Virtualization-based platform protection technology

US9842065B2 · kind B2 · utility

Assignee

• Intel Corporation · US

Inventors

• Rajesh Banginwar · Hillsboro, US
• Sumanth Naropanth · Bengaluru, IN
• Sunil K. Notalapati Prabhakara · Bengaluru, IN
• Surendra K. Singh · Bengaluru, IN
• Arvind Mohan · Bengaluru, IN
• Ravi L. Sahita · Portland, US
• Rahil Malhotra · Kanchinakote, IN
• Aman Bakshi · Kanchinakote, IN
• Vasudevarao Kamma · Bengaluru, IN
• Jyothi Nayak · Kanchinakote, IN
• Vivek Thakkar · Elk Grove Village, US
• Royston A. Pinto · Nagamangala, IN

Key dates

• Filing date: Jun 15, 2015
• Grant date: Dec 12, 2017
• Expiry date: Nov 13, 2035

Classification

• Technology area (CPC G): Physics
• CPC primary: G06F2221/2149
• WIPO field: Computer technology
• WIPO sector: Electrical engineering

Abstract

A data processing system (DPS) uses platform protection technology (PPT) to protect some or all of the code and data belonging to certain software modules. The PPT may include a virtual machine monitor (VMM) to enable an untrusted application and a trusted application to run on top of a single operating system (OS), while preventing the untrusted application from accessing memory used by the trusted application. The VMM may use a first extended page table (EPT) to translate a guest physical address (GPA) into a first host physical address (HPA) for the untrusted application. The VMM may use a second EPT to translate the GPA into a second HPA for the trusted application. The first and second EPTs may map the same GPA to different HPAs. Other embodiments are described and claimed.