CN112363797B - Virtual machine safe operation method, electronic equipment and storage medium - Google Patents

Abstract

The embodiment of the invention discloses a safe operation method of a virtual machine, electronic equipment and a storage medium, and relates to the technical field of virtual machines. The method comprises the following steps: the virtual machine stores the security information to be sent to the security processor into the current context of the virtual machine; the virtual machine stores the context containing the safety information into a safety storage area and generates a virtual machine exit event; the virtual machine manager calls an interface of the safety processor according to the virtual machine exit event; and the security processor responds to the call of the virtual machine manager and acquires the security information from the context stored in the security storage area. The security information to be sent to the security processor by the virtual machine is stored in the current context of the virtual machine and is stored in the security storage area, so that the virtual machine manager is prevented from accessing the context, malicious attacks by the virtual machine manager can be avoided, and the security operation of the virtual machine is guaranteed to a certain extent.

Description

A virtual machine safe operation method, electronic device and storage medium

technical field

The present invention relates to the technical field of virtual machines, and in particular, to a method for safely running a virtual machine, an electronic device and a storage medium.

Background technique

Root of trust (ROT for short, also known as root of trust in Chinese) is a processor independent of the general-purpose processor core, which is also called a security processor or a root of trust processor. , which is used to provide a Trusted Execution Environment (Trusted Execution Environment, TEE for short).

The inventor found in the process of realizing the invention of the present invention that the communication between the virtual machine and the root of trust needs to be completed with the help of the virtual machine manager, and the virtual machine manager acts as an intermediary role in the process, and it can use the role of the intermediary to carry out malicious attacks, The input and output data information is tampered with during the communication process, threatening the normal operation of the virtual machine.

SUMMARY OF THE INVENTION

In view of this, the embodiments of the present invention provide a method for safely running a virtual machine, an electronic device and a storage medium, which can ensure the safe running of the virtual machine to a certain extent.

To achieve the above object, the embodiments of the present invention adopt the following technical solutions:

On the one hand, an embodiment of the present invention provides a method for safely running a virtual machine, including: the virtual machine stores the security information to be sent to the security processor in the current context of the virtual machine;

The virtual machine stores the context containing the security information into a secure storage area, and generates a virtual machine exit event;

The virtual machine manager invokes the interface of the security processor according to the virtual machine exit event;

The security processor obtains the security information from the context stored in the secure storage area in response to a call by the virtual machine manager.

Optionally, after the security processor acquires the security information from the context stored in the security storage area in response to the invocation of the virtual machine manager, the method further includes:

The security processor performs a corresponding operation according to the security information, obtains a corresponding operation result, and stores the operation result in the context stored in the security storage area;

the virtual machine manager resumes the operation of the virtual machine;

The virtual machine obtains the operation result from the context stored in the secure storage area.

Optionally, according to the virtual machine exit event, the virtual machine manager invoking the interface of the security processor includes:

The virtual machine manager determines the interface of the security processor to be invoked according to the information indication in the virtual machine exit event, and stores the invocation request for invoking the interface of the security processor in a pending list, and resume the operation of the virtual machine;

When the system is idle or the security processor is idle, the virtual machine manager takes out the call request from the to-be-processed list, and calls the interface of the security processor according to the call request.

Optionally, after the security processor acquires the security information from the context stored in the security storage area in response to the invocation of the virtual machine manager, the method further includes:

The security processor performs a corresponding operation according to the security information, obtains a corresponding operation result, and stores the operation result in the context stored in the security storage area;

The virtual machine manager injects an interrupt into the virtual machine to resume the operation of the virtual machine;

The virtual machine obtains the operation result from the context stored in the secure storage area according to the interrupt.

In the method for running a virtual machine provided by the embodiment of the present invention, when the virtual machine communicates with the security processor, the virtual machine stores the security information to be sent to the security processor in the current context of the virtual machine; The virtual machine saves the context containing the security information into the security storage area, and generates a virtual machine exit event; the virtual machine manager calls the interface of the security processor according to the virtual machine exit event; the security processor responds The invocation of the virtual machine manager obtains the security information from the context stored in the secure storage area. Since the security information to be sent by the virtual machine to the security processor is stored in the current context of the virtual machine and stored in the security storage area, the virtual machine manager can be prevented or avoided from accessing the context in which the security information is stored. The security processor can access the virtual machine context in the secure storage area, and obtain the security information therein, so as to realize the security of communication between the virtual machine and the security processor. Therefore, malicious attacks by the virtual machine manager can be avoided, thereby ensuring the safe operation of the virtual machine to a certain extent.

