WO2016197850A1 - 一种访问电子设备的物理内存中私密数据的方法和装置 - Google Patents

一种访问电子设备的物理内存中私密数据的方法和装置 Download PDF

Info

Publication number
WO2016197850A1
WO2016197850A1 PCT/CN2016/084440 CN2016084440W WO2016197850A1 WO 2016197850 A1 WO2016197850 A1 WO 2016197850A1 CN 2016084440 W CN2016084440 W CN 2016084440W WO 2016197850 A1 WO2016197850 A1 WO 2016197850A1
Authority
WO
WIPO (PCT)
Prior art keywords
data
private data
electronic device
access
request
Prior art date
Application number
PCT/CN2016/084440
Other languages
English (en)
French (fr)
Inventor
党茂昌
Original Assignee
阿里巴巴集团控股有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 阿里巴巴集团控股有限公司 filed Critical 阿里巴巴集团控股有限公司
Publication of WO2016197850A1 publication Critical patent/WO2016197850A1/zh
Priority to US15/836,724 priority Critical patent/US10719456B2/en

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
    • G06F12/14—Protection against unauthorised use of memory or access to memory
    • G06F12/1416—Protection against unauthorised use of memory or access to memory by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights
    • G06F12/1425—Protection against unauthorised use of memory or access to memory by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights the protection being physical, e.g. cell, word, block
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533—Hypervisors; Virtual machine monitors
    • G06F9/45558—Hypervisor-specific management and integration aspects
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
    • G06F12/02—Addressing or allocation; Relocation
    • G06F12/0223—User address space allocation, e.g. contiguous or non contiguous base addressing
    • G06F12/023—Free address space management
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F12/00—Accessing, addressing or allocating within memory systems or architectures
    • G06F12/14—Protection against unauthorised use of memory or access to memory
    • G06F12/1416—Protection against unauthorised use of memory or access to memory by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights
    • G06F12/145—Protection against unauthorised use of memory or access to memory by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights the protection being virtual, e.g. for virtual blocks or segments before a translation mechanism
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
    • G06F21/6245—Protecting personal data, e.g. for financial or medical purposes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/78—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533—Hypervisors; Virtual machine monitors
    • G06F9/45558—Hypervisor-specific management and integration aspects
    • G06F2009/45583—Memory management, e.g. access or allocation
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/455—Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
    • G06F9/45533—Hypervisors; Virtual machine monitors
    • G06F9/45558—Hypervisor-specific management and integration aspects
    • G06F2009/45587—Isolation or security of virtual machine instances
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2212/00—Indexing scheme relating to accessing, addressing or allocation within memory systems or architectures
    • G06F2212/10—Providing a specific technical effect
    • G06F2212/1041—Resource optimization
    • G06F2212/1044—Space efficiency improvement
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2212/00—Indexing scheme relating to accessing, addressing or allocation within memory systems or architectures
    • G06F2212/10—Providing a specific technical effect
    • G06F2212/1052—Security improvement

