WO2013082749A1

WO2013082749A1 - Hardware resource protection method and system, and virtual machine manager

Info

Publication number: WO2013082749A1
Application number: PCT/CN2011/083499
Authority: WO
Inventors: 俞柏峰
Original assignee: 华为技术有限公司
Priority date: 2011-12-06
Filing date: 2011-12-06
Publication date: 2013-06-13
Also published as: CN103270491A; CN103270491B

Abstract

Embodiments of the present invention provide a hardware resource protection method and system, and a virtual machine manager, relating to the field of computers. The method comprises: a virtual machine manager monitoring hardware resources, and upon detecting that an application program accesses the hardware resources, the virtual machine manager triggering a virtual machine to exit, and taking over the system control right; the virtual machine manager determining whether an operation of the application program is authorized; if yes, allowing the application program to access the hardware resources, and if no, forbidding the application program from accessing the hardware resources. The virtual machine manager comprises a monitoring module and a determination module. The system comprises a virtual machine manager, hardware resources, and a virtual machine. By means of the aforementioned solution, the present invention protects the hardware resources by using the virtualization technology; the hardware resource protection no longer relies on the dedicated hardware device, thus improving the use flexibility and reducing the cost.

Description

Hardware resource protection method and system and virtual machine manager

The present invention relates to the field of computers, and in particular, to a hardware resource protection method and system, and a virtual machine manager. Background technique

There are many hardware resources in the computer, such as 10 (Input Output) address, memory space, and so on. In order to make the computer system run stably and safely, measures need to be taken to effectively protect its hardware resources.

Hardware resources are usually protected by dedicated hardware, such as hard disk protection cards to protect hard disks. The main body of the hard disk protection card is a hardware chip that is inserted into the motherboard and works in conjunction with the main boot sector of the hard disk. The working principle is as follows: The hard disk protection card takes over an INT13 interrupt for reading and writing operations on the hard disk when the system starts, and will be FAT (Fi le Al location Table), Shield 1 guide, CMOS (Complementary Metal Oxide Semiconductor, Information such as the complementary metal oxide semiconductor), the original interrupt vector table, etc. are saved to the temporary storage unit in the card or stored in the hidden sector of the hard disk, and the original interrupt vector table is replaced with the own interrupt vector table. Then find a part of the continuous empty disk space on the hard disk, and save the user modified data to it. In this way, when the user writes data to the hard disk, the FAT in the hard disk is not actually modified, but the FAT table is written in the backup. When the system is restarted, the hard disk protection card can restore the previous content to the hard disk, thereby achieving the right The purpose of hard disk protection.

It can be seen that the above technology needs to protect hardware resources by using special hardware devices such as a hard disk protection card. Therefore, the use is not flexible enough and the cost is relatively high. Summary of the invention

In order to get rid of the dependence of the hardware resource protection on the dedicated hardware device, the embodiment of the invention provides a hardware resource protection method and system and a virtual machine manager. The technical solution is as follows:

A method for protecting a hardware resource, the method comprising:

The virtual machine manager monitors hardware resources and touches when detecting that the application accesses the hardware resources Sending a virtual machine to exit, and the virtual machine manager takes over control of the system;

The virtual machine manager determines whether the operation of the application is legal. If it is legal, the application is allowed to access the hardware resource. If it is illegal, the application is prohibited from accessing the hardware resource.

A virtual machine manager, the virtual machine manager includes:

a monitoring module, configured to monitor a hardware resource, when detecting that the application accesses the hardware resource, triggering the virtual machine to exit, and the virtual machine manager takes over control of the system;

The determining module is configured to determine whether the operation of the application is legal. If it is legal, the application is allowed to access the hardware resource. If it is illegal, the application is prohibited from accessing the hardware resource.

A hardware resource protection system, the system comprising: a virtual machine manager, a hardware resource, and a virtual machine;

The virtual machine manager is configured to monitor the hardware resource, when detecting that the application accesses the hardware resource, triggering the virtual machine to exit, and the virtual machine manager takes over control of the system; and determining the application Whether the operation is legal, if legal, allows the application to access the hardware resource, and if it is illegal, the application is prohibited from accessing the hardware resource.

