Method and apparatus for controlling application to access memory

A method for controlling an application access a memory, comprising:

• receiving a first access request provided by the application and having a first access key;
• verifying the first access key;
• generating a second access key for the application if the verification of the first access key is successful;
• storing the second access key and providing the second access key to the application;
• receiving a second access request provided by the application and having a target address and the second access key;
• identifying whether the target address is within a reference address space indicative of a preset storage location of the memory, and verifying the second access key received from the application using the stored second access key;
• and
• generating an access control command according to an identification result of whether the target address is within the reference address space and a verification result of the second access key received from the application so as to restrict or permit the application to access the memory.

A method for controlling an application to access a memory, comprising:

• receiving a first configuration request provided by the application and having a first configuration key;
• verifying the first configuration key;
• generating a second configuration key for the application if the verification of the first configuration key is successful;
• storing the second configuration key and providing the second configuration key to the application;
• receiving a second configuration request provided by the application, wherein the second configuration request comprises access configuration rule data and the second configuration key, and the access configuration rule data is used to define an access authority of a reference address space indicative of a preset storage location of the memory;
• verifying the second configuration key received from the application using the stored second configuration key;
• and
• storing the access configuration rule data for security access to the memory, if the verification of the second configuration key received from the application is successful.

A method for controlling an application to access a memory, comprising:

• transmitting a first access request having a first access key to the memory;
• receiving a second access key;
• transmitting a second access request having a target address and the second access key to the memory;
• and
• accessing the memory.