Interrupt control using a guest owned backing page

A system, comprising:

• a memory configured to store a guest owned backing page;
• and
• a processor operatively coupled to the memory, wherein the processor is configured to:
• receive a request from a trusted layer of a virtual machine to store control information in the guest owned backing page to allow or block an interrupt, wherein the virtual machine comprises a plurality of layers and the trusted layer is designated by a security co-processor performing a security process;
• and
• in response to the request and in response to detecting the interrupt, allow or block the interrupt based on the control information.

A system, comprising:

• a memory configured to store a guest owned paging page;
• a processor operatively coupled to the memory, wherein the processor is configured to receive a request from a trusted layer of a virtual machine to store control information in the guest owned backing page to allow or block an interrupt, wherein the virtual machine comprises a plurality of layers and the trusted layer is designated by a security co-processor performing a security process;
• and
• input/output memory management unit (IOMMU) hardware configured to, in response to detecting the interrupt, allow or block the interrupt based on the control information.