Back to results
US 2025/0086122 A1Published application
Securing Paged Memory with Tags
AssigneeAvago Technologies International Sales Pte. Limited
InventorsJason Herrick, Darren Neuman
Life of this patent
Estimating the term…
Abstract
Solutions that can provide secure access to memory. Some solutions assign tags to pages of memory and ensure secure access to each page of memory by ensuring that a client seeking to access a tagged page of memory is authorized to access pages marked by that tag.
Claims20
A set-top box, comprising:
- one or more processors, the one or more processors comprising a secure processor;
- a set of instructions encoded on a non-transitory computer readable medium and executable by the secure processor, the set of instructions comprising:
- instructions to store, with a secure client, a plurality of tags in a secure random access memory (RAM) in a secure environment of the set-top box, each one of the plurality of tags being assigned to a different one of a plurality of memory pages in a system dynamic RAM (DRAM) of the set-top box, the plurality of tags comprising a first tag assigned to a first memory page, and the secure RAM being separate from the system DRAM;
- and
- the memory manager, comprising:
- circuitry to store the plurality of tags in the secure RAM;
- circuitry to receive an access request, from an untrusted client, for access to the first memory page;
- circuitry to identify the first tag assigned to the first memory page;
- circuitry to determine whether the untrusted client is authorized to access the first memory page, based at least in part on the first tag;
- and
- circuitry to provide the untrusted client with access to the first memory page based at least in part on a determination that the untrusted client is authorized to access the first memory page.
8 more elements
A device, comprising:
- logic to store, in a secure random-access memory (RAM), a plurality of tags, each one of the plurality of tags being assigned to a different one of a plurality of memory pages in a system dynamic RAM (DRAM), the plurality of tags comprising a first tag assigned to a first memory page;
- logic to receive an access request from a client for access to the first memory page;
- logic to identify the first tag assigned to the first memory page;
- logic to determine whether the client is authorized to access the first memory page;
- and
- logic to provide the client with access to the memory page based at least in part on a determination that the client is authorized to access the memory page.
3 more elements
A method, comprising:
- storing, in a secure random access (RAM), a plurality of tags, each one of the plurality of tags being assigned to a different one of a plurality of memory pages in a system dynamic RAM (DRAM), the plurality of tags comprising a first tag assigned to a first memory page;
- receiving an access request from a client for access to the first memory page;
- identifying the first tag assigned to the first memory page;
- determining whether the client is authorized to access the first memory page;
- and
- providing the client with access to the first memory page based at least in part on a determination that the client is authorized to access the first memory page.
3 more elements
Dependencies are inferred from the claim text.