The beneficial effects of the technical solutions provided by the embodiments of the present invention are:

The virtual machine manager monitors the hardware resources. When detecting that the application accesses the hardware resources, the virtual machine is triggered to exit, and the virtual machine manager takes over the control of the system, and then determines whether the operation of the application is legal. If it is legal, the application is allowed to access. Hardware resources, if illegal, prohibit applications from accessing hardware resources, achieve the purpose of using virtualization technology to achieve hardware resource protection, get rid of the dependence of hardware resource protection on specialized hardware devices, improve flexibility of use, and reduce costs. DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described. It is obvious that the drawings in the following description are only some embodiments of the present invention. Other drawings may also be obtained from those of ordinary skill in the art in view of the drawings.

1 is a flowchart of a hardware resource protection method according to Embodiment 1 of the present invention;

2 is a flow chart of a method for protecting a hardware resource for an input/output address according to Embodiment 1 of the present invention;

3 is a flowchart of hardware resource protection for a memory space according to Embodiment 1 of the present invention; FIG. 4 is a schematic structural diagram of a virtual machine manager according to Embodiment 2 of the present invention; FIG. 5 is a schematic diagram of another structure of a virtual machine manager according to Embodiment 2 of the present invention; FIG. 6 is a schematic structural diagram of a hardware resource protection system according to Embodiment 3 of the present invention. detailed description

The embodiments of the present invention will be described in detail below with reference to the accompanying drawings.

Example 1

Referring to FIG. 1, this embodiment provides a hardware resource protection method, where the method includes:

101: The virtual machine manager monitors the hardware resource, and when detecting that the application accesses the hardware resource, triggers the virtual machine to exit, and the virtual machine manager takes over control of the system;

It should be noted that the virtual machine manager runs in the root mode, the virtual machine runs in the non-root mode, and the virtual machine exit refers to the switch from the non-root mode to the root mode, and the system control right transfer is controlled by the virtual machine manager takeover system. right.

102: The virtual machine manager determines whether the operation of the application is legal. If it is legal, the application is allowed to access the hardware resource. If it is illegal, the application is prohibited from accessing the hardware resource.

The hardware resources involved in this embodiment may be an input/output address, a memory space, or the like. The following describes the protection process for the input and output addresses and memory space of the above methods.

Referring to FIG. 2, when the hardware resource is an input/output address, the hardware resource protection method includes the following steps:

201: The virtual machine manager monitors an input and output address of a device where the virtual machine manager is located, and when detecting that the application reads and writes the input and output addresses, triggers the virtual machine to exit, and the virtual machine manager takes over control of the system;

The input and output addresses can be specific input and output addresses in the system, or they can be all input and output addresses in the system.

202: The virtual machine manager determines whether the operation of the application is legal;

Specifically, the virtual machine manager compares the public key of the application with the private key provided by the application, and if yes, determines that the operation of the application is legal, and if not, determines that the operation of the application is illegal. . 203: If it is legal, the application is allowed to access the input and output address, and if it is illegal, the application is prohibited from accessing the input and output address.

Further, after step 203, the virtual machine manager triggers the virtual machine to enter, and the virtual machine takes over control of the system. It should be noted that the entry of the virtual machine refers to the switch from the root mode to the non-root mode, and the control of the system is transferred, and the virtual machine takes over the control of the system.

Referring to FIG. 3, when the hardware resource is a memory space, the hardware resource protection method includes the following steps:

301: The virtual machine manager monitors a control register, prevents an application from using the control register to map a memory space, and detects that a page fault exception occurs when the application accesses the memory space;

The control register (Control Regi ster, CR) may specifically be CR3.

302: The virtual machine manager sets the preset exit condition to be set, triggers the virtual machine to exit, and the virtual machine manager takes over control of the system;

Specifically, the virtual machine manager sets PFEC—MASK and PFEC—MATCH. When a page fault exception occurs, the relation PFEC & PFEC—MASK = PFEC—MATCH is established, triggering the virtual machine to exit, and the virtual machine manager takes over control of the system. .