Definitions

  • the present application relates to the field of electronic technologies, and in particular, to a method and apparatus for accessing private data in a physical memory of an electronic device.
  • One of the purposes of this application is to improve the security of private data in physical memory.
  • a method for accessing private data in a physical memory of an electronic device comprising:
  • the private data in a specific physical address interval in the physical memory is accessed through a secure memory access interface added to the virtual machine monitor of the electronic device, wherein the mapping relationship of the specific physical address interval is not established in the memory management unit of the electronic device.
  • the secure memory access interface is pre-designed to enable access to private data in the particular physical address range in physical memory.
  • an apparatus for accessing private data in a physical memory of an electronic device comprising:
  • a receiving unit configured to receive a request from a process running in the electronic device to access private data in the physical memory
  • An access unit configured to access private data in a specific physical address interval in the physical memory through a secure memory access interface added to the virtual machine monitor of the electronic device, wherein the memory management sheet of the electronic device
  • the mapping relationship of the specific physical address interval is not established in the meta-frame, and the secure memory access interface is pre-designed to implement access to the private data in the specific physical address interval in the physical memory.
  • the application adds a secure memory access interface to the virtual machine monitor of the electronic device, so that access to the private data in the physical memory can be performed only through the secure memory access interface, and cannot be normal through the operating system.
  • Access private data in physical memory thereby preventing malicious programs or viruses from intercepting private data in physical memory by obtaining access rights of the operating system (intercepting methods include dump memory (dump memory can refer to dumping data in memory to Another storage device), copying memory, etc.) to improve the security of private data in physical memory.
  • FIG. 1 is a flow chart of a method of accessing private data in a physical memory of an electronic device in accordance with a preferred embodiment of the present application
  • FIG. 2 is a schematic diagram showing a mapping relationship between address settings of physical memory in an electronic device based on a memory management unit in the prior art
  • FIG. 3 is a schematic structural diagram of accessing private data of a secure physical memory address space in this embodiment
  • FIG. 4 is a flow chart of a method of accessing private data in a physical memory of an electronic device in accordance with another preferred embodiment of the present application;
  • FIG. 5 is a schematic block diagram of an apparatus for accessing private data in a physical memory of an electronic device in accordance with a preferred embodiment of the present application
  • FIG. 6 is a schematic block diagram of an apparatus for accessing private data in a physical memory of an electronic device in accordance with a preferred embodiment of the present application
  • computer also referred to as “computer” in the context, is meant an intelligent electronic device that can perform predetermined processing, such as numerical calculations and/or logical calculations, by running predetermined programs or instructions, which can include a processor and a memory.
  • the execution instruction pre-stored in the memory is executed by the processor to execute a predetermined process, or is executed by hardware such as an ASIC, an FPGA, a DSP, or the like, or a combination of the two.
  • Computers include, but are not limited to, servers, personal computers, laptops, tablets, smartphones, and the like.
  • the computer includes a user device and a network device.
  • the user equipment includes, but is not limited to, a computer, a smart phone, a PDA, etc.
  • the network device includes but is not limited to a single network server, a server group composed of multiple network servers, or a cloud computing based computer Or a cloud composed of a network server, wherein cloud computing is a type of distributed computing, a super virtual computer composed of a group of loosely coupled computers.
  • the computer can be run separately to implement the application, and can also access the network and implement the application by interacting with other computers in the network.
  • the network in which the computer is located includes, but is not limited to, the Internet, a wide area network, a metropolitan area network, a local area network, a VPN network, and the like.
  • a method of accessing private data in a physical memory of an electronic device is provided.
  • the access includes reading data and/or writing data.
  • the electronic device includes, but is not limited to, a local computer, a cloud computer, a tablet computer, a mobile phone, and the like.
  • the physical memory may refer to a storage space of a memory module on a memory slot of a motherboard on an electronic device.
  • the private data may refer to information stored in a physical memory of the electronic device that is unwilling to be disclosed by a user of the electronic device, such as a personal photo, a video, a bank account, etc., and may also be related to the operation security of the electronic device. Data (the data is invisible to users of electronic devices).
  • the private data includes but is not limited to the plaintext decrypted by the ciphertext file on the memory, the private data generated when the program of the electronic device is running, and the electronic device is input from an external device (for example, a mobile phone connected through a data line) ) Obtained private data (including video, audio, photos or / and images) and so on.
  • the method of accessing private data in a physical memory of an electronic device can be performed in a memory management system of the electronic device.
  • the method for accessing private data in a physical memory of an electronic device includes:
  • S100 Receive a request from a process running in an electronic device to access private data in physical memory.
  • the process can generally refer to an instance of a program running in an electronic device (eg, a computer), such as when running an instant messaging application A, the process running on the electronic device by the application may include Aprotect.exe and A. .exe two processes.
  • each process can be assigned Give it its own private physical address range, and usually only access (read or / and write) data belonging to its own private physical address range.
  • the private data is as described above, including but not limited to the plaintext decrypted by the ciphertext file on the memory, the data generated when the program of the electronic device is run, and the data obtained by the electronic device from the outside (including video, audio, photo or / And pictures) and so on.
  • the request for accessing private data in the physical memory includes allocating a storage interval in the physical memory for the private data, writing the private data to a certain storage interval of the physical memory, and reading the storage interval from a certain storage interval in the physical memory. Private data or / and release a request for a certain storage interval in the physical memory pre-allocated for the private data.
  • the S100 includes:
  • the determination may be implemented by an automatic execution of an application in the electronic device, or may be implemented by responding to an operation of the user.
  • the determination can be implemented by at least one of the following:
  • the judgment routine determines that the data to be accessed by the request is private data.
  • the judging routine may be pre-stored in a database of the electronic device. When the program of the electronic device is running, the judging routine may automatically determine whether the data generated during the running of the program is private data.
  • Some data generated during the operation of the electronic device program are ordinary parameters that do not require privacy protection, and some are data that require privacy protection. Therefore, it is determined by the pre-programmed routine which type of data belongs. Such routines are currently known to those skilled in the art.
  • the data to be accessed by the request is data acquired by the electronic device from the outside, prompting the user whether it is necessary to store the data acquired from the outside as private data, and responding to the user confirmation that the data acquired from the outside needs to be stored as private data. And determining that the data to be accessed by the request is private data.
  • the data obtained from the outside is more complicated. Some externally obtained data is only general data, does not need to be protected as private data, and some is confidential data, which needs to be protected as private data. Moreover, such data cannot be judged by writing routines because the data obtained from the outside is complicated. Cause Therefore, it is often necessary for the user to confirm whether the data requires privacy protection.
  • the electronic device when the electronic device is associated with a mobile phone through a data line, and the mobile device application management program m for managing the mobile phone application is installed on the electronic device, and the mobile phone application management program m is run on the electronic device.
  • the mobile application management program m includes a process running on the electronic device to access data acquired from the external mobile phone.
  • the electronic device may prompt the user whether it needs to be externally
  • the data acquired by the connected mobile phone is stored as private data. If the user confirms the need, the data acquired from the outside is stored as private data in response to the user confirmation request, and it is determined that the data to be accessed by the request is private data.
  • the method for accessing private data in physical memory of an electronic device includes:
  • S110 accessing the private data in a specific physical address interval in the physical memory by using a secure memory access interface added to the virtual machine monitor of the electronic device, where the mapping relationship of the specific physical address interval is not established in the memory management unit of the electronic device
  • the secure memory access interface is pre-designed to enable access to private data in the particular physical address interval in physical memory.
