Mechanism for restricting access of critical disk blocks
OwnerDavid Poisner, Steve Grobmaninventors
Life of this patent
Estimating the term…
Abstract
According to one embodiment, an apparatus is presented. The apparatus includes a storage device, a hypervisor, a plurality of partitions mapped by the hypervisor, and a key created by the hypervisor to prevent one of the plurality of partitions from accessing a protected block range of the storage device. In one embodiment, a disk controller is coupled to the plurality of partitions to interface with the storage device, and the disk controller is programmed with the key in order to restrict access to the protected block range.
Claims25
An apparatus, comprising:
- a storage device;
- a hypervisor;
- a plurality of partitions mapped by the hypervisor;
- and
- a key created by the hypervisor to prevent one or more of the plurality of partitions from read and write access to a protected block range of the storage device.
A method, comprising:
- creating a first key to protect a protected block range of a disk;
- detecting an attempt to access a block of the protected block range through a disk controller by providing a second key;
- and
- denying access to the protected block range if the second key does not match the first key.
A system, comprising:
- a processor;
- a chip coupled to the processor;
- a storage device coupled to the chip;
- a plurality of partitions coupled to the processor mapped by a hypervisor;
- and
- a key created by the hypervisor to prevent one or more of the plurality of partitions from read and write access to a protected block range of the storage device.
An article of manufacture comprising:
- a machine-accessible medium including data that, when accessed by a machine, cause the machine to perform operations comprising, creating a first key to protect a protected block range of a disk;
- detecting an attempt to access a block of the protected block range through a disk controller by providing a second key;
- and
- denying access to the protected block range if the second key does not match the first key.
Dependencies are inferred from the claim text.