公开(公告)号：US20220382577A1

公开(公告)日：2022-12-01

申请号：US17883541

申请日：2022-08-08

Applicant: MediaTek Inc.

Inventor： Chih-Hsiang Hsiao ,  Hung-Wen Chien

IPC: G06F9/455

Abstract: A system controls access to a physical address (PA) space. The system includes multiple system resources addressable within the PA space, and multiple processing circuits executing multiple virtual machines (VMs). A given region of the PA space is dedicated to addressing the VMs. The system also includes multiple memory management units (MMUs) coupled to corresponding processing circuits. A given MMU is operative to translate a virtual address indicated in an access request from a processing circuit into a requested PA that is accessible by the processing circuit according to a configurable setting of the given MMU. The system further includes multiple memory protection units (MPUs). A given MPU, which is coupled to a target system resource allocated with the requested PA, is operative to grant or deny the request based on information indicating whether the requested PA is accessible to a requesting VM executed on the processing circuit.

公开(公告)号：US20230091722A1

公开(公告)日：2023-03-23

申请号：US17978995

申请日：2022-11-02

Applicant: MEDIATEK INC.

Inventor： Chih-Hsiang Hsiao ,  Hung-Wen Chien ,  Yu-Chi Chu ,  Pei-Lun Suei

IPC: G06F3/06

Abstract: A computing system includes a processor, and the processor is arranged to execute: a guest virtual machine (VM), a hypervisor, and a primary VM, wherein an operating system (OS) runs on the guest VM, and an application (APP) runs on the OS. The kernel of the OS includes a protection service module and a memory management unit (MMU) manager. The protection service module is arranged to receive at least one virtual address and a first size information sent by a client of the APP. The primary VM includes a protection manager, and the protection manager is arranged to obtain a physical address array and a second size information according to the at least one virtual address and the first size information sent by the protection service through the hypervisor.