  • the virtual machine monitor may refer to system software running on an electronic device (such as a computer) for maintaining a relatively independent environment between different processes, the environment supporting different processes to access corresponding data stored in physical memory. .
  • the secure memory access interface may refer to a predefined function or subroutine, program, and is designed to enable a secure application to implement access to private data in a particular physical address range in physical memory.
  • the security application may refer to an application developed based on the secure memory access interface, for example, providing the secure memory access interface to a developer of a communication software application, the developer based on the secure memory access interface A piece of code A in the communication software application is replaced with another piece of code B, thereby transforming the communication software application into a secure communication software application, whereby the secure communication software application can be based on the secure memory access interface (API) Implementing access to private data in a specific physical address range in physical memory.
  • API secure memory access interface
  • the secure memory access interface is customized by the manufacturer of the electronic device to enhance the security of the private data in the physical memory of the electronic device from the device level dimension for each electronic device.
  • the specific physical address interval in the physical memory may refer to a continuous secure physical memory address interval reserved in the physical memory, and the secure physical memory address interval is not set in the memory management unit of the electronic device. Set the mapping relationship.
  • FIG. 2 is a schematic diagram of a mapping relationship between address settings of physical memory in an electronic device based on a memory management unit in the prior art.
  • the prior art taking an electronic device as an example of a computer, since the physical memory of the computer is limited, the prior art often adopts a virtual memory technology (such as virtual memory paging management technology, virtual memory segment page type storage management, etc.) to alleviate memory shortage.
  • a virtual memory technology such as virtual memory paging management technology, virtual memory segment page type storage management, etc.
  • the address in the physical memory and the pseudo physical address of the virtual computer are set by the memory management unit (in order to distinguish it from the virtual memory management unit hereinafter, which may also be referred to as a real memory management unit).
  • the mapping relationship between the pseudo physical address and the virtual address assigned by the process whereby the computer operating system can access the physical memory by using the mapping relationship of the address.
  • each process is often assigned its own virtual address space, and is operated by a virtual computer built on a computer basis.
  • the virtual memory management unit (virtual MMU) of the system maps the virtual address space to a pseudo physical address on the virtual machine, and maps the pseudo physical address to a physical memory address in physical memory through a hypervisor.
  • virtual MMU virtual memory management unit
  • the management unit implements the management of virtual memory management units (virtual MMUs) and virtual machine monitors (hypervisors).
  • the computer operating system can use the mapping relationship of the address to access the physical memory, so the hacker can use the malicious program to attack the computer operating system to obtain the operating authority of the computer operating system. Access to private data in electronic devices, which seriously threatens the privacy of users.
  • the mapping relationship of the specific physical address interval is not established in the memory management unit of the electronic device, but is virtualized.
  • the secure memory access interface added to the machine monitor accesses the private data of a specific physical address interval (ie, the secure physical memory address space), that is, the access to the private data is not in the virtual memory management unit (virtual MMU).
  • the access of the private data establishes a mapping relationship between the virtual address and the pseudo physical address, and the virtual memory management unit accesses the private data in the secure physical memory address space based on the secure memory access interface.
  • the secure memory access interface (API) in this embodiment is customized by the manufacturer of the electronic device, Only the developer of the security program authenticated by the vendor is provided, so the secure memory access interface (API) is usually not obtained by the developer of the malicious program, and the malicious program accesses the electronic device through the secure memory access interface.
  • the secure memory access interface In the case of physical memory, it is impossible to access the private data in the physical memory by attacking the computer operating system by using the address mapping relationship, thereby improving the security of the private data in the physical memory.
  • the S110 includes:
  • the physical address subinterval located in the specific physical address interval is 1 GB for the private data (the starting address is, for example, 0 ⁇ 80000000, the ending address). Is 0xBFFFFFFF)
  • the private data is written into the allocated physical address subinterval.
  • the method for accessing the private data in the physical memory of the electronic device further includes:
  • the predetermined condition may refer to a termination of operation of a process that needs to access the private data.
  • a process is terminated, in order to improve the utilization of physical memory, you can release the physical address subinterval occupied by the private data of the process.
  • the method for accessing private data in a physical memory of an electronic device further includes:
  • S130 Perform authentication on the authentication information input by the user, where the security memory access interface added in the virtual machine monitor of the electronic device is used to access the private address in the specific physical address interval in the physical memory only after the authentication is passed. The steps of the data.
  • the manner in which the user inputs the authentication information for accessing the private data includes, but is not limited to, the user inputting personal identity authentication information (such as login account and password, avatar authentication, etc.), running a security application, and the like.
  • personal identity authentication information such as login account and password, avatar authentication, etc.
  • the authentication may refer to the personal identity authentication information.
  • the verification is performed to determine whether it is the user's own information; in the case of running the security application, the authentication may refer to determining whether the security application is a vendor-certified security application that provides a secure memory access interface.
  • an apparatus for accessing private data in a physical memory of an electronic device is provided, and the device for accessing private data in a physical memory of the electronic device may be implemented as full software for managing physical memory on the electronic device. It can also be implemented as a combination of software or hardware that manages physical memory on an electronic device.
  • the device for accessing private data in a physical memory of an electronic device includes:
  • the receiving unit 200 is configured to receive a request from a process running in the electronic device to access private data in the physical memory.
  • the access unit 210 is configured to access private data in a specific physical address interval in the physical memory through a secure memory access interface added in the virtual machine monitor of the electronic device, wherein the specific physical is not established in the memory management unit of the electronic device A mapping relationship of address intervals, the secure memory access interface being pre-designed to implement access to private data in the particular physical address interval in physical memory.
  • the accessing includes reading and/or writing.
  • the receiving unit 200 is configured to:
  • the receiving unit 200 determines that the data requested to be accessed is private data includes:
  • the data to be accessed by the request is a plaintext in which the ciphertext file on the memory is decrypted, it is judged that the data to be accessed by the request is private data.
  • the receiving unit 200 determines that the data requested to be accessed is private data includes:
  • the judgment routine determines that the data to be accessed by the request is private data.
  • the receiving unit 200 determines that the data requested to be accessed is private data includes:
  • the data to be accessed by the request is data acquired by the electronic device from the outside, prompting the user whether it is necessary to store the data acquired from the outside as private data;
  • the access unit 210 is configured to:
  • the access unit 210 is configured to:
  • the apparatus for accessing private data in a physical memory of an electronic device further includes:
  • the prompting unit 220 is configured to prompt the user to input authentication information for accessing the private data
  • the authentication unit 230 is configured to authenticate the authentication information input by the user,
  • the access unit 210 is configured to access private data in a specific physical address interval in the physical memory through the secure memory access interface added in the virtual machine monitor of the electronic device only after the authentication is passed.
  • each block of the flowchart or block diagram can represent a module, a program segment, or a portion of code that includes one or more of the Executable instructions.
  • the functions noted in the blocks may also occur in a different order than that illustrated in the drawings. For example, two consecutive blocks may be executed substantially in parallel, and they may sometimes be executed in the reverse order, depending upon the functionality involved.
  • each block of the block diagrams and/or flowcharts, and combinations of blocks in the block diagrams and/or flowcharts can be implemented in a dedicated hardware-based system that performs the specified function or operation. Or it can be implemented by a combination of dedicated hardware and computer instructions.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Software Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Medical Informatics (AREA)
  • Databases & Information Systems (AREA)
  • Storage Device Security (AREA)

