Secure world access method, apparatus, and system
AssigneeHuawei Technologies Co., Ltd.
InventorXiaoqiang Du
Life of this patent
Estimating the term…
Abstract
A Secure World access method includes creating a first virtual machine (VM) in a Normal World, loading a plurality of programs in the Normal World to the first VM, where the plurality of programs include a kernel and at least one user program, the kernel runs in a first-level mode, the at least one user program runs in a second-level mode, and the first level is higher than the second level, when it is determined that a first user program in the at least one user program needs to access a Secure World, creating, in the Normal World, a second VM running in the first-level mode, and stripping the first user program from the first VM, and loading the first user program to the second VM such that the first user program accesses the Secure World using the second VM.
Claims20
A Secure World access method, comprising:
- creating a first virtual machine in a Normal World;
- loading a plurality of programs from the Normal World to the first virtual machine after creating the first virtual machine, wherein the plurality of programs comprises a kernel and a first user program, wherein the kernel executes in a first-level mode, wherein the first user program executes in a second-level mode, and wherein the first-level mode is higher than the second-level mode;
- creating, in the Normal World, a second virtual machine that executes in the first-level mode when the first user program needs to access a Secure World;
- and
- stripping the first user program from the first virtual machine after creating the second virtual machine;
- and
- loading the first user program to the second virtual machine to enable the first user program to access the Secure World using the second virtual machine.
A computer program product for Secure World access comprising a virtual machine monitor that, when executed by a hardware layer of a Normal World, cause an apparatus to be configured to:
- create, in the Normal World, a first virtual machine;
- load a plurality of programs in the Normal World to the first virtual machine after creating the first virtual machine, wherein the plurality of programs comprise a kernel and a first user program, wherein the kernel executes in a first-level mode, wherein the first user program executes in a second-level mode, and wherein the first-level mode is higher than the second-level mode;
- create, in the Normal World, a second virtual machine when the first user program needs to access a Secure World;
- strip the first user program from the first virtual machine after creating the second virtual machine;
- and
- load the first user program to the second virtual machine after the first user program is stripped from the first virtual machine to enable the first user program to access a Secure World using the second virtual machine,
- wherein the second virtual machine is implemented in the second-level mode.
A Secure World access apparatus, comprising:
- a processor;
- and
- a memory coupled to the processor and storing instructions that, when executed by the processor, cause the Secure World access apparatus to be configured to:
- create a first virtual machine in a Normal World;
- load a plurality of programs from the Normal World to the first virtual machine, wherein the plurality of programs comprise a kernel and a first user program, wherein the kernel executes in a first-level mode, wherein at least one user program executes in a second-level mode, and wherein the first-level mode is higher than the second-level mode;
- create, in the Normal World, a second virtual machine that executes in the first-level mode when the first user program needs to access a Secure World;
- strip the first user program from the first virtual machine;
- and
- load the first user program to the second virtual machine to enable the first user program to access the Secure World using the second virtual machine.
Dependencies are inferred from the claim text.