Where & indicates the AND operation, PFEC indicates (Page Fault Error Code), PFEC_MASK indicates the page fault mask, and PFEC_MATCH indicates the page fault match code. For example, if both PFEC_MASK and PFEC_MATCH can be set to 0, the above relationship is established when a page fault exception occurs, triggering the virtual machine to exit, and the virtual machine manager takes over control of the system.

303: The virtual machine manager determines whether the operation of the application is legal;

Specifically, the virtual machine manager compares the public key of the application with the private key provided by the application, and if yes, determines that the operation of the application is legal, and if not, determines that the operation of the application is illegal. .

304: If legal, allows the application to access the memory space, if it is illegal, it prohibits the application from accessing the memory space.

Further, after step 304, the virtual machine manager triggers the virtual machine to enter, and the virtual machine takes over control of the system. It should be noted that the entry of the virtual machine refers to the switch from the root mode to the non-root mode, and the control of the system is transferred, and the virtual machine takes over the control of the system.

In this embodiment, the hardware resource is monitored by the virtual machine manager, and when the application accesses the hardware resource is detected When the source is triggered, the virtual machine is triggered to exit, and the virtual machine manager takes over control of the system, and then determines whether the operation of the application is legal. If it is legal, the application is allowed to access the hardware resource. If it is illegal, the application is prohibited from accessing the hardware resource, and the utilization is achieved. The virtualization technology realizes the purpose of hardware resource protection, frees the dependence of hardware resource protection on specialized hardware devices, improves the flexibility of use, and reduces the cost. Example 2

Referring to FIG. 4, the embodiment provides a virtual machine manager. The virtual machine manager includes: a monitoring module 401, configured to monitor hardware resources, and when detecting that the application accesses the hardware resources, trigger the virtual machine to exit, by the virtual machine. The manager takes over control of the system;

The determining module 402 is configured to determine whether the operation of the application is legal. If it is legal, the application is allowed to access the hardware resource. If it is illegal, the application is prohibited from accessing the hardware resource.

When the hardware resource is an input/output address, the monitoring module 401 is specifically configured to monitor an input and output address of the device where the virtual machine manager is located, and when detecting that the application reads and writes the input and output addresses, triggering the virtual machine to exit, by virtual The machine manager takes over control of the system.

When the hardware resource is a memory space, the monitoring module 401 is specifically configured to monitor the control register, prevent the application from using the control register to map the memory space, and detect that the page fault is generated when the application accesses the memory space, and the preset is made by setting The exit condition is established, triggering the virtual machine to exit.

The monitoring module 401 is specifically used when the preset exit condition is established by setting

Set page fault mask PFEC—MASK and page fault match code PFEC— MATCH, when page fault exception occurs, relational page fault error code PFEC & PFEC— MASK = PFEC—MATCH is established, and & indicates the AND operation.

For example, if both PFEC_MASK and PFEC_MATCH can be set to 0, the above relationship is established when a page fault exception occurs, triggering the virtual machine to exit. The control register may specifically be CR3.

Specifically, the determining module 402 is specifically configured to compare the public key of the application and the private key provided by the application, and if yes, determine that the operation of the application is legal, and if not, determine that the operation of the application is illegal.

Further, referring to FIG. 5, the virtual machine manager further includes: a triggering module 403, configured to trigger the virtual machine to enter after the determining module 402 allows or prohibits the application from accessing the hardware resource, and the virtual machine takes over control of the system.

It should be noted that the virtual machine manager runs in the root mode, and the virtual machine runs in the non-root mode. The quasi-machine exit means that the non-root mode is switched to the root mode, and at the same time, the system control rights are transferred, and the virtual machine manager takes over the control of the system. Virtual machine entry refers to switching from root mode to non-root mode, while system control is transferred, and the virtual machine takes over control of the system.

The virtual machine manager provided in this embodiment is the same as the virtual machine manager in the method embodiment. For details, refer to the method embodiment, and details are not described herein.