Abstract

一种访问电子设备的物理内存中私密数据的方法和装置，其中所述方法包括：接收来自电子设备中运行的进程、访问物理内存中私密数据的请求（S100）；通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据（S110），其中在电子设备的内存管理单元中不建立该特定物理地址区间的映射关系，所述安全内存访问接口被预先设计成实现对物理内存中所述特定物理地址区间中的私密数据的访问。该方法和装置可以提升私密数据在物理内存中的安全性。

Description

一种访问电子设备的物理内存中私密数据的方法和装置
本申请要求2015年06月09日递交的申请号为201510314210.2、发明名称为“一种访问电子设备的物理内存中私密数据的方法和装置”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本申请涉及电子技术领域，尤其涉及一种访问电子设备的物理内存中私密数据的方法和装置。
背景技术
对于目前的大多数电子设备而言，例如计算机、手机等，由于现有技术中缺乏对电子设备物理内存中私密数据(诸如用户付款的账户名称、支付密码等)的保护，私密数据和普通数据都无差别地基于内存管理单元来管理，而操作系统在任何情况下都可以基于内存管理单元所建立的地址映射关系来访问物理内存中的私密数据，因而黑客可以利用恶意程序或病毒攻击操作系统来获得操作系统的访问权限，从而随意地访问电子设备中的私密数据，从而严重威胁到用户的隐私安全。
发明内容
本申请的目的之一是提升私密数据在物理内存中的安全性。
根据本申请的一个方面，提供了一种访问电子设备的物理内存中私密数据的方法，所述方法包括：
接收来自电子设备中运行的进程、访问物理内存中私密数据的请求；
通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据，其中在电子设备的内存管理单元中不建立该特定物理地址区间的映射关系，所述安全内存访问接口被预先设计成实现对物理内存中所述特定物理地址区间中的私密数据的访问。
根据本申请的另一个方面，还提供了一种访问电子设备的物理内存中私密数据的装置，所述装置包括：
接收单元，被配置为接收来自电子设备中运行的进程、访问物理内存中私密数据的请求；
访问单元，被配置为通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据，其中在电子设备的内存管理单 元中不建立该特定物理地址区间的映射关系，所述安全内存访问接口被预先设计成实现对物理内存中所述特定物理地址区间中的私密数据的访问。
与现有技术相比，本申请通过在电子设备的虚拟机监视器中加入安全内存访问接口，从而实现对物理内存中私密数据的访问只有通过安全内存访问接口才能进行，而无法通过操作系统正常地访问物理内存中的私密数据，进而防止恶意程序或病毒通过获取操作系统的访问权限来截取物理内存中的私密数据(截取的方式包括dump内存(dump内存可以指将内存中的数据转存到另一个存储装置)、复制内存等)，提升私密数据在物理内存中的安全性。
附图说明
通过阅读参照以下附图所作的对非限制性实施例所作的详细描述，本申请的其它特征、目的和优点将会变得更明显：
图1为根据本申请一个优选实施例的访问电子设备的物理内存中私密数据的方法的流程图；
图2提供了现有技术中基于内存管理单元对电子设备中的物理内存的地址设置映射关系的示意图；
图3提供了本实施例中对安全物理内存地址空间的私密数据的访问的结构示意图；
图4为根据本申请另一个优选实施例的访问电子设备的物理内存中私密数据的方法的流程图；
图5为根据本申请一个优选实施例的访问电子设备的物理内存中私密数据的装置的示意性框图；
图6为根据本申请一个优选实施例的访问电子设备的物理内存中私密数据的装置的示意性框图；
附图中相同或相似的附图标记代表相同或相似的部件。
具体实施方式
下面结合附图对本申请作进一步详细描述。
在更加详细地讨论示例性实施例之前应当提到的是，一些示例性实施例被描述成作为流程图描绘的处理或方法。虽然流程图将各项操作描述成顺序的处理，但是其中的许多操作可以被并行地、并发地或者同时实施。此外，各项操作的顺序可以被重新安排。当其操作完成时所述处理可以被终止，但是还可以具有未包括在附图 中的附加步骤。所述处理可以对应于方法、函数、规程、子例程、子程序等等。
在上下文中所称“计算机”，也称为“电脑”，是指可以通过运行预定程序或指令来执行数值计算和/或逻辑计算等预定处理过程的智能电子设备，其可以包括处理器与存储器，由处理器执行在存储器中预存的存续指令来执行预定处理过程，或是由ASIC、FPGA、DSP等硬件执行预定处理过程，或是由上述二者组合来实现。计算机包括但不限于服务器、个人电脑、笔记本电脑、平板电脑、智能手机等。
所述计算机包括用户设备与网络设备。其中，所述用户设备包括但不限于电脑、智能手机、PDA等；所述网络设备包括但不限于单个网络服务器、多个网络服务器组成的服务器组或基于云计算(Cloud Computing)的由大量计算机或网络服务器构成的云，其中，云计算是分布式计算的一种，由一群松散耦合的计算机集组成的一个超级虚拟计算机。其中，所述计算机可单独运行来实现本申请，也可接入网络并通过与网络中的其他计算机的交互操作来实现本申请。其中，所述计算机所处的网络包括但不限于互联网、广域网、城域网、局域网、VPN网络等。
需要说明的是，所述用户设备、网络设备和网络等仅为举例，其他现有的或今后可能出现的计算机或网络如可适用于本申请，也应包含在本申请保护范围以内，并以引用方式包含于此。
后面所讨论的方法(其中一些通过流程图示出)可以通过硬件、软件、固件、中间件、微代码、硬件描述语言或者其任意组合来实施。当用软件、固件、中间件或微代码来实施时，用以实施必要任务的程序代码或代码段可以被存储在机器或计算机可读介质(比如存储介质)中。(一个或多个)处理器可以实施必要的任务。
这里所公开的具体结构和功能细节仅仅是代表性的，并且是用于描述本申请的示例性实施例的目的。但是本申请可以通过许多替换形式来具体实现，并且不应当被解释成仅仅受限于这里所阐述的实施例。
应当理解的是，虽然在这里可能使用了术语“第一”、“第二”等等来描述各个单元，但是这些单元不应当受这些术语限制。使用这些术语仅仅是为了将一个单元与另一个单元进行区分。举例来说，在不背离示例性实施例的范围的情况下，第一单元可以被称为第二单元，并且类似地第二单元可以被称为第一单元。这里所使用的术语“和/或”包括其中一个或更多所列出的相关联项目的任意和所有组合。
应当理解的是，当一个单元被称为“连接”或“耦合”到另一单元时，其可以直接连接或耦合到所述另一单元，或者可以存在中间单元。与此相对，当一个单元 被称为“直接连接”或“直接耦合”到另一单元时，则不存在中间单元。应当按照类似的方式来解释被用于描述单元之间的关系的其他词语(例如“处于...之间”相比于“直接处于...之间”，“与...邻近”相比于“与...直接邻近”等等)。
这里所使用的术语仅仅是为了描述具体实施例而不意图限制示例性实施例。除非上下文明确地另有所指，否则这里所使用的单数形式“一个”、“一项”还意图包括复数。还应当理解的是，这里所使用的术语“包括”和/或“包含”规定所陈述的特征、整数、步骤、操作、单元和/或组件的存在，而不排除存在或添加一个或更多其他特征、整数、步骤、操作、单元、组件和/或其组合。