In a second aspect, an embodiment of the present invention provides an electronic device, including: a casing, a processor, a memory, a circuit board, and a power supply circuit, wherein the circuit board is arranged inside the space enclosed by the casing, and the processor and the memory are arranged in the a circuit board; a power supply circuit for supplying power to each circuit or device of the server; a memory for storing executable program codes; the processor includes a first processor and a second processor, and the first processor is a security processor, a virtual machine manager and a virtual machine program are configured on the second processor; wherein,

The virtual machine stores the security information to be sent to the security processor in the current context of the virtual machine;

The virtual machine stores the context containing the security information into a secure storage area, and generates a virtual machine exit event;

The virtual machine manager invokes the interface of the security processor according to the virtual machine exit event;

The security processor obtains the security information from the context stored in the secure storage area in response to a call by the virtual machine manager.

Optionally, the security processor is further configured to, after the security processor acquires the security information from the context stored in the security storage area in response to the invocation of the virtual machine manager, Perform a corresponding operation according to the security information, obtain a corresponding operation result, and store the operation result in the context stored in the security storage area;

the virtual machine manager, further configured to restore the running of the virtual machine;

The virtual machine is further configured to acquire the operation result from the context stored in the secure storage area.

Optionally, the virtual machine manager is specifically configured to determine the interface of the security processor to be invoked according to the information indication in the virtual machine exit event, and store the invocation request for invoking the interface of the security processor. into the pending list, and resume the running of the virtual machine;

When the system is idle or the security processor is idle, the method is further used to retrieve the call request from the to-be-processed list, and call the interface of the security processor according to the call request.

Optionally, the security processor is further configured to perform a corresponding operation according to the security information, obtain a corresponding operation result, and store the operation result in the context stored in the security storage area;

The virtual machine manager is further configured to inject an interruption into the virtual machine to resume the running of the virtual machine;

The virtual machine is further configured to obtain the operation result from the context stored in the safe storage area according to the interrupt.

In a third aspect, an embodiment of the present invention further provides a computer-readable storage medium, where the computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors, In order to realize the operation method described in any one of the first aspect.

In the electronic device and storage medium provided by the embodiments of the present invention, when the virtual machine communicates with the security processor, the security information to be sent by the virtual machine to the security processor is stored in the current context of the virtual machine and stored in the security storage. area, which prevents or prevents the hypervisor from accessing contexts where security information is stored. The security processor can access the virtual machine context in the secure storage area, and obtain the security information therein, so as to realize the security of communication between the virtual machine and the security processor. Therefore, malicious attacks by the virtual machine manager can be avoided, thereby ensuring the safe operation of the virtual machine to a certain extent.

Description of drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention, and for those of ordinary skill in the art, other drawings can also be obtained from these drawings without creative effort.

Figure 1 is a common architecture diagram of a virtual machine system;

2 is a schematic diagram of a virtual machine running process in the prior art;

FIG. 3 is a schematic diagram of a safe operation process of a virtual machine according to an embodiment of the present invention;

FIG. 4 is a schematic diagram of a safe running process of a virtual machine according to another embodiment of the present invention;

FIG. 5 is a schematic diagram of a safe operation process of a virtual machine according to still another embodiment of the present invention;

FIG. 6 is a schematic diagram of a virtual machine system architecture according to an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of an embodiment of an electronic device of the present invention.

Detailed ways

The embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

It should be understood that the described embodiments are only some, but not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Example 1

The solutions described in the following embodiments of the present invention can run in the virtual machine system architecture shown in FIG. 1 , including a physical hardware layer, a virtual machine manager (VMM, Virtual Machine Manager, also called a virtual machine monitor in Chinese) and a virtual machine (VM, Virtual Machine), wherein the physical hardware layer provides hardware support for the virtual machine management system and virtual machines running on it, and in this embodiment, it at least includes a security processor, that is, a root of trust, also known as The root of trust is expressed as the root of trust in the accompanying drawings; the security processor runs in a higher privilege mode, which is regarded as the trust foundation of security virtualization, and the security processor can be, for example, a SoC (System on Chip) product integrated security processor.

