Memory management device and non-transitory computer readable storage medium

A non-transitory computer readable recording medium storing a program which is executed by a computer, the program configured to:

• execute reading and writing for a first storage, the first storage storing a table tree including a parent table and a child table, and a verifier tree including a parent verifier associated with the parent table and a child verifier associated with the child table, the parent verifier being used for verifying the child table and child verifier;
• translate a first address into a second address, based on a secure table tree which is a part of the table tree and is stored in a secure second storage, the secure second storage storing a secure verifier tree which is a part of the verifier tree;
• calculate first verification information, when a first child table included in the table tree and needed for translating the first address into the second address is not included in the secure table tree, based on the first child table in the table tree and a first child verifier included in the verifier tree and associated with the first child table;
• execute first verification, based on the first verification information and a first parent verifier included in the secure verifier tree and associated with a first parent table referring to the first child table;
• incorporate the first child table and the first child verifier into the secure table tree and the secure verifier tree, respectively, when a result of the first verification designates validity;
• determine whether data as a reference target is first data having a read-only attribute or second data having a read/write attribute;
• calculate second verification information, based on the first data read from the first storage and a secure value which varies according as the first data is updated, if the data is the first data;
• and
• execute second verification, based on a verifier stored in at least one of the first and second storages and corresponding to the first data, and the second verification information, and store the first data in a third storage when a result of the second verification designates validity.

A memory management device comprising:

• a nonvolatile first storage;
• a volatile second storage;
• and
• a processor, wherein
• the nonvolatile first storage stores data, a table tree designating reference relationship from a first address to the data, and a verifier tree including verifiers corresponding to respective data unit and respective table unit in the table tree, and having a same graph structure as the table tree,
• the processor reads, from the first storage, a first table needed for address translation for the data, and a first verifier associated with the first table,
• the processor executes first verification for the first table and the first verifier read from the first storage,
• the volatile second storage stores the first table and the first verifier when a result of the first verification designates validity,
• the processor translates the first address into a second address designating the data, based on a verified table tree stored in the second storage, when a reference request of the data is received,
• the processor stores the data without storing the verifier,
• the processor executes second verification based on first verification information in an already verified verifier tree stored in the second storage when the data has a read/write attribute, and stores the data in the second storage when a result of the second verification designates validity, and
• the processor does not execute the second verification based on the already verified verifier tree stored in the second storage, when the data has a read-only attribute, but executes third verification based on second verification information and a secure value, and stores the data in the third storage when a result of the third verification designates validity, the second verification information being calculated based on the data and the secure value and being stored in the first storage, the secure value varying according as the data is updated.