还应当提到的是，在一些替换实现方式中，所提到的功能/动作可以按照不同于附图中标示的顺序发生。举例来说，取决于所涉及的功能/动作，相继示出的两幅图实际上可以基本上同时执行或者有时可以按照相反的顺序来执行。
根据本申请的一个实施例，提供了一种访问电子设备的物理内存中私密数据的方法。
其中所述访问包括读数据和/或写数据。
所述电子设备包括但不限于本地计算机、云端计算机、平板电脑、手机等。
所述物理内存可以指电子设备上主板内存槽上的内存条的存储空间。
所述私密数据可以指使用电子设备的用户不愿意对外公开的、存储在所述电子设备的物理内存中的信息，如个人照片、视频、银行账户等等，也可以指与电子设备运行安全有关的数据(这些数据即使对电子设备的用户也是不可见的)。本实施例中，所述私密数据包括但不限于存储器上的密文文件解密成的明文、电子设备的程序运行时产生的私密数据、电子设备从外部输入设备(例如通过数据线外连的手机)获取的私密数据(包括视频、音频、照片或/和图片)等。
所述访问电子设备的物理内存中私密数据的方法可以在电子设备的内存管理系统中执行。
请参考图1，所述访问电子设备的物理内存中私密数据的方法包括：
S100，接收来自电子设备中运行的进程访问物理内存中私密数据的请求。
所述进程通常可以指电子设备(例如计算机)中正在运行的程序实例，例如当运行某一个即时通信应用程序A时，则该应用程序在该电子设备上运行的进程可能包括Aprotect.exe和A.exe两个进程。
通常对于在电子设备上运行的每个应用程序的进程而言，每个进程都可以被赋 予它自己的私有的物理地址区间，并且通常只可以访问(读或/和写)属于自己私有的物理地址区间的数据。
所述私密数据如上文所述，包括但不限于存储器上的密文文件解密成的明文、电子设备的程序运行时产生的数据、电子设备从外部获取的数据(包括视频、音频、照片或/和图片)等。
所述访问物理内存中私密数据的请求包括为私密数据分配该物理内存中的存储区间、将该私密数据写入物理内存的某一存储区间、从物理内存中的某一存储区间读取所述私密数据或/和释放为该私密数据预先分配的物理内存中的某一存储区间等请求。
可选地，所述S100包括：
-接收来自电子设备中运行的进程访问物理内存中数据的请求；
-判断所述请求要访问的数据是私密数据。
其中所述判断可以通过电子设备中的应用程序自动执行来实现，也可以通过响应于用户的操作来实现。
例如，所述判断可以通过以下中的至少之一来实现：
1)如果所述请求要访问的数据是将存储器上的密文文件解密成的明文，判断所述请求要访问的数据是私密数据。
2)如果所述请求要访问的数据是电子设备的程序运行时产生的数据，通过判断例程判断出所述请求要访问的数据是私密数据。
其中所述判断例程可以预先存储在电子设备的数据库里，当电子设备的程序运行时，该判断例程可以自动判断出程序运行过程中产生的数据是否为私密数据。
电子设备的程序运行时产生的数据，有些是不需要私密保护的普通参数，有些是需要私密保护的数据，因此，通过事先编好的例程进行判断属于哪类数据。目前，这种例程对于本领域技术人员来说是已知的。
3)如果所述请求要访问的数据是电子设备从外部获取的数据，向用户提示是否需要将从外部获取的数据作为私密数据存储，响应于用户确认需要将从外部获取的数据作为私密数据存储，判断出所述请求要访问的数据是私密数据。
从外部获取的数据，情况比较复杂。有些从外部获取的数据仅是一般性的数据，不需要作为私密数据保护，有的则是一些机密数据，需要作为私密数据保护。而且，这样的数据是无法通过编写例程来判断的，因为从外部获取的数据情况很复杂。因 此，往往需要让用户确认该数据是否需要私密保护。
例如，当通过数据线将所述电子设备与手机关联，而该电子设备上安装有管理该手机应用的手机应用管理程序m，进而在所述电子设备上运行该手机应用管理程序m的过程中，该手机应用管理程序m所包括的在该电子设备上运行的进程要访问从外连的手机获取的数据，则在这种情况下，则可以由该电子设备向用户提示是否需要将从外连的手机获取的数据作为私密数据存储，如果用户确认需要，则响应于用户确认需要，将从外部获取的数据作为私密数据存储，并判断所述请求要访问的数据是私密数据。
请继续参考图1，所述访问电子设备的物理内存中私密数据的方法包括：
S110，通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据，其中在电子设备的内存管理单元中不建立该特定物理地址区间的映射关系，所述安全内存访问接口(API)被预先设计成实现对物理内存中所述特定物理地址区间中的私密数据的访问。
其中所述虚拟机监视器(Hypervisor)可以指运行在电子设备(例如计算机)的系统软件，用于维护不同进程之间相对独立的环境，该环境支持不同进程去访问物理内存上存储的相应数据。
其中所述安全内存访问接口(API)可以指预先定义的函数或子程序、程序，并被设计成使安全应用程序实现对物理内存中特定物理地址区间中的私密数据的访问。
其中所述安全应用程序可以指基于该安全内存访问接口所开发的应用程序，例如，将该安全内存访问接口提供给某通讯软件应用程序的开发者，该开发者基于该安全内存访问接口将该通讯软件应用程序中的一段代码A替换成另一段代码B，进而使该通信软件应用程序转变为安全的通信软件应用程序，从而该安全的通信软件应用程序可以基于所述安全内存访问接口(API)实现对物理内存中特定物理地址区间中的私密数据的访问。
为了安全起见，该安全内存访问接口(API)由所述电子设备的厂商定制，从而针对每台电子设备而言，从设备级的维度来提升电子设备的物理内存中私密数据的安全。
所述物理内存中特定物理地址区间可以指在物理内存中预留的一段连续的安全物理内存地址区间，该安全物理内存地址区间不在电子设备的内存管理单元中设 置映射关系。
对于所述映射关系的理解可以参考图2，图2提供了现有技术中基于内存管理单元对电子设备中的物理内存的地址设置映射关系的示意图。
在现有技术中，以电子设备为计算机举例，由于计算机的物理内存有限，现有技术往往采用虚拟内存技术(诸如虚拟内存分页管理技术、虚拟内存段页式存储管理等)来缓解内存的紧张。在采用虚拟内存技术的情况下，通过内存管理单元(为了区别于下文中的虚拟内存管理单元，在此也可以称为真实内存管理单元)设置物理内存中的地址与虚拟计算机的伪物理地址之间的映射关系，并设置所述伪物理地址与进程被赋予的虚拟地址的映射关系，由此，计算机操作系统则可以利用地址的映射关系对物理内存进行访问。
更具体地，参考图2而言，在应用虚拟内存技术对计算机物理内存进行管理的过程中，往往为每个进程分配属于它自己的虚拟地址空间，并且通过建立在计算机基础上的虚拟计算机操作系统的虚拟内存管理单元(虚拟MMU)将该虚拟地址空间与虚拟计算机上的伪物理地址映射，以及通过虚拟机监视器(Hypervisor)将该伪物理地址与物理内存中的物理内存地址映射。实际上，无论是从虚拟地址映射到伪物理地址，还是从伪物理地址映射到物理内存地址，都可以看作是由计算机的真实内存管理单元来统一设置的，只是该统一设置是基于真实内存管理单元对虚拟内存管理单元(虚拟MMU)和虚拟机监视器(Hypervisor)的管理来实现的。