The virtual machine manager and the virtual machine alternately run on the physical hardware layer. In secure virtualization technology, the execution environment provided by the virtual machine manager is often considered to be outside the trust boundary, and when the virtual machine communicates with the secure processor in the physical hardware layer, such as passing encryption keys, providing authentication information, etc. Secure information, sometimes referred to as sensitive information, must be forwarded through the hypervisor, and no virtual machine or root of trust can prevent the hypervisor from tampering with the passed data. The communication between the virtual machine and the root of trust needs to be completed with the help of the virtual machine manager. The virtual machine manager acts as an intermediary role in the process. It can use the intermediary role to carry out malicious attacks, tamper with the input and output data information during the communication process, and threaten the virtual machine. Safe operation of machines and systems.

In order to solve the above problem, an embodiment of the present invention provides a method for safely running a virtual machine, as shown in FIG. 1 , FIG. 3 and FIG. 4 , the method includes:

Step S110: The virtual machine stores the security information to be sent to the security processor in the current context of the virtual machine.

The security information includes virtual machine ID, encryption key, verification information, etc.; context (context) is also called process context, which is a term in the field of computer technology, and refers to the static description of the entire process of process execution activities. In the embodiment, it is the currently running virtual machine context, which is simply the virtual machine running environment. In a secure virtual machine, the virtual machine context is encrypted and protected and cannot be accessed by the virtual machine manager, and can be used as a secure storage. Among them, at least the values of variables and parameters to be passed by the virtual machine to the security processor in the user mode are saved, and some register values and variables of the virtual machine process are also saved when the security processor is running. The so-called "process context" can be regarded as including at least these parameters passed by the virtual machine to the secure processor, some variables and register values to be saved by the kernel, and the environment at that time.

Step S120: The virtual machine stores the context containing the security information in a secure storage area, and generates a virtual machine exit event.

Memory (mainly main memory) is composed of many memory addresses, and each memory address has a "physical address" that can be accessed by the CPU. For a physical CPU, a secure storage area can be a memory space pointed to by an address in main memory, which stores data in a hardware-isolated, encrypted form, and protects the storage content from roles outside the trust boundary (with meaningful) access. For example, Haiguang secure encryption virtualization technology and ARM TrustZone technology can realize the isolation and encrypted storage of data.

For existing hardware virtualization technologies, a set of control structures provided by a virtual machine manager is generally used, referring to FIG. 2 . Typically, VMCB (Virtual Machine Control Block), as defined by AMD-V virtualization technology, is a control structure that controls a specified virtual machine. In Figure 2, it is represented as a virtual machine control block, and its structure contains specific fields for specifying a virtual machine context. The address of the stored memory page. The control structure is used to realize the control of the virtual machine by the virtual machine manager, such as intercepting the execution of a specific instruction, the access of a specific register, the occurrence of a specific event, and the like. During the execution of the virtual machine, when the interception condition set by the virtual machine manager is satisfied, the virtual machine exit event will occur and switch to the execution environment of the virtual machine manager, so that the virtual machine manager can simulate the event and other processing operations. When the virtual machine exits, the processor execution environment switches back to the virtual machine manager context (as mentioned above, the context can simply be understood as the running environment of the process). At this time, the virtual machine context is usually stored in a designated area, such as a designated physical storage The area, also known as the physical memory page, is abbreviated as VMSA (Virtual Machine Save Area). As mentioned above, the virtual machine manager acts as a middleman and can modify the data saved in the specified physical storage area, which is also As a result, the virtual machine manager may implement malicious attacks and affect the security of virtual machine operation.

In this embodiment, since the security information is stored in the secure storage area and the data is encrypted, only the security processor that is the root of trust and has privileged authority can access it, and the virtual machine manager outside the trust boundary can access it. Access is inaccessible, thereby avoiding malicious attacks that the hypervisor might perform as a man-in-the-middle role.

Step S130: The virtual machine manager invokes the interface of the security processor according to the virtual machine exit event.

It can be understood that there are many reasons for the virtual machine exit event. In view of the need to protect the data information communicated between the virtual machine and the root of trust, when it is detected that the current exit event is caused by the communication between the virtual machine and the root of trust. , the interface provided by the security handler is called according to the exit event.

The virtual machine manager determines whether it is caused by the communication between the virtual machine and the root of trust according to the virtual machine exit event indication information. The exit event indication information includes an exit event code; the reason for the specific exit event can be determined according to the exit event code.

