tables and guest DACR; wherein a memory management unit (MMU) in the processor traverses the shadow page table, accesses the processor DACR, and combines the mapped domain access information in the processor with the mapped access permission in the shadow page table to reflect the guest intended effective access permissions while isolating the guest from the virtualization software.

    摘要翻译： 在包括处理器和虚拟化软件的计算系统中，包括使用包含域访问信息的访客域访问控制寄存器（DACR）的访客操作系统（OS）和包括第一级页表（L1页表）和第二级的访客页表 访客页表包含的页表（L2页表）：（a）用于从访客DACR获取域访问信息的域标识符和（b）访问许可信息，其中将域访问信息和访问许可信息组合到 提供有效的访客权限，根据一个实施例，提供虚拟化处理器存储器保护的影子页表和处理器DACR设置的方法包括：虚拟化软件提供影子页表，其中：（a）影子页面中的域标识符 表用于识别从域ac映射的处理器DACR中的域访问信息 在客人DACR中查询信息; 和（b）从访客页表和访客DACR中的有效访问权限信息映射的影子页表中的访问权限; 其中，所述处理器中的存储器管理单元（MMU）遍历所述影子页表，访问所述处理器DACR，并且将所述处理器中的所映射的域访问信息与所述映射页表中的映射访问许可组合以反映所述客户预期的有效访问权限 同时将guest虚拟机与虚拟化软件隔离。