如上文所述，对于设置了映射关系的物理内存，计算机操作系统则可以利用地址的映射关系对物理内存进行访问，因而黑客可以利用恶意程序攻击计算机操作系统来获取计算机操作系统的操作权限而随意地访问电子设备中的私密数据，从而严重威胁到用户的隐私安全。
为了解决上述问题，提升私密数据在物理内存的安全性，请参考图3，本实施例中，在电子设备的内存管理单元中不建立所述特定物理地址区间的映射关系，而是通过在虚拟机监视器中加入的安全内存访问接口来访问特定物理地址区间(即安全物理内存地址空间)的私密数据，也即对于私密数据的访问而言，在虚拟内存管理单元(虚拟MMU)中不为该私密数据的访问建立虚拟地址与伪物理地址之间的映射关系，而是由虚拟内存管理单元基于安全内存访问接口来访问安全物理内存地址空间中的私密数据。
由于本实施例中的该安全内存访问接口(API)由所述电子设备的厂商定制， 只会提供给该厂商认证过的安全程序的开发者，因而该安全内存访问接口(API)通常不会被恶意程序的开发者获取，进而恶意程序在未通过该安全内存访问接口访问电子设备的物理内存的情况下，无法通过攻击计算机操作系统利用地址映射关系对物理内存中的私密数据进行访问，提升了私密数据在物理内存的安全性。
对于图3，需要说明的是，虽然没有在图3中示出如图2所示的伪物理地址，但是这只是为了更清楚地描述对安全物理内存地址空间中的私密数据进行访问的结构，并不表示对计算机物理内存中除安全物理内存地址空间以外的数据的访问就不可以参考图2所示的虚拟内存技术来管理。
可选地，所述S110包括：
-通过该安全内存访问接口为要访问的私密数据分配对应的位于所述特定物理地址区间中的物理地址子区间。
例如，所述特定物理地址区间大于1GB(起始地址例如为0x80000000)，则为该私密数据分配位于所述特定物理地址区间中的物理地址子区间为1GB(起始地址例如为0x80000000，结束地址为0xBFFFFFFF)
-在所述物理地址子区间中执行对所述私密数据的访问。
例如，将所述私密数据写入所述分配的物理地址子区间中。
可选地，所述访问电子设备的物理内存中私密数据的方法还包括：
-响应于预定条件，释放所述特定物理地址区间中的私密数据对应的物理地址子区间。
其中，所述预定条件可以指需要访问该私密数据的进程的运行终止。当一个进程运行终止时，为了提升物理内存的利用率，可以将该进程的私密数据之前所占有的物理地址子区间释放。
可选地，请参考图4，所述访问电子设备的物理内存中私密数据的方法还包括：
S120，提示用户输入用于访问私密数据的认证信息；以及
S130，对用户输入的认证信息进行鉴权，其中只有在鉴权通过的前提下才执行通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据的步骤。
其中，所述用户输入用于访问私密数据的认证信息的方式包括但不限于用户输入个人身份认证信息(诸如登录账户和密码、头像认证等)、运行安全应用程序等。
以用户输入的个人身份认证信息为例，所述鉴权可以指对该个人身份认证信息 进行验证，判断是否为用户本人的信息；以运行安全应用程序为例，所述鉴权可以指判断所述安全应用程序是否为提供安全内存访问接口的厂商认证的安全应用程序。
根据本发明的一个实施例，提供了一种访问电子设备的物理内存中私密数据的装置，所述访问电子设备的物理内存中私密数据的装置可以实现为电子设备上管理物理内存的完全软件，也可以实现为电子设备上管理物理内存的软件或硬件的结合。
请参考图5，所述访问电子设备的物理内存中私密数据的装置包括：
接收单元200，被配置为接收来自电子设备中运行的进程、访问物理内存中私密数据的请求。
访问单元210，被配置为通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据，其中在电子设备的内存管理单元中不建立该特定物理地址区间的映射关系，所述安全内存访问接口被预先设计成实现对物理内存中所述特定物理地址区间中的私密数据的访问。
可选地，所述访问包括读和/或写。
可选地，所述接收单元200被配置为：
-接收来自电子设备中运行的进程、访问物理内存中数据的请求；
-判断所述请求要访问的数据是私密数据。
可选地，所述接收单元200判断所述请求要访问的数据是私密数据的过程包括：
-如果所述请求要访问的数据是将存储器上的密文文件解密成的明文，判断所述请求要访问的数据是私密数据。
可选地，所述接收单元200判断所述请求要访问的数据是私密数据的过程包括：
-如果所述请求要访问的数据是电子设备的程序运行时产生的数据，通过判断例程判断出所述请求要访问的数据是私密数据。
可选地，所述接收单元200判断所述请求要访问的数据是私密数据的过程包括：
-如果所述请求要访问的数据是电子设备从外部获取的数据，向用户提示是否需要将从外部获取的数据作为私密数据存储；
-响应于用户确认需要将从外部获取的数据作为私密数据存储，判断出所述请求要访问的数据是私密数据。
可选地，所述访问单元210被配置为：
-通过该安全内存访问接口为要访问的私密数据分配对应的位于所述特定物理地址区间中的物理地址子区间；
-在所述物理地址子区间中执行对所述私密数据的访问。
可选地，所述访问单元210被配置为：
-响应于预定条件，释放所述特定物理地址区间中的私密数据对应的物理地址子区间。
可选地，请参考图6，所述访问电子设备的物理内存中私密数据的装置还包括：
提示单元220，被配置为提示用户输入用于访问私密数据的认证信息；
鉴权单元230，被配置为对用户输入的认证信息进行鉴权，
其中所述访问单元210被配置为只有在鉴权通过的前提下才通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据。
应当理解，图5和图6所述的结构框图仅仅是为了示例的目的，而不是对本申请范围的限制。在某些情况下，可以根据具体情况增加或减少某些单元。
所属技术领域的技术人员知道，本申请可以实现为系统、方法或计算机程序产品。本领域技术人员应能理解，上述各单元仅为示例，在实践中，它们可以是分别独立的单元，或者任意两个单元集成在一个单元中，也可全部集成在一个单元中。
附图中的流程图和框图显示了根据本申请的多个实施例的系统、方法和计算机程序产品的可能实现的体系架构、功能和操作。在这点上，流程图或框图中的每个方框可以代表一个模块、程序段或代码的一部分，所述模块、程序段或代码的一部分包含一个或多个用于实现规定的逻辑功能的可执行指令。也应当注意，在有些作为替换的实现中，方框中所标注的功能也可以以不同于附图中所标注的顺序发生。例如，两个连续的方框实际上可以基本并行地执行，它们有时也可以按相反的顺序执行，这依所涉及的功能而定。也要注意的是，框图和/或流程图中的每个方框、以及框图和/或流程图中的方框的组合，可以用执行规定的功能或操作的专用的基于硬件的系统来实现，或者可以用专用硬件与计算机指令的组合来实现。
对于本领域技术人员而言，显然本申请不限于上述示范性实施例的细节，而且在不背离本申请的精神或基本特征的情况下，能够以其他的具体形式实现本申请。因此，无论从哪一点来看，均应将实施例看作是示范性的，而且是非限制性的，本申请的范围由所附权利要求而不是上述说明限定，因此旨在将落在权利要求的等同 要件的含义和范围内的所有变化囊括在本申请内。不应将权利要求中的任何附图标记视为限制所涉及的权利要求。