Step S140, the security processor acquires the security information from the context stored in the security storage area in response to the invocation of the virtual machine manager.

In the method for running a virtual machine provided by the embodiment of the present invention, when the virtual machine communicates with the security processor, since the security information to be sent by the virtual machine to the security processor is stored in the current context of the virtual machine and stored in the security storage area, which prevents or prevents the hypervisor from accessing contexts where security information is stored. The security processor can access the virtual machine context in the secure storage area, and obtain the security information therein, so as to realize the security of communication between the virtual machine and the security processor. Therefore, malicious attacks by the virtual machine manager can be avoided, thereby ensuring the safe operation of the virtual machine to a certain extent.

Specifically, as shown in FIG. 4 , in step S140, after the security processor acquires the security information from the context stored in the security storage area in response to the invocation of the virtual machine manager, the security processor Methods also include:

The security processor performs a corresponding operation according to the security information, obtains a corresponding operation result, and stores the operation result in the context stored in the security storage area.

After the security processor completes the execution of the corresponding operation, the security processor sends a processing completion notification to the virtual machine manager.

The virtual machine manager resumes the operation of the virtual machine; the virtual machine obtains the operation result from the context stored in the secure storage area;

Further, if the virtual machine manager modifies the virtual machine context stored in the secure storage area, it will cause the virtual machine to exit abnormally, thereby ensuring that the interaction information between the virtual machine and the root of trust is safe and reliable.

Referring to FIG. 5, for the consideration of execution efficiency, in some embodiments, the virtual machine manager, according to the virtual machine exit event, invokes the interface of the security processor including:

The virtual machine manager determines the interface of the security processor to be invoked according to the information indication in the virtual machine exit event, and stores the invocation request for invoking the interface of the security processor in a pending list, And restore the running of the virtual machine, so that the virtual machine can perform other tasks; in this way, the virtual machine is not affected to perform other tasks, thereby improving the execution efficiency.

When the system is idle or the security processor is idle, the virtual machine manager takes out the call request from the to-be-processed list, and calls the interface of the security processor according to the call request.

In this embodiment, during the idle period of the system or the security processor, the interface of the security processor is called, so that the security processor responds to the request and obtains the security information from the context stored in the security storage area, which can improve the execution task efficiency.

Continuing to refer to FIG. 5 , after the security processor obtains the security information from the context stored in the security storage area in response to the invocation of the virtual machine manager, the method further includes: The security processor performs a corresponding operation according to the security information, obtains a corresponding operation result, and stores the operation result in the context stored in the secure storage area; the virtual machine manager reports to the virtual machine An interrupt is injected into the machine to resume the operation of the virtual machine; the virtual machine obtains the operation result from the context stored in the secure storage area according to the interrupt.

FIG. 6 is a schematic diagram of a virtual machine system architecture according to an embodiment of the present invention. Referring to FIG. 6, the virtual machine system includes: a physical hardware layer 20, a virtual machine manager 21 and a virtual machine 22, the physical hardware layer 20 includes a first processor 23 and a second processor, the first processing The second processor is a security processor, the second processor is a main processor, that is, a general-purpose processor, and the virtual machine manager 21 and the virtual machine 22 are configured on the main processor.

The method for safely running a virtual machine provided by the foregoing embodiments may run on the virtual machine system architecture shown in FIG. 6 .

In order to facilitate the understanding of the technical solutions and technical effects of the embodiments of the present invention, taking Haiguang secure encryption virtualization as an example, the virtual machine manager uses VMCB (a set of data structures located in physical memory) to set the physical Memory pages, VMSA is encrypted by hardware when the virtual machine is initialized, and the virtual machine manager cannot access the VMSA plaintext after that. At this time, the VMSA is safely stored in the physical memory, and the context switch is automatically completed by the hardware when entering the virtual machine.

As the root of trust, the security processor defines a set of interface specifications in advance for the virtual machine to call. When the virtual machine needs to perform a security call, it can save security information and parameters in the context according to the interface specification, and exit the virtual machine mode; the virtual machine manager notifies the security processor to perform the security call according to the exit reason; the security processor executes the security call from the corresponding The parameters are obtained in the virtual machine VMSA and processed. If the processing result needs to be returned, it needs to be stored in the secure and encrypted VMSA according to the specification. After the security processor completes the processing, it notifies the virtual machine manager, and the virtual machine manager resumes the execution of the virtual machine. During the communication between the virtual machine and the root of trust, since the virtual machine context containing the security information is stored in the secure storage, the virtual machine manager can be prevented from modifying the security information and parameters in the virtual machine context, thus ensuring the virtual machine safe operation.