The virtual machine manager provided by the embodiment monitors the hardware resources, and when detecting that the application accesses the hardware resources, triggers the virtual machine to exit, and the virtual machine manager takes over the control of the system, and then determines whether the operation of the application is legal, if legal. Allows the application to access hardware resources. If it is illegal, it prohibits the application from accessing hardware resources, achieves the purpose of using virtualization technology to achieve hardware resource protection, and gets rid of the dependence of hardware resource protection on specialized hardware devices, improving the flexibility of use and reducing The cost. Example 3

Referring to FIG. 6, this embodiment provides a hardware resource protection system, where the system includes: a virtual machine manager 40, a hardware resource 30, and a virtual machine 20;

The virtual machine manager 40 is configured to monitor the hardware resource 30, when detecting that the application accesses the hardware resource 30, triggers the virtual machine 20 to exit, and the virtual machine manager 40 takes over the system control right; and determines whether the operation of the application is legal, if Legitimate, allowing the application to access hardware resources 30, if illegal, prohibits the application from accessing hardware resources 30.

The virtual machine manager 40 includes: a monitoring module 401 and a determining module 402;

The monitoring module 401 is configured to monitor the hardware resource 30. When detecting that the application accesses the hardware resource 30, the virtual machine 20 is triggered to exit, and the virtual machine manager 40 takes over the system control right;

The determining module 402 is configured to determine whether the operation of the application is legal. If it is legal, the application is allowed to access the hardware resource 30. If it is illegal, the application is prohibited from accessing the hardware resource 30.

When the hardware resource 30 is an input/output address, the monitoring module 401 is specifically configured to monitor the input and output addresses of the device where the virtual machine manager is located. When detecting that the application reads and writes the input and output addresses, the virtual machine 20 is triggered to exit. The system control is taken over by the virtual machine manager.

When the hardware resource 30 is a memory space, the monitoring module 401 is specifically configured to monitor the control register, and prevent the application from using the control register to map the memory space, so that the application accesses the memory space. When a page fault exception occurs, and the preset exit condition is established by setting, the virtual machine 20 is triggered to exit. The monitoring module 401 is specifically used when the preset exit condition is established by setting

Further, the virtual machine manager further includes: a triggering module 403, configured to trigger the virtual machine to enter after the determining module 402 allows or prohibits the application from accessing the hardware resource, and the virtual machine takes over control of the system.

It should be noted that the virtual machine manager runs in the root mode, the virtual machine runs in the non-root mode, and the virtual machine exit refers to the switch from the non-root mode to the root mode, and the system control right transfer is controlled by the virtual machine manager takeover system. right. Virtual machine entry refers to switching from root mode to non-root mode, and system control transfer, and the virtual machine takes over control of the system.

The virtual machine manager, the hardware resource, and the virtual machine provided in this embodiment are respectively in the same concept as the virtual machine manager, the hardware resource, and the virtual machine in the method embodiment, and the specific implementation process is described in the method embodiment, and details are not described herein again. .

The system provided in this embodiment monitors hardware resources through the virtual machine manager. When detecting that the application accesses the hardware resources, the virtual machine is triggered to exit, and the virtual machine manager takes over control of the system, and then determines whether the operation of the application is legal. If it is legal, it allows the application to access the hardware resources. If it is illegal, it prohibits the application from accessing the hardware resources, and achieves the purpose of using the virtualization technology to realize the hardware resource protection. It is free from the dependence of the hardware resource protection on the specialized hardware devices, and improves the flexibility of use. , reducing costs. A person skilled in the art may understand that all or part of the steps of implementing the above embodiments may be completed by hardware, or may be instructed by a program to execute related hardware, and the program may be stored in a computer readable storage medium. The above-mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., which are within the spirit and scope of the present invention, should be included in the protection of the present invention. Within the scope.

Claims

Claim

A method for protecting a hardware resource, the method comprising:

The virtual machine manager monitors the hardware resource, and when detecting that the application accesses the hardware resource, triggers the virtual machine to exit, and the virtual machine manager takes over control of the system;

2. The method according to claim 1, wherein the virtual machine manager monitors hardware resources, and when detecting that the application accesses the hardware resource, triggers the virtual machine to exit, and the virtual machine manager takes over System control rights, including:

When the hardware resource is an input/output address, the virtual machine manager monitors an input and output address of the device where the virtual machine manager is located, and when detecting that the application reads and writes the input and output address, triggers the virtual machine to exit. , the virtual machine manager takes over control of the system.