Claims (18)

  1. 一种访问电子设备的物理内存中私密数据的方法，所述方法包括：
    接收来自电子设备中运行的进程、访问物理内存中私密数据的请求；
    通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据，其中在电子设备的内存管理单元中不建立该特定物理地址区间的映射关系，所述安全内存访问接口被预先设计成实现对物理内存中所述特定物理地址区间中的私密数据的访问。
  2. 根据权利要求1所述的方法，其中所述访问包括读和/或写。
  3. 根据权利要求1所述的方法，其中通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据的步骤包括：
    通过该安全内存访问接口为要访问的私密数据分配对应的位于所述特定物理地址区间中的物理地址子区间；
    在所述物理地址子区间中执行对所述私密数据的访问。
  4. 根据权利要求3所述的方法，还包括：
    响应于预定条件，释放所述特定物理地址区间中的私密数据对应的物理地址子区间。
  5. 根据权利要求1所述的方法，其中接收来自电子设备中运行的进程、访问物理内存中私密数据的请求的步骤包括：
    接收来自电子设备中运行的进程的、访问物理内存中数据的请求；
    判断所述请求要访问的数据是私密数据。
  6. 根据权利要求5所述的方法，其中判断所述请求要访问私密数据的步骤包括：
    如果所述请求要访问的数据是将存储器上的密文文件解密成的明文，判断所述请求要访问的数据是私密数据。
  7. 根据权利要求5所述的方法，其中判断所述请求要访问私密数据的步骤包括：
    如果所述请求要访问的数据是电子设备的程序运行时产生的数据，通过判断例程判断出所述请求要访问的数据是私密数据。
  8. 根据权利要求5所述的方法，其中判断所述请求要访问私密数据的步骤包括：
    如果所述请求要访问的数据是电子设备从外部获取的数据，向用户提示是否需要将从外部获取的数据作为私密数据存储；
    响应于用户确认需要将从外部获取的数据作为私密数据存储，判断出所述请求要访 问的数据是私密数据。
  9. 根据权利要求1所述的方法，还包括：
    提示用户输入用于访问私密数据的认证信息；
    对用户输入的认证信息进行鉴权，其中只有在鉴权通过的前提下才执行通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据的步骤。
  10. 一种访问电子设备的物理内存中私密数据的装置，所述装置包括：
    接收单元，被配置为接收来自电子设备中运行的进程、访问物理内存中私密数据的请求；
    访问单元，被配置为通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据，其中在电子设备的内存管理单元中不建立该特定物理地址区间的映射关系，所述安全内存访问接口被预先设计成实现对物理内存中所述特定物理地址区间中的私密数据的访问。
  11. 根据权利要求10所述的装置，其中所述访问包括读和/或写。
  12. 根据权利要求10所述的装置，其中所述访问单元被配置为：
    通过该安全内存访问接口为要访问的私密数据分配对应的位于所述特定物理地址区间中的物理地址子区间；
    在所述物理地址子区间中执行对所述私密数据的访问。
  13. 根据权利要求12所述的装置，其中所述访问单元还被配置为：
    响应于预定条件，释放所述特定物理地址区间中的私密数据对应的物理地址子区间。
  14. 根据权利要求10所述的装置，其中所述接收单元被配置为：
    接收来自电子设备中运行的进程、访问物理内存中数据的请求；
    判断所述请求要访问的数据是私密数据。
  15. 根据权利要求14所述的装置，其中所述接收单元判断所述请求要访问的数据是私密数据的过程包括：
    如果所述请求要访问的数据是将存储器上的密文文件解密成的明文，判断所述请求要访问的数据是私密数据。
  16. 根据权利要求14所述的装置，其中所述接收单元判断所述请求要访问的数据是私密数据的过程包括：
    如果所述请求要访问的数据是电子设备的程序运行时产生的数据，通过判断例程判断出所述请求要访问的数据是私密数据。
  17. 根据权利要求14所述的装置，其中所述接收单元判断所述请求要访问的数据是私密数据的过程包括：
    如果所述请求要访问的数据是电子设备从外部获取的数据，向用户提示是否需要将从外部获取的数据作为私密数据存储；
    响应于用户确认需要将从外部获取的数据作为私密数据存储，判断出所述请求要访问的数据是私密数据。
  18. 根据权利要求10所述的装置，还包括：
    提示单元，被配置为提示用户输入用于访问私密数据的认证信息；
    鉴权单元，被配置为对用户输入的认证信息进行鉴权；
    其中所述访问单元被配置为只有在鉴权通过的前提下才通过电子设备的虚拟机监视器中加入的安全内存访问接口来访问物理内存中特定物理地址区间中的私密数据。
PCT/CN2016/084440 2015-06-09 2016-06-02 一种访问电子设备的物理内存中私密数据的方法和装置 WO2016197850A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US15/836,724 US10719456B2 (en) 2015-06-09 2017-12-08 Method and apparatus for accessing private data in physical memory of electronic device