Embodiment 2

FIG. 7 is a schematic structural diagram of an embodiment of an electronic device of the present invention. As shown in FIG. 7 , the above-mentioned electronic device may include: a casing 71 , a processor 72 , a memory 73 , a circuit board 74 and a power supply circuit 75 , wherein the circuit board 74 Placed inside the space enclosed by the housing 71, the processor 72 and the memory 73 are arranged on the circuit board 74; the power circuit 75 is used to supply power to each circuit or device of the above-mentioned server; the memory 73 is used to store executable program codes; The processors include a first processor 23 and a second processor, the first processor 23 is a security processor, the second processor is a main processor, and a virtual machine manager 21 is configured on the second processor with virtual machine 22.

Wherein: the virtual machine 22 stores the security information to be sent to the security processor 23 in the current context of the virtual machine 22;

The virtual machine 22 stores the context containing the security information in a secure storage area, and generates an exit event of the virtual machine 22;

The virtual machine manager 21 calls the interface of the security processor 23 according to the exit event of the virtual machine 22;

The security processor 23 acquires the security information from the context stored in the security storage area in response to the call from the virtual machine manager 21 .

In the electronic device provided by the embodiment of the present invention, the physical hardware layer 20 includes a first processor 23 and a second processor, the first processor is a security processor, and the second processor is a main processor, so The virtual machine manager 21 and the virtual machine 22 are configured on the main processor. When the virtual machine communicates with the security processor, since the security information to be sent by the virtual machine to the security processor is stored in the current context of the virtual machine and stored in the security storage area, the access by the virtual machine manager can be prevented or avoided. The context in which security information is stored. The security processor can access the virtual machine context in the secure storage area, and obtain the security information therein, so as to realize the security of communication between the virtual machine and the security processor. Therefore, malicious attacks by the virtual machine manager can be avoided, thereby ensuring the safe operation of the virtual machine to a certain extent.

In an embodiment of the present invention, the secure processor 23 is further configured to, when the secure processor 23 responds to the call of the virtual machine manager 21, from the context stored in the secure storage area After acquiring the security information, perform a corresponding operation according to the security information, obtain a corresponding operation result, and store the operation result in the context stored in the security storage area;

The virtual machine manager 21 is further configured to restore the operation of the virtual machine 22;

The virtual machine 22 is further configured to obtain the operation result from the context stored in the secure storage area.

Specifically, the virtual machine manager 21 is specifically configured to determine the interface of the security processor 23 to be called according to the information indication in the exit event of the virtual machine 22, and call the interface of the interface of the security processor 23. The call request is stored in the pending list, and the operation of the virtual machine 22 is resumed;

When the system is idle or the security processor 23 is idle, it is also used to retrieve the call request from the to-be-processed list, and call the interface of the security processor 23 according to the call request.

In yet another embodiment of the present invention, the security processor 23 is further configured to perform a corresponding operation according to the security information, obtain a corresponding operation result, and store the operation result in the security storage area for storage in said context;

The virtual machine manager 21 is further configured to inject an interruption into the virtual machine 22 to resume the running of the virtual machine;

The virtual machine 22 is further configured to acquire the operation result from the context stored in the safe storage area according to the interrupt.

The electronic device provided by the embodiment of the present invention is similar to the basic implementation principle and technical effect of the method for safely running a virtual machine in the foregoing embodiment 1. For details not mentioned in this embodiment, refer to Embodiment 1, and details will not be repeated.

The electronic device can be a server, and the composition of the server includes a processor, a hard disk, a memory, a system bus, etc. The server is similar to a general computer architecture, but because it needs to provide a secure virtualization service, the processor needs to support virtualization and be able to install virtual machine.

Another embodiment of the present invention provides a computer-readable storage medium, where the computer-readable storage medium stores one or more programs, and the one or more programs can be executed by one or more processors to implement the embodiments A method for safely running a virtual machine described in any one.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented by instructing relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium. During execution, the processes of the embodiments of the above-mentioned methods may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM), or a random access memory (Random Access Memory, RAM) or the like.

