Shared memory management method, virtual machine monitor, and computing device

A computing device comprising:

• a virtual machine monitor, a virtual machine, and a trusted execution environment (TEE), wherein:
• an untrusted part and a trusted part of a target application program independently run in the virtual machine and the TEE, the virtual machine maintains a first page table of the untrusted part, and the virtual machine monitor maintains a second page table of the trusted part;
• the virtual machine monitor is configured to:
• determine, based on address information of shared memory configured in the virtual machine and the virtual machine monitor, whether a first address is comprised in the shared memory when a page fault occurs in response to the trusted part requesting to access the first address;
• and
• in response to determining that the first address is comprised in the shared memory, send, by the virtual machine monitor, an interrupt notification to the virtual machine;
• the virtual machine is configured to:
• in response to the interrupt notification and determining, based on the address information, that the first address is comprised in the shared memory, validate a first page table entry in the first page table;
• and
• return a response message to the virtual machine monitor, wherein the first page table entry comprises address mapping information of a first page that comprises the first address;
• and
• the virtual machine monitor is further configured to validate a second page table entry corresponding to the first page in the second page table based on the address mapping information in response to the response message.

A non-transitory, computer-readable medium storing one or more instructions executable by a computing device comprising a virtual machine monitor, a virtual machine, and a trusted execution environment (TEE), an untrusted part and a trusted part of a target application program independently run in the virtual machine and the TEE, the virtual machine maintains a first page table of the untrusted part, and the virtual machine monitor maintains a second page table of the trusted part, and wherein the one or more instructions are executable by the computing device to perform operations comprising:

• determining, by the virtual machine monitor based on address information of shared memory configured in the virtual machine and the virtual machine monitor, whether a first address is comprised in the shared memory when a page fault occurs in response to the trusted part requesting to access the first address;
• in response to determining that the first address is comprised in the shared memory, sending, by the virtual machine monitor, an interrupt notification to the virtual machine;
• in response to the interrupt notification and determining, based on the address information, that the first address is comprised in the shared memory, validating, by the virtual machine, a first page table entry in the first page table;
• returning, by the virtual machine, a response message to the virtual machine monitor, wherein the first page table entry comprises address mapping information of a first page that comprises the first address;
• and
• validating, by the virtual machine monitor, a second page table entry in the second page table based on the address mapping information.