Access to Memory Region Including Confidential Information
AssigneeHewlett Packard Enterprise Development LP
InventorTed A. Hadley
Life of this patent
Estimating the term…
Abstract
Embodiments herein relate to accessing a memory region including confidential information. A memory request from a process may be received. The memory request may include a process ID (PID) of the process, a requested memory address, and a requested access type. The memory request may be compared to a permission set associated with a memory region including the confidential information. Access to the memory region by the process may be controlled based on the comparison.
Claims15
A device comprising:
- a permission module to receive a memory request from a process, the memory request including a process ID (PID) of the process, a requested memory address, and a requested access type, wherein
- the permission module compares the memory request to a permission set associated with a memory region storing confidential information, and
- the permission module controls access to the memory region by the process based on the comparison.
A method for memory access, comprising:
- receiving from a process a request to access to a memory region having confidential information, the request including a process ID (PID) of the process, a requested address, and a requested access type;
- comparing the PID of the process to one or more allowed PIDs;
- comparing the requested address to an allowed address range, if the one or more allowed PIDs include the PID of the process;
- comparing the requested access type to one or more allowed access types, if the allowed address range includes the requested address;
- and
- allowing the process to access the memory region, if the one or more allowed access types includes the requested access type.
A non-transitory computer-readable storage medium storing instructions that, if executed by a processor of a device, cause the processor to:
- compare a process DI (PID) of a process to one or more allowed PIDs;
- compare a requested address to an allowed address range;
- compare the requested access type to one or more allowed access types;
- and
- allow the process to access a memory region including confidential information, if the one or more allowed PIDs includes the PD of the process, the allowed address range includes the requested address and the one or more allowed access types includes the requested access type.
Dependencies are inferred from the claim text.