Memory management device and non-transitory computer readable storage medium

A non-transitory computer readable recording medium storing a program which is executed by a computer, the program configured to:

• execute reading and writing for a first storage device, the first storage device storing a table tree including a parent table and a child table, and a verifier tree including a parent verifier associated with the parent table and a child verifier associated with the child table, the parent verifier being used for verifying the child table and the child verifier;
• translate a first address into a second address based on a secure table tree which is a part of the table tree and is stored in a secure second storage device, the secure second storage device storing a secure verifier tree which is a part of the verifier tree;
• calculate verification information, when a first child table included in the table tree and needed for translating the first address into the second address is not included in the secure table tree, based on the first child table in the table tree and a first child verifier included in the verifier tree and associated with the first child table;
• execute verification, based on the verification information and a first parent verifier included in the secure verifier tree and associated with a first parent table referring to the first child table;
• and
• incorporate the first child table and the first child verifier into the secure table tree and the secure verifier tree, respectively, when a result of the verification designates validity.

A memory management device comprising:

• a nonvolatile first storage device;
• a volatile second storage device, and
• a processor, wherein
• the nonvolatile first storage device stores a table tree and a verifier tree,
• the table tree defines reference relationship from a first address to the data, and
• the verifier tree includes verifiers corresponding to respective data unit and respective table unit in the table tree, and the verifier tree has a same graph structure as at least part of the table tree;
• the processor reads, from the first storage device, a first table needed for address translation for the data, and a first verifier associated with the first table;
• the processor executes verification for the first table and the first verifier read from the first storage device;
• the volatile second storage device stores the first table and the first verifier when a result of the verification designates validity;
• the processor translates the first address into a second address designating the data, based on a verified table tree stored in the second storage device, when a reference request of the data is received.