The above are only specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art who is familiar with the technical scope disclosed by the present invention can easily think of changes or substitutions. All should be included within the protection scope of the present invention. Therefore, the protection scope of the present invention should be subject to the protection scope of the claims.

Claims (9)

1. a virtual machine safe operation method, is characterized in that, comprises the steps: The virtual machine stores the security information to be sent to the security processor in the current context of the virtual machine; The virtual machine stores the context containing the security information into a secure storage area, and generates a virtual machine exit event; The virtual machine manager invokes the interface of the security processor according to the virtual machine exit event; The security processor obtains the security information from the context stored in the secure storage area in response to a call by the virtual machine manager. 2 . The method for safely running a virtual machine according to claim 1 , wherein in response to the call of the virtual machine manager, the security processor obtains the data from the context stored in the secure storage area. 3 . After the security information, the method further includes: The security processor performs a corresponding operation according to the security information, obtains a corresponding operation result, and stores the operation result in the context stored in the security storage area; the virtual machine manager resumes the operation of the virtual machine; The virtual machine obtains the operation result from the context stored in the secure storage area. 3. The method for safely running a virtual machine according to claim 1, wherein the virtual machine manager, according to the virtual machine exit event, invokes the interface of the security processor comprising: The virtual machine manager determines the interface of the security processor to be invoked according to the information indication in the virtual machine exit event, and stores the invocation request for invoking the interface of the security processor in a pending list, and resume the operation of the virtual machine; When the system is idle or the security processor is idle, the virtual machine manager takes out the call request from the to-be-processed list, and calls the interface of the security processor according to the call request. 4 . The method for safely running a virtual machine according to claim 3 , wherein in response to the call of the virtual machine manager, the security processor obtains the data from the context stored in the secure storage area. 5 . After the security information, the method further includes: The security processor performs a corresponding operation according to the security information, obtains a corresponding operation result, and stores the operation result in the context stored in the security storage area; The virtual machine manager injects an interrupt into the virtual machine to resume the operation of the virtual machine; The virtual machine obtains the operation result from the context stored in the secure storage area according to the interrupt. 5. An electronic device, characterized in that it comprises: a casing, a processor, a memory, a circuit board and a power supply circuit, wherein the circuit board is arranged inside the space enclosed by the casing, and the processor and the memory are arranged on the circuit board a power supply circuit for supplying power to each circuit or device of the above-mentioned electronic equipment; a memory for storing executable program codes; the processor includes a first processor and a second processor, and the first processor is a security processing The second processor is configured with a virtual machine manager and a virtual machine program; wherein, The virtual machine stores the security information to be sent to the security processor in the current context of the virtual machine; The virtual machine stores the context containing the security information into a secure storage area, and generates a virtual machine exit event; The virtual machine manager invokes the interface of the security processor according to the virtual machine exit event; The security processor obtains the security information from the context stored in the secure storage area in response to a call by the virtual machine manager. 6 . The electronic device according to claim 5 , wherein the secure processor is further configured to, when the secure processor responds to the invocation of the virtual machine manager, store data from the secure storage area. 7 . After acquiring the security information in the context of the device, perform a corresponding operation according to the security information, obtain a corresponding operation result, and store the operation result in the context stored in the security storage area; the virtual machine manager, further configured to restore the running of the virtual machine; The virtual machine is further configured to acquire the operation result from the context stored in the secure storage area. 7. The electronic device according to claim 5, wherein the virtual machine manager is specifically configured to determine the interface of the security processor to be called according to the information indication in the virtual machine exit event, and to The call request for calling the interface of the security processor is stored in the to-be-processed list, and the operation of the virtual machine is resumed; When the system is idle or the security processor is idle, the method is further used to retrieve the call request from the to-be-processed list, and call the interface of the security processor according to the call request. 8. The electronic device according to claim 7, wherein the security processor is further configured to perform a corresponding operation according to the security information, obtain a corresponding operation result, and store the operation result in the in said context stored in a secure storage area; The virtual machine manager is further configured to inject an interruption into the virtual machine to resume the running of the virtual machine; The virtual machine is further configured to obtain the operation result from the context stored in the safe storage area according to the interrupt. 9. A computer-readable storage medium storing one or more programs executable by one or more processors to implement any of claims 1 to 4. 1. The described virtual machine safe running method.

Images