System and method for intra-level privilege seperation for system software on arm
AssigneeSeoul National University R&Db Foundation
InventorsYunheung Paek, Yeongpil Cho
Life of this patent
Estimating the term…
Abstract
Embodiments relate to an intra-level privilege separation method for managing system software on an ARM processor, including dividing the system software into an inner domain and an outer domain having different privilege levels, determining whether to permit the access to a memory region of the inner domain based on the type of domain that is currently in control among the inner domain and the outer domain, setting the memory region of the inner domain outside of valid virtual address range when the outer domain is in control, and setting memory regions of the inner domain and the outer domain inside of valid virtual address range when the inner domain is in control.
Claims12
An intra-level privilege separation system for managing system software on an ARM processor, comprising:
- an intra-level domain isolation unit configured to divide the system software into an inner domain and an outer domain having different privilege levels;
- and
- a domain switching unit configured to determine whether to permit the access to a memory region of the inner domain based on the type of domain that is currently in control among the inner domain and the outer domain,
- wherein the domain switching unit inserts a code snippet confirming a value of a translation control register (TCR) into control instructions of the translation control register.
An intra-level privilege separation method for managing system software on an ARM processor, comprising:
- dividing the system software into an inner domain and an outer domain having different privilege levels;
- determining whether to permit the access to a memory region of the inner domain based on the type of domain that is currently in control among the inner domain and the outer domain;
- setting the memory region of the inner domain outside of valid virtual address range when the outer domain is in control;
- and
- setting memory regions of the inner domain and the outer domain inside of valid virtual address range when the inner domain is in control,
- wherein determining whether to permit the access to the memory region is performed by a domain switching unit, the domain switching unit inserts a code snippet confirming a value of a translation control register (TCR) into control instructions of the translation control register.
Dependencies are inferred from the claim text.