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510314210.2 2015-06-09
CN201510314210.2A CN106295267B (zh) 2015-06-09 2015-06-09 一种访问电子设备的物理内存中私密数据的方法和装置

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US15/836,724 Continuation US10719456B2 (en) 2015-06-09 2017-12-08 Method and apparatus for accessing private data in physical memory of electronic device

Publications (1)

Publication Number Publication Date
WO2016197850A1 true WO2016197850A1 (zh) 2016-12-15

Family

ID=57502887

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/084440 WO2016197850A1 (zh) 2015-06-09 2016-06-02 一种访问电子设备的物理内存中私密数据的方法和装置

Country Status (3)

Country Link
US (1) US10719456B2 (zh)
CN (1) CN106295267B (zh)
WO (1) WO2016197850A1 (zh)

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107133517B (zh) * 2017-05-08 2020-01-07 成都德涵信息技术有限公司 一种基于内存中数据加密和计算的数据还原方法
CN109901911B (zh) * 2018-11-22 2023-07-07 海光信息技术股份有限公司 一种信息设置方法、控制方法、装置及相关设备
CN112417470B (zh) * 2020-11-06 2023-06-27 上海壁仞智能科技有限公司 实现gpu数据安全访问的方法、装置、电子设备及存储介质

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101281580A (zh) * 2008-05-14 2008-10-08 北京深思洛克数据保护中心 一种扩展信息安全设备的存储器的方法
CN101349980A (zh) * 2007-07-18 2009-01-21 深圳市顶星数码网络技术有限公司 硬盘资料备份与保护方法
CN103309819A (zh) * 2013-05-30 2013-09-18 苏州亮智科技有限公司 嵌入式系统及其中的内存安全管理方法
CN103678175A (zh) * 2013-12-05 2014-03-26 长城信息产业股份有限公司 一种地址隐藏方法及基于地址隐藏技术的嵌入式设备
WO2014164536A1 (en) * 2013-03-12 2014-10-09 Qualcomm Incorporated Method and apparatus to selectively enable operations of a virtual machine monitor on demand

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7496695B2 (en) * 2005-09-29 2009-02-24 P.A. Semi, Inc. Unified DMA
US8819676B2 (en) * 2007-10-30 2014-08-26 Vmware, Inc. Transparent memory-mapped emulation of I/O calls
CN102523215B (zh) * 2011-12-15 2014-10-01 北京海云捷迅科技有限公司 基于kvm虚拟化平台的虚拟机在线杀毒系统
US9191394B2 (en) * 2012-02-08 2015-11-17 Microsoft Technology Licensing, Llc Protecting user credentials from a computing device
TWI488093B (zh) 2013-03-19 2015-06-11 Au Optronics Corp 觸控位置的偵測方法及使用其之光學式觸控裝置
WO2015061970A1 (zh) * 2013-10-29 2015-05-07 华为技术有限公司 一种访问内存的方法及设备
JP6186387B2 (ja) * 2015-03-19 2017-08-23 株式会社日立製作所 秘匿データ処理システム
CN104751050A (zh) * 2015-04-13 2015-07-01 成都睿峰科技有限公司 一种客户端应用程序管理方法

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101349980A (zh) * 2007-07-18 2009-01-21 深圳市顶星数码网络技术有限公司 硬盘资料备份与保护方法
CN101281580A (zh) * 2008-05-14 2008-10-08 北京深思洛克数据保护中心 一种扩展信息安全设备的存储器的方法
WO2014164536A1 (en) * 2013-03-12 2014-10-09 Qualcomm Incorporated Method and apparatus to selectively enable operations of a virtual machine monitor on demand
CN103309819A (zh) * 2013-05-30 2013-09-18 苏州亮智科技有限公司 嵌入式系统及其中的内存安全管理方法
CN103678175A (zh) * 2013-12-05 2014-03-26 长城信息产业股份有限公司 一种地址隐藏方法及基于地址隐藏技术的嵌入式设备

Also Published As

Publication number Publication date
CN106295267B (zh) 2019-04-19
CN106295267A (zh) 2017-01-04
US10719456B2 (en) 2020-07-21
US20180101485A1 (en) 2018-04-12

Similar Documents

Publication Publication Date Title
US8505084B2 (en) Data access programming model for occasionally connected applications
US10348711B2 (en) Restricting network access to untrusted virtual machines
US9622068B2 (en) System, method and computer program product for connecting roaming mobile devices to a virtual device platform
US10268827B2 (en) Method and system for securing data
US9426147B2 (en) Protected device management
US20160342784A1 (en) Mobile device authentication
US9172724B1 (en) Licensing and authentication with virtual desktop manager
EP2973171B1 (en) Context based switching to a secure operating system environment
CN110546979B (zh) 在服务与应用之间的多级分布式访问控制
CN104982005A (zh) 虚拟化环境中的特权加密服务
KR101837678B1 (ko) 신뢰실행환경 기반의 컴퓨팅 장치
JP2022522678A (ja) セキュア実行ゲスト所有者環境制御
US11080385B1 (en) Systems and methods for enabling multi-factor authentication for seamless website logins
EP4172818B1 (en) Shared resource identification
WO2016197850A1 (zh) 一种访问电子设备的物理内存中私密数据的方法和装置
US11048809B1 (en) Systems and methods for detecting misuse of online service access tokens
US8646068B2 (en) Home image content securely isolated from corporate IT
US20230177148A1 (en) Liveness guarantees in secure enclaves using health tickets
US20190303305A1 (en) Systems and methods for providing secure memory
US12008084B2 (en) System and method for autonomous software licensing during bootup process
CN117751554A (zh) 作为域资源的外部身份提供者
US10546118B1 (en) Using a profile to provide selective access to resources in performing file operations
CN118077173A (zh) 应用作为资源主体或服务主体
US20140380421A1 (en) Insecure Connection Prohibition

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16806748

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 16806748

Country of ref document: EP

Kind code of ref document: A1