Translation look-aside buffer supporting mutually untrusted operating systems

A method for operating a translation look-aside buffer comprising a given number N of entries for storing N respective address translations each of which associate a portion of a given virtual address with a portion of a given physical address, comprising:

• a first mode of operation of a processor incorporating said buffer for accessing data stored in a physical memory each entry in said buffer including a first field for storing the virtual address portion, a second field for storing an intermediate address portion, and a third field for storing the physical address portion, the first and third fields mutually associated via the second field,
• in response to a request for access to external memory in the first mode of operation of the processor, addressing the buffer by the content of the first fields, and outputting from the buffer the physical address portion stored in the third field of a given entry, when the buffer is addressed by an input value corresponding to the virtual address portion stored in the first field of said entry;
• when the address translation corresponding to the access request is not available in the buffer, the first field and the second field of a selected entry in the buffer are updated in a second mode of operation of the processor in which the third field is not accessible;
• and
• the value stored in the second field of the entry in the buffer is read in a third mode of operation of the processor, after the first field and the second field are updated, and the third field of the entry in the buffer is updated in said third mode of operation of the processor.

An electronic circuit, comprising:

• a translation look-aside buffer having a plurality of address storage lines, each storage line comprising memory registers for storing address fields, including a first address field for storing a virtual page number, a second address field for storing an intermediate page number, and a third address field for storing a physical page number, the buffer configured to operate in a first mode to output the content of the memory register storing the physical page number in response to input of a virtual page number in a corresponding memory register that is associated with the memory register storing the physical page number and in response to output of a memory register storing an intermediate page number in the respective address storage lines to operate in a second mode wherein the memory register of the virtual page number and the memory register of the intermediate page number on the respective address storage line are write accessible and the memory register storing the physical page number is not write accessible, and to operate in a third mode wherein the buffer is configured to output content of the memory register storing the physical page number in response to a direct access to external memory request signal addressed to the memory register storing the intermediate page number on the corresponding address storage line when an input value of the request signal corresponds to a value of the intermediate page number.

A method of operating a processor having a translation look-aside buffer having a plurality of address storage lines, each address storage line including memory registers for storing address fields that include a first address field for storing a virtual page number, a second address field for storing an intermediate page number, and a third address field for storing a physical page number, the method comprising:

• a first operating mode of receiving an input value in the first address field, and outputting from the third address field a physical page number when the input value corresponds to the virtual page number stored in the first address field;
• in a second operating mode wherein when the input value does not match a virtual page number in the buffer, the first and the second address fields of a selected entry in the buffer are updated and the third address field is not write accessible;
• and
• in a third operating mode of, in response to a request for direct access to external memory, addressing the buffer with the content of the second address field;
• and
• outputting from the buffer the physical address number stored in the third address field when the buffer is addressed by an input value corresponding to the value stored in the second address field.

A translation look-aside buffer adapted for operation with a memory having physical addresses for data stored therein and a central processing unit (CPU), the CPU supporting multiple guest operating systems (OS), the buffer comprising:

• a plurality of memory registers, each memory register having a first field accessible by a virtual page number (VPN), a second field accessible by an intermediate page number (IPN), and a third field accessible by a physical page number (PPN);
• the translation look-aside buffer configured to support each guest OS in a user mode of operation a privileged mode of operation via the VPN and IPN addresses;
• and
• the translation look-aside buffer configured to operate in a virtual machine monitor (VMM) mode of operation via the IPN and PPN addresses, the VMM mode adapted as the only mode to have access to the PPN address to accommodate guest OS's running in parallel on the CPU to prevent one guest OS from accessing memory areas reserved for other guest OS's, to protect one guest OS from attack from another guest OS, and to protect the data accessed via the PPN addresses from unauthorized guest OS access wherein the processor operates in a first mode of operation such that the buffer is addressable by the content of the first field, the buffer configured so that, in response to a request for access to external memory, it outputs the PPN address by an input value corresponding to the VPN stored in the first field, and for each entry, the first field and the second field are at least write accessible in a second mode of operation of the processor in which the third field is not accessible, and for each entry the second field is read accessible in a third mode of operation of the processor corresponding to the VMM mode, and the third field is at least write accessible in the third mode of operation of the processor.