The method according to claim 1, wherein the virtual machine manager monitors hardware resources, and when detecting that the application accesses the hardware resource, triggers the virtual machine to exit, and the virtual machine manager takes over System control rights, including:

When the hardware resource is a memory space, the virtual machine manager monitors the control register, prevents the application from using the control register to map the memory space, and detects that the application accesses the memory space to generate a page fault exception, and By setting the preset exit condition to be established, the virtual machine is triggered to exit, and the virtual machine manager takes over the system control right.

The method according to claim 3, wherein the setting, by setting the preset exit condition, comprises:

The method according to any one of claims 1-4, wherein the virtual machine manager determines whether the operation of the application is legal, and specifically includes: The virtual machine manager compares the public key of the application with the private key provided by the application, and if so, determines that the operation of the application is legal, and if not, determines that the operation of the application is illegal.

The method according to claim 1, wherein the virtual machine manager determines whether the operation of the application is legal. If it is legal, the application is allowed to access the hardware resource. After the application accesses the hardware resource, the method further includes:

The virtual machine manager triggers the virtual machine to enter, and the virtual machine takes over control of the system.

7. A virtual machine manager, wherein the virtual machine manager comprises:

8. The virtual machine manager according to claim 7, wherein the monitoring module is specifically used for

When the hardware resource is an input/output address, monitoring an input/output address of the device where the virtual machine manager is located, and when detecting that the application reads and writes the input and output address, triggering the virtual machine to exit, The virtual machine manager takes over control of the system.

9. The virtual machine manager according to claim 7, wherein the monitoring module is specifically for

When the hardware resource is a memory space, monitoring a control register, preventing an application from using the control register to map a memory space, detecting that a page fault exception occurs when the application accesses the memory space, and setting a pre-emptive The set exit condition is established, triggering the virtual machine to exit.

The virtual machine manager according to claim 9, wherein the monitoring module is specifically used when setting a preset exit condition by setting

Set the page fault mask PFEC_MASK and the page fault match code PFEC_MATCH, when a page fault exception occurs, Relational page fault error code PFEC & PFEC—MASK = PFEC—MATCH is established, and & represents the AND operation.

The virtual machine manager according to any one of claims 7 to 10, wherein the judgment module is specifically used for

Comparing the public key of the application and the private key provided by the application, if yes, determining that the operation of the application is legal, and if not, determining that the operation of the application is illegal.

The virtual machine manager according to claim 7, wherein the virtual machine manager further comprises: a triggering module, configured to: after the determining module allows or prohibits the application from accessing the hardware resource , triggers the virtual machine to enter, and the virtual machine takes over control of the system.

13. A hardware resource protection system, the system comprising: a virtual machine manager, a hardware resource, and a virtual machine;

The system of claim 13, wherein the virtual machine manager comprises: a monitoring module and a determining module;

The monitoring module is configured to monitor the hardware resource, and when detecting that the application accesses the hardware resource, triggering the virtual machine to exit, and the virtual machine manager takes over control of the system;

The system according to claim 14, wherein the monitoring module is configured to: when the hardware resource is an input/output address, monitor an input and output address of a device where the virtual machine manager is located, when detecting When the application reads and writes the input and output addresses, the virtual machine is triggered to exit, and the virtual machine manager takes over control of the system.

The system according to claim 14, wherein the monitoring module is configured to: when the hardware resource is a memory space, monitor a control register, and prevent an application from using the control register to map a memory space. , causing the application to access the memory space to generate a page fault exception, and setting the preset exit condition to be established, triggering the virtual machine to exit.

The system according to claim 16, wherein the monitoring module is specifically used when setting a preset exit condition by setting

The system according to any one of claims 14-17, wherein the determining module is specifically configured to:

The system according to claim 14, wherein the virtual machine manager further comprises: a triggering module, configured to trigger a virtuality after the determining module allows or prohibits the application from accessing the hardware resource The machine enters, and the virtual machine takes over control of the system.